BadImplant is the first multi-targeted backdoor attack on GNN graph classification that uses subgraph injection to achieve high success rates on multiple target labels with minimal clean accuracy loss.
Attack by yourself: Effective and unnoticeable multi-category graph back- door attacks with subgraph triggers pool
2 Pith papers cite this work. Polarity classification is still indexing.
2
Pith papers citing it
years
2026 2representative citing papers
A defense framework detects both subgraph and feature-based graph backdoors by exploiting their lower node-neighborhood feature homophily via neighbor-aware reconstruction loss and robust training.
citing papers explorer
-
BadImplant: Injection-based Multi-Targeted Graph Backdoor Attack
BadImplant is the first multi-targeted backdoor attack on GNN graph classification that uses subgraph injection to achieve high success rates on multiple target labels with minimal clean accuracy loss.
-
Universal Graph Backdoor Defense: A Feature-based Homophily Perspective
A defense framework detects both subgraph and feature-based graph backdoors by exploiting their lower node-neighborhood feature homophily via neighbor-aware reconstruction loss and robust training.