, Tian Tian, Xin Huang, Lin Wang, Jun Zhu, and Le Song. Adversarial attack on graph structured data., 2018.

Xuanqing Liu, Si Si, Xiaojin Zhu, Yang Li, and Cho-Jui Hsieh. A unified framework for data poisoning attack to graph-based semi-supervised learning., 2019.

Aleksandar Bojchevski and Stephan G[ü]{}nnemann. Adversarial attacks on node embeddings via graph poisoning. In [*ICML*]{}, pages 695–704, 2019.

Marinka Zitnik, Monica Agrawal, and Jure Leskovec. Modeling polypharmacy side effects with graph convolutional networks., 34(13):i457–i466, 2018.

Zhitao Ying, Dylan Bourgeois, Jiaxuan You, Marinka Zitnik, and Jure Leskovec. Gnnexplainer: Generating explanations for graph neural networks. In [*NeurIPS*]{}, 2019.

Pablo Gainza, Freyr Sverrisson, Frederico Monti, Emanuele Rodola, D Boscaini, MM Bronstein, and BE Correia. Deciphering interaction fingerprints from protein molecular surfaces using geometric deep learning., 17(2), 2020.

Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy. Explaining and harnessing adversarial examples., 2015.

Robin Jia and Percy Liang. Adversarial examples for evaluating reading comprehension systems., 2017.

Will Hamilton, Zhitao Ying, and Jure Leskovec. Inductive representation learning on large graphs. In [*NIPS*]{}, 2017.

Xiao Zang, Yi Xie, Jie Chen, and Bo Yuan. Graph universal adversarial attacks: A few bad actors ruin graph learning models., 2020.

Shen Wang, Zhengzhang Chen, Jingchao Ni, Xiao Yu, Zhichun Li, Haifeng Chen, and Philip S Yu. Adversarial defense framework for graph neural network., 2019.

Kaidi Xu, Hongge Chen, Sijia Liu, Pin Yu Chen, Tsui Wei Weng, Mingyi Hong, and Xue Lin. Top
, Tian Tian, Xin Huang, Lin Wang, Jun Zhu, and Le   Song. Adversarial attack on graph structured data. , 2018. 

 Xuanqing Liu, Si   Si, Xiaojin Zhu, Yang Li, and Cho - Jui Hsieh. A unified model for datum poisoning approach to graph - based semi - supervised eruditeness. , 2019. 

 Aleksandar Bojchevski and Stephan G[ü]{}nnemann. Adversarial attacks on node embeddings via graph poisoning. In [ * ICML * ] { }, page 695–704, 2019. 

 Marinka Zitnik, Monica Agrawal, and Jure Leskovec. Modeling polypharmacy english effect with graph convolutional networks. , 34(13):i457 – i466, 2018. 

 Zhitao Ying, Dylan Bourgeois, Jiaxuan You, Marinka Zitnik, and Jure Leskovec. Gnnexplainer: generate explanations for graph neural network. In [ * NeurIPS * ] { }, 2019. 

 Pablo Gainza, Freyr Sverrisson, Frederico Monti, Emanuele Rodola, D   Boscaini, MM   Bronstein, and BE   Correia. Deciphering interaction fingerprints from protein molecular airfoil use geometric deep eruditeness. , 17(2), 2020. 

 Ian   J Goodfellow, Jonathon Shlens, and Christian Szegedy. Explaining and harness adversarial example. , 2015. 

 Robin Jia and Percy Liang. Adversarial examples for evaluating reading inclusion systems. , 2017. 

 Will Hamilton, Zhitao Ying, and Jure Leskovec. Inductive representation teach on large graph. In [ * NIPS * ] { }, 2017. 

 Xiao Zang, Yi   Xie, Jie Chen, and Bo   Yuan. Graph universal adversarial approach: A few bad actors ruin graph eruditeness models. , 2020. 

 Shen Wang, Zhengzhang Chen, Jingchao Ni, Xiao Yu, Zhichun Li, Haifeng Chen, and Philip   S Yu. Adversarial defense framework for graph neural network. , 2019. 

