Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Dongyi Liu

dblp:134/8279 · DBLP profile ↗
← Back
2ranked-venue papers
0as first author
2since 2021 · last 2026
—ORCID · unresolved

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 2 · 2 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
1 paper
Graph learning · 67% Trustworthy machine learning · 33%
Network and information security
1 paper
Security and privacy of machine learning · 100%

Topics — the 5 heaviest of 5, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Trustworthy machine learning › neural network security
backdoor vulnerability
0.912025
Attack by Yourself: Effective and Unnoticeable Multi-Category Graph Backdoor Attacks with Subgraph Triggers Pool · NeurIPS 2025
Machine learning › Graph learning
graph neural network
0.912025
Attack by Yourself: Effective and Unnoticeable Multi-Category Graph Backdoor Attacks with Subgraph Triggers Pool · NeurIPS 2025
Machine learning › Graph learning › graph neural network
node classification
0.912025
Attack by Yourself: Effective and Unnoticeable Multi-Category Graph Backdoor Attacks with Subgraph Triggers Pool · NeurIPS 2025
Security and privacy of machine learning › adversarial attack
backdoor attack
0.912025
Attack by Yourself: Effective and Unnoticeable Multi-Category Graph Backdoor Attacks with Subgraph Triggers Pool · NeurIPS 2025
Security and privacy of machine learning
graph neural network security
0.912025
Attack by Yourself: Effective and Unnoticeable Multi-Category Graph Backdoor Attacks with Subgraph Triggers Pool · NeurIPS 2025

Methods — techniques the papers use, named apart from their topics

subgraph triggers · 1.7select-then-attach strategy · 1.7attachment probability · 1.7
YearPublicationVenuePosition
2026 Category-Specific Trigger Backdoor Attacks on Graph Neural Networks
abstract
Graph Neural Networks (GNNs) have achieved remarkable success in various applications, while still exhibiting high vulnerability to backdoor attacks when applied to node classification. Existing single-category attack methods typically rely on adaptive triggers that force victim nodes to be misclassified into a fixed target label, but they often neglect the inherent structural and feature priors associated with the target category. In this work, we propose a novel and effective backdoor attack framework Category-Specific Trigger Backdoor Attacks (CSTBA), employing category-specific information to generate more natural and unnoticeable triggers. Specifically, we introduce a Category-Specific Subgraph Triggers Pool (CS-STP) to capture representative patterns of the target category, along with a Match-and-Attach Strategy (MAS) to unnoticeably attach triggers to victim nodes, thereby ensuring that the modifications remain effective and unnoticeable within the graph. Extensive experiments on multiple benchmark datasets demonstrate that our method significantly enhances both the attack success rate (ASRs) and the unnoticeability of the attack compared with existing single-category approaches, highlighting the critical importance of category-aware trigger design in GNN backdoor attacks.
Yiwen Jiang, Wensi Liu, Linbo Shao, Dongyi Liu, Jiangtong Li
Int. J. Pattern Recognit. Artif. Intell.4
2025 Attack by Yourself: Effective and Unnoticeable Multi-Category Graph Backdoor Attacks with Subgraph Triggers Pool
abstract
Graph Neural Networks (GNNs) have achieved significant success in various real-world applications, including social networks, finance systems, and traffic management. Recent researches highlight their vulnerability to backdoor attacks in node classification, where GNNs trained on a poisoned graph misclassify a test node only when specific triggers are attached. These studies typically focus on single attack categories and use adaptive trigger generators to create node-specific triggers. However, adaptive trigger generators typically have a simple structure, limited parameters, and lack category-aware graph knowledge, which makes them struggle to handle backdoor attacks across multiple categories as the number of target categories increases. We address this gap by proposing a novel approach for Effective and Unnoticeable Multi-Category (EUMC) graph backdoor attacks, leveraging subgraph from the attacked graph as category-aware triggers to precisely control the target category. To ensure the effectiveness of our method, we construct a Multi-Category Subgraph Triggers Pool (MC-STP) using the subgraphs of the attacked graph as triggers. We then exploit the attachment probability shifts of each subgraph trigger as category-aware priors for target category determination. Moreover, we develop a ``select then attach'' strategy that connects suitable category-aware trigger to attacked nodes for unnoticeability. Extensive experiments across different real-world datasets confirm the efficacy of our method in conducting multi-category graph backdoor attacks on various GNN models and defense strategies.
Jiangtong Li, Dongyi Liu, Kun Zhu 0036, Dawei Cheng, Changjun Jiang 0002
NeurIPS2