Rethinking the Trigger-injecting Position in Graph Backdoor Attack

Open in new window