 Kaidi Xu, Hongge Chen, Sijia Liu, Pin   Yu Chen, Tsui   Wei Weng, Mingyi Hong, and Xue Lin. Top
, Tiwn Tian, Xin Huang, Lin Wakg, Jun Zhu, and Lg Sing. Adtersarizl attacy on graph structured data., 2018.

Xnanqung Luu, Si Si, Xiaojin Zhu, Yavg Li, and Cho-Jui Ysiei. A unified framxsork fov datz poivining attack tp graph-basad semi-supervivea pearning., 2019.

Aleksandar Bojchevski and Ftephan G[ü]{}jnemann. Adverswriak attzbkw on node embeddings via grapg poisoiing. In [*ICML*]{}, pabes 695–704, 2019.

Marinka Zitnik, Monica Agrwwal, and Jure Lesklvec. Modelibg pjoypharmacy skde effects with graph convolutional networks., 34(13):i457–i466, 2018.

Zhitxo Yiug, Dylan Booxteolv, Jiaxuan Yiu, Maginka Zitnik, and Jure Leskovrc. Gnnexplainev: Genxratung explanations for jraph neural networkf. In [*NeurHPA*]{}, 2019.

Pablo Gainza, Frwye Svetrissmn, Ffwdefick Kohti, Emwnuxle Rodola, S Boscaini, MN Bronstein, and BE Cotrqps. Decipherinf intewastion fingerprints from protein moleculdr aurfaces using geometrix deep learning., 17(2), 2020.

Ian J Goodfelljw, Jonathon Shlens, and Christian Szegedy. Explainitg anv farucfrunh adversarial examples., 2015.

Robin Jia and Percy Liwhg. Acversarial exaiples for efapusjing reading cumprehzhsjon systems., 2017.

Will Hwmilton, Zhitqo Ying, agd Jire Leskovec. Inductive reprwsentation lvarnung on large graphd. In [*NIPS*]{}, 2017.

Xnao Zamg, Yi Cie, Jie Chen, and Bo Yuan. Gralh universap adversadkal attacks: A fed bsd actors ruin graph learnind models., 2020.

When Wang, Zfengehang Cren, Jingchwo Ni, Xiao Yu, Zhichun Li, Haifgng Chan, and Phipip S Yu. Adversarial defense framework for grakh teugal netwoxk., 2019.

Kaici Xu, Hongge Shen, Sijia Liu, Pin Yu Ehen, Trui Wei Wenf, Mingym Hong, and Xte Lin. Top
, Tian Tian, Xin Huang, Lin Wang, and Song. Adversarial on graph structured Si, Zhu, Yang Li, Cho-Jui Hsieh. A framework for data poisoning attack to semi-supervised learning., 2019. Aleksandar Bojchevski and Stephan G[ü]{}nnemann. Adversarial attacks on node embeddings graph poisoning. In [*ICML*]{}, pages 695–704, 2019. Marinka Zitnik, Monica Agrawal, and Jure Modeling side with convolutional networks., 34(13):i457–i466, 2018. Zhitao Ying, Dylan Bourgeois, Jiaxuan You, Marinka Zitnik, and Jure Leskovec. Gnnexplainer: explanations for graph neural networks. In [*NeurIPS*]{}, 2019. Gainza, Freyr Sverrisson, Frederico Emanuele Rodola, D Boscaini, MM and Correia. Deciphering fingerprints protein surfaces using geometric learning., 17(2), 2020. Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy. Explaining and harnessing adversarial examples., 2015. Jia and Adversarial examples evaluating comprehension 2017. Will Hamilton, and Jure Leskovec. Inductive representation learning In [*NIPS*]{}, 2017. Xiao Zang, Yi Xie, Jie and Bo Graph universal adversarial attacks: A few actors ruin graph learning models., 2020. Shen Wang, Chen, Jingchao Ni, Xiao Yu, Zhichun Li, Haifeng Chen, and Philip S Yu. Adversarial defense graph neural network., 2019. Xu, Hongge Chen, Liu, Yu Tsui Weng, Mingyi and Xue Lin. Top
, Tian Tian, Xin Huang, Lin Wang, JuN Zhu, and Le SOng. AdVerSarIaL attAck oN graph structurED datA., 2018.

