Graph Neural Networks (GNNs) have achieved remarkable performance in graph representation learning, yet their inherent vulnerability to adversarial attacks poses severe security risks. Especially, black-box node injection attacks have become a major threat to GNNs since they inject malicious nodes without altering the original graph topology. However, they typically decouple the generation of malicious node features and edge connections, thereby resulting in suboptimal attack efficacy under stringent budgets. To address this critical issue, this study proposes a novel Target-aware Interaction-guided Reinforcement learning for Black-box node injection Attacks on GNNs (TIRBA), which formulates the attack as a Markov Decision Process and jointly optimizes node feature generation and edge construction in a heterogeneous action space. Firstly, TIRBA designs a target-aware interaction encoder to fuse information of node features and edges. Further, it introduces a class-center guidance mechanism to utilize prior class distribution information, thereby guiding efficient exploration of the high-dimensional feature space. Finally, a topology difference-aware state value evaluation is adopted to explicitly capture local structural anomalies caused by injected nodes, thereby stabilizing the reinforcement learning training process. Experimental results demonstrate that the proposed TIRBA significantly outperforms state-of-the-art black-box node injection attack methods.
ER-MIA: Black-Box Adversarial Memory Injection Attacks on Long-Term Memory-Augmented Large Language Models
Department of Computer Science, The University of Iowa(爱荷华大学计算机科学系);School of Computing, State University of New York at Binghamton(纽约州立大学布法罗分校计算机学院);Department of Computer Science, University of Nevada, Las Vegas(内华达大学拉斯维加斯分校计算机科学系);Department of Computer Science(计算机科学系);Software Engineering, Auburn University(阿伯茨罕大学软件工程系)
Localize and Neutralize: Gradient-guided Token Suppression against Visual Prompt Injection Attack
School of Advanced Interdisciplinary Sciences, UCAS(UCAS交叉学科研究院);School of Electronic, Electrical and Communication Engineering, UCAS(UCAS电子电气与通信工程学院);State Key Laboratory of AI Safety, Institute of Computing Technology, CAS(中国科学院计算技术研究所人工智能安全国家重点实验室);Alibaba Group(阿里巴巴集团);School of Computer Science and Technology, UCAS(UCAS计算机科学与技术学院);Beijing Academy of Artificial Intelligence(北京人工智能研究院);Key Laboratory of Big Data Mining and Knowledge Management, UCAS(UCAS大数据挖掘与知识管理重点实验室)
Ten Words Only Still Help: Improving Black-Box AI-Generated Text Detection via Proxy-Guided Efficient Re-Sampling
Key Lab of Intelligent Information Processing of Chinese Academy of Sciences(中国科学院智能信息处理重点实验室);Institute of Computing Technology, Chinese Academy of Sciences(中国科学院计算技术研究所);University of Chinese Academy of Sciences(中国科学院大学);Xi’an Jiaotong University(西安交通大学)
Efficient Black-box Adversarial Attacks via Bayesian Optimization Guided by a Function Prior
Tsinghua University(清华大学);JQ Investments(JQ投资);Academy of Mathematics and Systems Science, Chinese Academy of Sciences(中国科学院数学与系统科学研究院);University of Chinese Academy of Sciences(中国科学院大学);RealAI;Kaiyuan International Mathematical Sciences Institute(开源国际数学科学研究院)
GLiRA: Black-Box Membership Inference Attack via Knowledge Distillation
Artificial Intelligence Research Institute(人工智能研究所);Skolkovo Institute of Science and Technology(斯科尔科沃科学技术研究所);Moscow Institute of Physics and Technology(莫斯科物理技术学院);ISP RAS Research Center for Trusted Artificial Intelligence(俄罗斯科学院信息学研究所可信人工智能研究中心)
WASHH: An Anchor-Aware Whale-Guided Selection Hyper-Heuristic for Continuous Optimization and SVC Configuration
Faculty of Applied Sciences, Macao Polytechnic University(澳门理工学院应用科学学院);School of Mechanical and Electrical Engineering and Automation, Shanghai University(上海大学机械与自动化工程学院);Pazhou Lab (Huangpu), Guangzhou(广州 Pazhou 实验室(黄埔));College of Animal Science and Technology, Zhongkai University of Agriculture and Engineering(仲恺农业工程学院动物科学与技术学院);Macao Polytechnic University(澳门理工学院)
OralBBNet: Spatially Guided Dental Segmentation of Panoramic X-Rays with Bounding Box Priors
Department of Computer Science and Engineering(计算机科学与工程系);School of IT and Engineering(信息与工程学院);Indian Institute of Technology Kharagpur(印度理工学院Kharagpur分校);Kazakh-British Technical University(哈萨克-英国技术大学);Intelligent Devices Institute(智能设备研究所);St. Petersburg Electrotechnical University "LETI"(圣彼得堡电力大学"LETI");Department of Automation and Control Processes(自动化与控制过程系)