{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:2BY5TXWPC7R6OGGTIQ6NMWOOVF","short_pith_number":"pith:2BY5TXWP","canonical_record":{"source":{"id":"2110.14038","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-26T21:31:17Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"5e88a06754603f110ee968a56603f58eb27600219e7e35d51bac99f30d821cbc","abstract_canon_sha256":"caa1990718274ae313b479ee6e1d9f52bb9d0dffd3363e8e573c82ae161f2cf4"},"schema_version":"1.0"},"canonical_sha256":"d071d9decf17e3e718d3443cd659cea976c469f045c26e7dc488a816f53d324c","source":{"kind":"arxiv","id":"2110.14038","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.14038","created_at":"2026-07-05T06:05:25Z"},{"alias_kind":"arxiv_version","alias_value":"2110.14038v4","created_at":"2026-07-05T06:05:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.14038","created_at":"2026-07-05T06:05:25Z"},{"alias_kind":"pith_short_12","alias_value":"2BY5TXWPC7R6","created_at":"2026-07-05T06:05:25Z"},{"alias_kind":"pith_short_16","alias_value":"2BY5TXWPC7R6OGGT","created_at":"2026-07-05T06:05:25Z"},{"alias_kind":"pith_short_8","alias_value":"2BY5TXWP","created_at":"2026-07-05T06:05:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:2BY5TXWPC7R6OGGTIQ6NMWOOVF","target":"record","payload":{"canonical_record":{"source":{"id":"2110.14038","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-26T21:31:17Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"5e88a06754603f110ee968a56603f58eb27600219e7e35d51bac99f30d821cbc","abstract_canon_sha256":"caa1990718274ae313b479ee6e1d9f52bb9d0dffd3363e8e573c82ae161f2cf4"},"schema_version":"1.0"},"canonical_sha256":"d071d9decf17e3e718d3443cd659cea976c469f045c26e7dc488a816f53d324c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:05:25.239064Z","signature_b64":"nqI6H/ev2FCKZ3vC7FPtUiX10e1g+zFMpSmTitjwuDrdiPCDIQ/vft75SML97Y6cEJ2hf/QE+xSr56FN6dApDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d071d9decf17e3e718d3443cd659cea976c469f045c26e7dc488a816f53d324c","last_reissued_at":"2026-07-05T06:05:25.238639Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:05:25.238639Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.14038","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:05:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ao/fkp1PhYrHQ2w7QzdDxwfJumiqXLby5uAKuRurE2d+60t3UZn12ip6u2MQ3rIqYFe843wuf3+D8GocOPF1Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T11:46:29.191041Z"},"content_sha256":"877e994ff26e960c6ca4bf70a8ea6eb915fa3f46c7a7298520e6358fbd404181","schema_version":"1.0","event_id":"sha256:877e994ff26e960c6ca4bf70a8ea6eb915fa3f46c7a7298520e6358fbd404181"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:2BY5TXWPC7R6OGGTIQ6NMWOOVF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robustness of Graph Neural Networks at Scale","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Aleksandar Bojchevski, Daniel Z\\\"ugner, Hakan \\c{S}irin, Simon Geisler, Stephan G\\\"unnemann, Tobias Schmidt","submitted_at":"2021-10-26T21:31:17Z","abstract_excerpt":"Graph Neural Networks (GNNs) are increasingly important given their popularity and the diversity of applications. Yet, existing studies of their vulnerability to adversarial attacks rely on relatively small graphs. We address this gap and study how to attack and defend GNNs at scale. We propose two sparsity-aware first-order optimization attacks that maintain an efficient representation despite optimizing over a number of parameters which is quadratic in the number of nodes. We show that common surrogate losses are not well-suited for global attacks on GNNs. Our alternatives can double the att"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.14038","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.14038/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:05:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M975lAscULjygl4dAcrAQk/SrRICToSf8h5Sxt4W344usMOwya0lyXhDUUFSCsnhxErafQhtOmCuAcU5uvyhAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T11:46:29.191627Z"},"content_sha256":"091b9c79e80279ebde0e6dbfaab2616d5626e6b6ebb2dca0b9498d59ece1a6a8","schema_version":"1.0","event_id":"sha256:091b9c79e80279ebde0e6dbfaab2616d5626e6b6ebb2dca0b9498d59ece1a6a8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2BY5TXWPC7R6OGGTIQ6NMWOOVF/bundle.json","state_url":"https://pith.science/pith/2BY5TXWPC7R6OGGTIQ6NMWOOVF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2BY5TXWPC7R6OGGTIQ6NMWOOVF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T11:46:29Z","links":{"resolver":"https://pith.science/pith/2BY5TXWPC7R6OGGTIQ6NMWOOVF","bundle":"https://pith.science/pith/2BY5TXWPC7R6OGGTIQ6NMWOOVF/bundle.json","state":"https://pith.science/pith/2BY5TXWPC7R6OGGTIQ6NMWOOVF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2BY5TXWPC7R6OGGTIQ6NMWOOVF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:2BY5TXWPC7R6OGGTIQ6NMWOOVF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"caa1990718274ae313b479ee6e1d9f52bb9d0dffd3363e8e573c82ae161f2cf4","cross_cats_sorted":["stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-26T21:31:17Z","title_canon_sha256":"5e88a06754603f110ee968a56603f58eb27600219e7e35d51bac99f30d821cbc"},"schema_version":"1.0","source":{"id":"2110.14038","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.14038","created_at":"2026-07-05T06:05:25Z"},{"alias_kind":"arxiv_version","alias_value":"2110.14038v4","created_at":"2026-07-05T06:05:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.14038","created_at":"2026-07-05T06:05:25Z"},{"alias_kind":"pith_short_12","alias_value":"2BY5TXWPC7R6","created_at":"2026-07-05T06:05:25Z"},{"alias_kind":"pith_short_16","alias_value":"2BY5TXWPC7R6OGGT","created_at":"2026-07-05T06:05:25Z"},{"alias_kind":"pith_short_8","alias_value":"2BY5TXWP","created_at":"2026-07-05T06:05:25Z"}],"graph_snapshots":[{"event_id":"sha256:091b9c79e80279ebde0e6dbfaab2616d5626e6b6ebb2dca0b9498d59ece1a6a8","target":"graph","created_at":"2026-07-05T06:05:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.14038/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph Neural Networks (GNNs) are increasingly important given their popularity and the diversity of applications. Yet, existing studies of their vulnerability to adversarial attacks rely on relatively small graphs. We address this gap and study how to attack and defend GNNs at scale. We propose two sparsity-aware first-order optimization attacks that maintain an efficient representation despite optimizing over a number of parameters which is quadratic in the number of nodes. We show that common surrogate losses are not well-suited for global attacks on GNNs. Our alternatives can double the att","authors_text":"Aleksandar Bojchevski, Daniel Z\\\"ugner, Hakan \\c{S}irin, Simon Geisler, Stephan G\\\"unnemann, Tobias Schmidt","cross_cats":["stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-26T21:31:17Z","title":"Robustness of Graph Neural Networks at Scale"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.14038","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:877e994ff26e960c6ca4bf70a8ea6eb915fa3f46c7a7298520e6358fbd404181","target":"record","created_at":"2026-07-05T06:05:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"caa1990718274ae313b479ee6e1d9f52bb9d0dffd3363e8e573c82ae161f2cf4","cross_cats_sorted":["stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-26T21:31:17Z","title_canon_sha256":"5e88a06754603f110ee968a56603f58eb27600219e7e35d51bac99f30d821cbc"},"schema_version":"1.0","source":{"id":"2110.14038","kind":"arxiv","version":4}},"canonical_sha256":"d071d9decf17e3e718d3443cd659cea976c469f045c26e7dc488a816f53d324c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d071d9decf17e3e718d3443cd659cea976c469f045c26e7dc488a816f53d324c","first_computed_at":"2026-07-05T06:05:25.238639Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:05:25.238639Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nqI6H/ev2FCKZ3vC7FPtUiX10e1g+zFMpSmTitjwuDrdiPCDIQ/vft75SML97Y6cEJ2hf/QE+xSr56FN6dApDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:05:25.239064Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.14038","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:877e994ff26e960c6ca4bf70a8ea6eb915fa3f46c7a7298520e6358fbd404181","sha256:091b9c79e80279ebde0e6dbfaab2616d5626e6b6ebb2dca0b9498d59ece1a6a8"],"state_sha256":"973487c206a7f72210bfc20422b03b8c527e2a7dbbde996a98eea9dcca80c13f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8j/RGGS/JOUE9yn6MC7r2Fm+9Sg2f7aJ2FAx3TvWKkg56jq4Vw0mLAcScBW0GoWZXHtCDxKvsUW/GGYzZ+9dDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T11:46:29.204112Z","bundle_sha256":"15337aa2a3e1836718daccc22504d7b20029ae22fcd3eed87821e744d3ea5693"}}