{"id":"W7125612209","doi":"10.1109/cascon66301.2025.00043","title":"Intrinsic Defenses Against Backdoor Attacks in High-Order Graph Neural Networks via Semantic and Outlier-Guided Subgraph Policies","year":2025,"lang":"","type":"article","venue":"","topic":"Advanced Graph Neural Networks","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"Brock University","funders":"","keywords":"Backdoor; Camouflage; Leverage (statistics); Cluster analysis; Embedding; Graph; Exploit; Artificial neural network","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":["metaepi_narrow"],"category_scores_codex":[0.0006420313,0.0015329,0.001704215,0.002288767,0.000783116,0.0009881504,0.002102175,0.0007235552,0.00003556271],"category_scores_gemma":[0.0001728381,0.001490274,0.0004364001,0.01133224,0.001395088,0.001644491,0.002342692,0.001796067,0.00001596836],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001321136,"about_ca_system_score_gemma":0.0001537945,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0008915692,"about_ca_topic_score_gemma":0.002848102,"domain_scores_codex":[0.9910871,0.0006957753,0.002188506,0.002621701,0.000682276,0.002724577],"domain_scores_gemma":[0.9951993,0.001053917,0.000540897,0.002081706,0.0005544983,0.0005697468],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0002901765,0.0008165029,0.1798956,0.0004536699,0.0005353832,0.0006023864,0.001254893,0.3367465,0.0003908915,0.06536163,0.009665416,0.403987],"study_design_scores_gemma":[0.003077663,0.0002955847,0.133239,0.0004821146,0.0001216345,0.00006235847,0.0001528114,0.8428958,0.0001778753,0.01742532,0.0003719638,0.001697933],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5180361,0.008628781,0.4611998,0.005130241,0.003918589,0.001603944,0.000007129484,0.0004904646,0.0009849475],"genre_scores_gemma":[0.9766129,0.004988904,0.007873633,0.0094367,0.0002624907,0.00007174744,0.00001698538,0.00008766882,0.0006489602],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.5061494,"threshold_uncertainty_score":0.999742,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01211078831436518,"score_gpt":0.259289121047833,"score_spread":0.2471783327334678,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}