{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:37TH6WRBVUXTMPIL6EE5LRS2VO","short_pith_number":"pith:37TH6WRB","canonical_record":{"source":{"id":"2202.08057","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-16T13:41:39Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"17b73fed914957caa96c3633c80345d388240c29b01dc4d466f4c181fff64f24","abstract_canon_sha256":"5681e46e8f532fb7a4eeae69c51606d5f39a93d1b8215019c38b3fd81801a4b8"},"schema_version":"1.0"},"canonical_sha256":"dfe67f5a21ad2f363d0bf109d5c65aabb81f03244e7b860717c281782389f37c","source":{"kind":"arxiv","id":"2202.08057","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.08057","created_at":"2026-07-05T04:11:30Z"},{"alias_kind":"arxiv_version","alias_value":"2202.08057v2","created_at":"2026-07-05T04:11:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.08057","created_at":"2026-07-05T04:11:30Z"},{"alias_kind":"pith_short_12","alias_value":"37TH6WRBVUXT","created_at":"2026-07-05T04:11:30Z"},{"alias_kind":"pith_short_16","alias_value":"37TH6WRBVUXTMPIL","created_at":"2026-07-05T04:11:30Z"},{"alias_kind":"pith_short_8","alias_value":"37TH6WRB","created_at":"2026-07-05T04:11:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:37TH6WRBVUXTMPIL6EE5LRS2VO","target":"record","payload":{"canonical_record":{"source":{"id":"2202.08057","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-16T13:41:39Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"17b73fed914957caa96c3633c80345d388240c29b01dc4d466f4c181fff64f24","abstract_canon_sha256":"5681e46e8f532fb7a4eeae69c51606d5f39a93d1b8215019c38b3fd81801a4b8"},"schema_version":"1.0"},"canonical_sha256":"dfe67f5a21ad2f363d0bf109d5c65aabb81f03244e7b860717c281782389f37c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:11:30.456691Z","signature_b64":"Kb/7ndRJ24Jdcg9SOP2x13qG7wiahEMW5T1UiG7uML1ij0knSbCv+Yh0vpkCbcEwiPhLnslHZdNT06NJhukfAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dfe67f5a21ad2f363d0bf109d5c65aabb81f03244e7b860717c281782389f37c","last_reissued_at":"2026-07-05T04:11:30.456267Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:11:30.456267Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.08057","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:11:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zqrZ0N6t3WnxAXZqTApVxT90u8T4w4Xp475E6XzFSrTQT3uKTePlpzM+pp1QPQM+vc7Hs3ddS8Z/7bdwUKvAAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T07:30:56.312443Z"},"content_sha256":"a729f2f0a712e6600a4df60a7928fc54a76a44d2e4fc6cfc68ffe1456299b367","schema_version":"1.0","event_id":"sha256:a729f2f0a712e6600a4df60a7928fc54a76a44d2e4fc6cfc68ffe1456299b367"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:37TH6WRBVUXTMPIL6EE5LRS2VO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Understanding and Improving Graph Injection Attack by Promoting Unnoticeability","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Bo Han, Han Yang, James Cheng, Kaili Ma, Tongliang Liu, Yonggang Zhang, Yongqiang Chen","submitted_at":"2022-02-16T13:41:39Z","abstract_excerpt":"Recently Graph Injection Attack (GIA) emerges as a practical attack scenario on Graph Neural Networks (GNNs), where the adversary can merely inject few malicious nodes instead of modifying existing nodes or edges, i.e., Graph Modification Attack (GMA). Although GIA has achieved promising results, little is known about why it is successful and whether there is any pitfall behind the success. To understand the power of GIA, we compare it with GMA and find that GIA can be provably more harmful than GMA due to its relatively high flexibility. However, the high flexibility will also lead to great d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.08057","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.08057/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:11:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LTaE3YzcBz0NexUhySaasQxiaVZ7u4tc/VSFAJHiHrzMiCwyN+SRp2f5tbj/PotVJnnjt+IJVq1SjPBQbOHwBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T07:30:56.312818Z"},"content_sha256":"ee06a5bc9ad82fa2cf9a764634affb47940689819dbb539c70c76ff61110bc1c","schema_version":"1.0","event_id":"sha256:ee06a5bc9ad82fa2cf9a764634affb47940689819dbb539c70c76ff61110bc1c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/37TH6WRBVUXTMPIL6EE5LRS2VO/bundle.json","state_url":"https