@inproceedings{ijcai2026p304,
  title     = {Collateral Damage Constrained Backdoor Attacks on Graph Neural Networks},
  author    = {Jin, Di and Zhang, Zechuan and Feng, Bingdao and Wang, Xiaobao and He, Dongxiao and Wang, Zhen},
  booktitle = {Proceedings of the Thirty-Fifth International Joint Conference on
               Artificial Intelligence, {IJCAI-26}},
  publisher = {International Joint Conferences on Artificial Intelligence Organization},
  editor    = {Diego Calvanese},
  pages     = {2735--2743},
  year      = {2026},
  month     = {8},
  note      = {Main Track},
  doi       = {10.24963/ijcai.2026/304},
  url       = {https://doi.org/10.24963/ijcai.2026/304},
}