Poisoning the Inner Prediction Logic of Graph Neural Networks for Clean-Label Backdoor Attacks

ArXi:2603.05004v2 Announce Type: replace-cross Graph Neural Networks (GNNs) have achieved remarkable results in various tasks. Recent studies reveal that graph backdoor attacks can poison the GNN model to predict test nodes with triggers attached as the target class. However, apart from injecting triggers to