Explainability-based Backdoor Attacks Against Graph Neural Networks. - Jing Xu 028; Minhui (Jason) Xue; Stjepan Picek (WiseML@WiSec, 2021)

A Multi-Sensor Information Fusion Method Based on Factor Graph for Integrated Navigation System. - Jing Xu 028; Gongliu Yang; Yiding Sun; Stjepan Picek (IEEE Access, 2021)

Watermarking Graph Neural Networks based on Backdoor Attacks. - Jing Xu 028; Stjepan Picek (CoRR, 2021)

More is Better (Mostly): On the Backdoor Attacks in Federated Graph Neural Networks. - Jing Xu 028; Rui Wang 070; Stefanos Koffas; Kaitai Liang; Stjepan Picek (ACSAC, 2022)

Label-Only Membership Inference Attack against Node-Level Graph Neural Networks. - Mauro Conti; Jiaxin Li; Stjepan Picek; Jing Xu 028 (AISec@CCS, 2022)

Poster: Clean-label Backdoor Attack on Graph Neural Networks. - Jing Xu 028; Stjepan Picek (CCS, 2022)

Can You Hear It?: Backdoor Attacks via Ultrasonic Triggers. - Stefanos Koffas; Jing Xu 028; Mauro Conti; Stjepan Picek (WiseML@WiSec, 2022)

More is Better (Mostly): On the Backdoor Attacks in Federated Graph Neural Networks. - Jing Xu 028; Rui Wang 070; Kaitai Liang; Stjepan Picek (CoRR, 2022)

Poster: Multi-target & Multi-trigger Backdoor Attacks on Graph Neural Networks. - Jing Xu 028; Stjepan Picek (CCS, 2023)

Watermarking Graph Neural Networks based on Backdoor Attacks. - Jing Xu 028; Stefanos Koffas; Oguzhan Ersoy; Stjepan Picek (EuroS&P, 2023)

Rethinking the Trigger-injecting Position in Graph Backdoor Attack. - Jing Xu 028; Gorka Abad; Stjepan Picek (IJCNN, 2023)

A Systematic Evaluation of Backdoor Trigger Characteristics in Image Classification. - Gorka Abad; Jing Xu 028; Stefanos Koffas; Behrad Tajalli; Stjepan Picek (CoRR, 2023)

BlindSage: Label Inference Attacks against Node-level Vertical Federated Graph Neural Networks. - Marco Arazzi; Mauro Conti; Stefanos Koffas; Marina Krcek; Antonino Nocera; Stjepan Picek; Jing Xu 028 (CoRR, 2023)

Tabdoor: Backdoor Vulnerabilities in Transformer-based Neural Networks for Tabular Data. - Bart Pleiter; Behrad Tajalli; Stefanos Koffas; Gorka Abad; Jing Xu 028; Martha A. Larson; Stjepan Picek (CoRR, 2023)

Unveiling the Threat: Investigating Distributed and Centralized Backdoor Attacks in Federated Graph Neural Networks. - Jing Xu 028; Stefanos Koffas; Stjepan Picek (DTRAP, 2024)

Connecting the dots: Exploring backdoor attacks on graph neural networks. - Jing Xu 028 (2025)