Jilian Zhang

Sanitizing Backdoored Graph Neural Networks: A Multidimensional Approach

Graph Neural Networks (GNNs) are known to be prone to adversarial attacks, among which backdoor attack is a major security threat. By injecting backdoor triggers into a graph and assigning a target class label to nodes attached to the triggers, the attacker can mislead the GNN model trained on the p