://pith.science/pith/37TH6WRBVUXTMPIL6EE5LRS2VO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/37TH6WRBVUXTMPIL6EE5LRS2VO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T07:30:56Z","links":{"resolver":"https://pith.science/pith/37TH6WRBVUXTMPIL6EE5LRS2VO","bundle":"https://pith.science/pith/37TH6WRBVUXTMPIL6EE5LRS2VO/bundle.json","state":"https://pith.science/pith/37TH6WRBVUXTMPIL6EE5LRS2VO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/37TH6WRBVUXTMPIL6EE5LRS2VO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:37TH6WRBVUXTMPIL6EE5LRS2VO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5681e46e8f532fb7a4eeae69c51606d5f39a93d1b8215019c38b3fd81801a4b8","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-16T13:41:39Z","title_canon_sha256":"17b73fed914957caa96c3633c80345d388240c29b01dc4d466f4c181fff64f24"},"schema_version":"1.0","source":{"id":"2202.08057","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.08057","created_at":"2026-07-05T04:11:30Z"},{"alias_kind":"arxiv_version","alias_value":"2202.08057v2","created_at":"2026-07-05T04:11:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.08057","created_at":"2026-07-05T04:11:30Z"},{"alias_kind":"pith_short_12","alias_value":"37TH6WRBVUXT","created_at":"2026-07-05T04:11:30Z"},{"alias_kind":"pith_short_16","alias_value":"37TH6WRBVUXTMPIL","created_at":"2026-07-05T04:11:30Z"},{"alias_kind":"pith_short_8","alias_value":"37TH6WRB","created_at":"2026-07-05T04:11:30Z"}],"graph_snapshots":[{"event_id":"sha256:ee06a5bc9ad82fa2cf9a764634affb47940689819dbb539c70c76ff61110bc1c","target":"graph","created_at":"2026-07-05T04:11:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.08057/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently Graph Injection Attack (GIA) emerges as a practical attack scenario on Graph Neural Networks (GNNs), where the adversary can merely inject few malicious nodes instead of modifying existing nodes or edges, i.e., Graph Modification Attack (GMA). Although GIA has achieved promising results, little is known about why it is successful and whether there is any pitfall behind the success. To understand the power of GIA, we compare it with GMA and find that GIA can be provably more harmful than GMA due to its relatively high flexibility. However, the high flexibility will also lead to great d","authors_text":"Bo Han, Han Yang, James Cheng, Kaili Ma, Tongliang Liu, Yonggang Zhang, Yongqiang Chen","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-16T13:41:39Z","title":"Understanding and Improving Graph Injection Attack by Promoting Unnoticeability"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.08057","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a729f2f0a712e6600a4df60a7928fc54a76a44d2e4fc6cfc68ffe1456299b367","target":"record","created_at":"2026-07-05T04:11:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5681e46e8f532fb7a4eeae69c51606d5f39a93d1b8215019c38b3fd81801a4b8","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-02-16T13:41:39Z","title_canon_sha256":"17b73fed914957caa96c3633c80345d388240c29b01dc4d466f4c181fff64f24"},"schema_version":"1.0","source":{"id":"2202.08057","kind":"arxiv","version":2}},"canonical_sha256":"dfe67f5a21ad2f363d0bf109d5c65aabb81f03244e7b860717c281782389f37c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dfe67f5a21ad2f363d0bf109d5c65aabb81f03244e7b860717c281782389f37c","first_computed_at":"2026-07-05T04:11:30.456267Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:11:30.456267Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Kb/7ndRJ24Jdcg9SOP2x13qG7wiahEMW5T1UiG7uML1ij0knSbCv+Yh0vpkCbcEwiPhLnslHZdNT06NJhukfAw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:11:30.456691Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.08057","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a729f2f0a712e6600a4df60a7928fc54a76a44d2e4fc6cfc68ffe1456299b367","sha256:ee06a5bc9ad82fa2cf9a764634affb47940689819dbb539c70c76ff61110bc1c"],"state_sha256":"5957a3a4e81a6dc5b5cae6784d218f62cb97124b6cb0ad80162f0280a70d0eac"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N/ab8d9W6XVdbSvEr6j5w7cHV9W3Asf6Gmu1zaZoxU2tN9uCDJmhapm+VyRzWdb7rShvyIgFy/Ue6TuCJ63gDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T07:30:56.314799Z","bundle_sha256":"9f71a4e46c3e56bd3925ae56d4df9b2e268956108885610e9c7e53a1ea712c40"}}