Xuanqing Liu, Si Si, XiaojiN Zhu, YAnG li, anD chO-Jui HSieh. A unIFiED FraMeWoRk fOr DAtA poisOniNg attacK to graph-baSed SeMi-supervised LEaRning., 2019.

AleksAndAr Bojchevski And stephaN G[Ü]{}nnEMann. ADveRsariAl attaCKs on noDe embeddiNgS Via graPH poisonING. IN [*ICMl*]{}, pages 695–704, 2019.

Marinka ZitnIK, MONica Agrawal, and jure LeSkOVeC. mOdeLinG polypharmAcY side EFfects wITh GRAPh cONvolutional neTworks., 34(13):i457–i466, 2018.

ZhiTAo YIng, DylAn bouRGeois, JIaxuaN YOU, MaRinka Zitnik, And JUre LeskovEc. GnneXPlainer: gEneratiNg explAnaTioNs foR GrApH neUrAL neTWoRks. iN [*NeUrIPS*]{}, 2019.

PabLo gaInza, FReyr sVERRissOn, FRedeRico MOnti, Emanuele ROdoLa, D BOScaIni, MM bronsTein, AnD BE CoRreia. DEciphErIng interaction fIngeRprints frOm pRoTeiN mOlecuLAr surfAceS usIng geomEtric deEP leArNING., 17(2), 2020.

IAn J Goodfellow, JonatHoN sHlEns, and ChRistiaN szEgEDy. ExplaiNiNg aNd haRNEssinG advERsArial exaMples., 2015.

ROBiN JIa and PeRcY Liang. adVerSarIal exAMpleS for evAluating ReadiNG comprehension SYstems., 2017.

Will HamILtON, zhITao YIng, And Jure LeskOvec. iNducTive REpResENtatiOn leaRnINg ON large graphs. In [*NIPS*]{}, 2017.

XIaO Zang, YI Xie, JIe Chen, and Bo YuAn. Graph uniVERSal adverSariAL aTTacks: A few bad acTors rUin graph leARning modEls., 2020.

ShEn Wang, ZhEngzhang CHEN, JingchaO Ni, xiaO Yu, zhiCHUn li, Haifeng Chen, AND PhiLiP S Yu. AdvErsArial deFenSe fRamEwoRk For graph nEural netWoRk., 2019.

kaIdI Xu, honggE chen, SijiA LIu, PIn yu CHen, TsUI Wei WeNg, MinGyi HOnG, aND XuE Lin. Top
, Tian Tian, Xin Huang, Li n Wang, Ju n Zhu , a ndLe  Son g. A dversarial att a ck o n graph structured dat a., 2 01 8 .

X u an qingLiu, Si Si , Xia oj in  Zh u, Ya ng Li , a nd Cho- Jui Hsieh.  Aun ified framew o rk  for datapoi soning attac k t o grap h- bas e d sem i-s uperv ised l e arning ., 2019.
A l eksand a r Bojch e v sk i an d Stephan G[ü]{}n n em a nn. Adversaria l atta ck s  o n nod e e mbeddingsvi a gra p h poiso n in g . In[ *ICML*]{}, pa ges 695–704 ,  20 19.

M ar ink a  Zitni k, Mo ni c a A grawal, and  Jur e Leskove c. Mod e ling po l ypharma cy sid e e ffe ctsw it hgra ph con v ol uti o nal  network s. ,34(13 ):i4 5 7 – i 466,  20 18.
Zhit ao Ying, Dyla n B ourg e ois , Jia xuanYou,  M arink a Zitn ik, a nd  Jure Leskovec.  Gnn explainer : G en era ti ng ex p lanati ons  fo r graph  neural net wo r k s .In [*NeurIPS*]{},20 1 9 .
Pablo G ainza, Fr ey r  Sverris so n,Fred e r ico M onti ,  E manueleRodola ,  D  B oscaini ,MM Bro ns tei n,and B E  Cor reia.Decipher ing i n teraction fing e rprints fromp ro t e in mole cul ar surfaces  usi n g ge omet r ic  de e p lea rning ., 17 ( 2), 2020.

Ian J Go od fellow , Jon athon Shlens,  and Chris t i a n Szeged y. E x pl a ining and harn essin g adversar i al examp les.,  2015.
Robin Jia a nd Percy  Li ang . A dve r s ar ial examplesf o r ev al uatingrea ding co mpr ehe nsi onsy stems., 2 017.

Wi ll  H am il ton , Zhi t ao Ying,  a ndJu reLesko v ec. In ducti ve r ep re s ent ation l e ar n i ng o nla rgegra ph s. In  [*N I PS* ]{}, 20 17.

Xiao  Za n g, Y iXi e, JieChen, and BoYu an. Graphun ive rsal a d v ersarial  attacks: A few bad act o rs ruin  gr aph l earn ing model s.,  2020. 

S h en Wan g, Zhe ngzha ng  Ch e n , Jin g c ha o N i,  Xiao Yu,Z h ich un Li ,Haif eng Che n, and Philip S Yu .  Ad versarial def ens e fr a m ew ork fo r  gr ap h  ne u r al network., 20 19.

Kaidi  X u ,Hongge Che n , S ij ia Liu,  Pin Yu  Chen ,  Tsui W ei Weng,Mingyi Ho ng , an d Xue  Lin. Top
, Tian_Tian, Xin_Huang, Lin Wang, Jun_Zhu, and_Le Song._Adversarial attack_on_graph structured data.,_2018.

Xuanqing Liu, Si Si,_Xiaojin Zhu, Yang Li,_and Cho-Jui Hsieh._A_unified framework for data poisoning attack to graph-based semi-supervised learning., 2019.

Aleksandar Bojchevski and Stephan_G[ü]{}nnemann._Adversarial attacks_on_node_embeddings via graph poisoning. In_[*ICML*]{}, pages 695–704, 2019.

Marinka Zitnik,_Monica Agrawal,_and Jure Leskovec. Modeling polypharmacy side effects with_graph_convolutional networks., 34(13):i457–i466,_2018.

Zhitao Ying, Dylan Bourgeois, Jiaxuan You, Marinka Zitnik, and_Jure Leskovec. Gnnexplainer: Generating explanations for_graph neural networks._In_[*NeurIPS*]{},_2019.

Pablo Gainza, Freyr Sverrisson,_Frederico Monti, Emanuele Rodola, D Boscaini, MM Bronstein,_and BE Correia. Deciphering interaction fingerprints from_protein molecular surfaces using geometric deep learning.,_17(2), 2020.

Ian J Goodfellow, Jonathon Shlens, and_Christian Szegedy. Explaining and harnessing_adversarial examples.,_2015.

Robin Jia and Percy Liang._Adversarial examples for_evaluating reading_comprehension systems., 2017.

Will_Hamilton, Zhitao Ying, and Jure Leskovec._Inductive representation learning_on large graphs. In [*NIPS*]{}, 2017.

Xiao_Zang,_Yi Xie, Jie Chen,_and_Bo Yuan._Graph universal_adversarial attacks: A_few_bad actors_ruin_graph learning models., 2020.

Shen Wang, Zhengzhang_Chen,_Jingchao Ni, Xiao Yu, Zhichun Li, Haifeng_Chen, and Philip S Yu._Adversarial_defense framework for graph_neural network., 2019.

Kaidi Xu, Hongge_Chen, Sijia Liu, Pin Yu Chen, Tsui Wei_Weng, Mingyi_Hong, and_Xue Lin. Top