{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:3H7SCJXFELBSQD26WW7F3CHISL","short_pith_number":"pith:3H7SCJXF","canonical_record":{"source":{"id":"2406.09836","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-06-14T08:46:26Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b82892379178732b10389d7b022649420a7cf3c58cd29ccd09b43aa653b24a78","abstract_canon_sha256":"28ed28108c27ff0ec8db2e93ef582fe2ce433839fdfa0483a8595116ca2842e3"},"schema_version":"1.0"},"canonical_sha256":"d9ff2126e522c3280f5eb5be5d88e892d470a09742228f763d77994fc2a39897","source":{"kind":"arxiv","id":"2406.09836","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.09836","created_at":"2026-07-05T10:29:18Z"},{"alias_kind":"arxiv_version","alias_value":"2406.09836v2","created_at":"2026-07-05T10:29:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.09836","created_at":"2026-07-05T10:29:18Z"},{"alias_kind":"pith_short_12","alias_value":"3H7SCJXFELBS","created_at":"2026-07-05T10:29:18Z"},{"alias_kind":"pith_short_16","alias_value":"3H7SCJXFELBSQD26","created_at":"2026-07-05T10:29:18Z"},{"alias_kind":"pith_short_8","alias_value":"3H7SCJXF","created_at":"2026-07-05T10:29:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:3H7SCJXFELBSQD26WW7F3CHISL","target":"record","payload":{"canonical_record":{"source":{"id":"2406.09836","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-06-14T08:46:26Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"b82892379178732b10389d7b022649420a7cf3c58cd29ccd09b43aa653b24a78","abstract_canon_sha256":"28ed28108c27ff0ec8db2e93ef582fe2ce433839fdfa0483a8595116ca2842e3"},"schema_version":"1.0"},"canonical_sha256":"d9ff2126e522c3280f5eb5be5d88e892d470a09742228f763d77994fc2a39897","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:29:18.238047Z","signature_b64":"j2iu/1SxwJvYCEJQyVssBn4jlWHNLQSWfu82LnSmBsHYolDMWBt04IAgtPneHF5cv/FLAVvLb9fAdaemBzg2Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d9ff2126e522c3280f5eb5be5d88e892d470a09742228f763d77994fc2a39897","last_reissued_at":"2026-07-05T10:29:18.237531Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:29:18.237531Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.09836","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:29:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VjTGP57HYhFX6srMpjMWXQkXCWaXPkMzodcwDkv1PMUGMipzg+QOsLzxzKsqhAh3vdFN219LJSPhA0DCEvMiDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:11:01.487164Z"},"content_sha256":"95561a7fc0cc71104fc494ea28ad3df2b8c597e213d7a007c8fa2e2c02b5038f","schema_version":"1.0","event_id":"sha256:95561a7fc0cc71104fc494ea28ad3df2b8c597e213d7a007c8fa2e2c02b5038f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:3H7SCJXFELBSQD26WW7F3CHISL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robustness Inspired Graph Backdoor Defense","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Enyan Dai, Junjie Xu, Minhua Lin, Suhang Wang, Zhiwei Zhang, Zongyu Wu","submitted_at":"2024-06-14T08:46:26Z","abstract_excerpt":"Graph Neural Networks (GNNs) have achieved promising results in tasks such as node classification and graph classification. However, recent studies reveal that GNNs are vulnerable to backdoor attacks, posing a significant threat to their real-world adoption. Despite initial efforts to defend against specific graph backdoor attacks, there is no work on defending against various types of backdoor attacks where generated triggers have different properties. Hence, we first empirically verify that prediction variance under edge dropping is a crucial indicator for identifying poisoned nodes. With th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.09836","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.09836/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:29:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6S96G8Qh+M7ajtW6OpabZrJIEE43badZsxwOHAt65ZyW8FFnJm0tHQ0rh+nuLIGJLOiWPrePpOsR8Sx/Z0l4Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:11:01.488163Z"},"content_sha256":"aa70c2ca2ffc67b457fdb66e56447a8c91a38ddd964008ed0e462ae376ccef19","schema_version":"1.0","event_id":"sha256:aa70c2ca2ffc67b457fdb66e56447a8c91a38ddd964008ed0e462ae376ccef19"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3H7SCJXFELBSQD26WW7F3CHISL/bundle.json","state_url":"https://pith.science/pith/3H7SCJXFELBSQD26WW7F3CHISL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3H7SCJXFELBSQD26WW7F3CHISL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T07:11:01Z","links":{"resolver":"https://pith.science/pith/3H7SCJXFELBSQD26WW7F3CHISL","bundle":"https://pith.science/pith/3H7SCJXFELBSQD26WW7F3CHISL/bundle.json","state":"https://pith.science/pith/3H7SCJXFELBSQD26WW7F3CHISL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3H7SCJXFELBSQD26WW7F3CHISL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3H7SCJXFELBSQD26WW7F3CHISL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"28ed28108c27ff0ec8db2e93ef582fe2ce433839fdfa0483a8595116ca2842e3","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-06-14T08:46:26Z","title_canon_sha256":"b82892379178732b10389d7b022649420a7cf3c58cd29ccd09b43aa653b24a78"},"schema_version":"1.0","source":{"id":"2406.09836","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.09836","created_at":"2026-07-05T10:29:18Z"},{"alias_kind":"arxiv_version","alias_value":"2406.09836v2","created_at":"2026-07-05T10:29:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.09836","created_at":"2026-07-05T10:29:18Z"},{"alias_kind":"pith_short_12","alias_value":"3H7SCJXFELBS","created_at":"2026-07-05T10:29:18Z"},{"alias_kind":"pith_short_16","alias_value":"3H7SCJXFELBSQD26","created_at":"2026-07-05T10:29:18Z"},{"alias_kind":"pith_short_8","alias_value":"3H7SCJXF","created_at":"2026-07-05T10:29:18Z"}],"graph_snapshots":[{"event_id":"sha256:aa70c2ca2ffc67b457fdb66e56447a8c91a38ddd964008ed0e462ae376ccef19","target":"graph","created_at":"2026-07-05T10:29:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.09836/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph Neural Networks (GNNs) have achieved promising results in tasks such as node classification and graph classification. However, recent studies reveal that GNNs are vulnerable to backdoor attacks, posing a significant threat to their real-world adoption. Despite initial efforts to defend against specific graph backdoor attacks, there is no work on defending against various types of backdoor attacks where generated triggers have different properties. Hence, we first empirically verify that prediction variance under edge dropping is a crucial indicator for identifying poisoned nodes. With th","authors_text":"Enyan Dai, Junjie Xu, Minhua Lin, Suhang Wang, Zhiwei Zhang, Zongyu Wu","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-06-14T08:46:26Z","title":"Robustness Inspired Graph Backdoor Defense"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.09836","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:95561a7fc0cc71104fc494ea28ad3df2b8c597e213d7a007c8fa2e2c02b5038f","target":"record","created_at":"2026-07-05T10:29:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"28ed28108c27ff0ec8db2e93ef582fe2ce433839fdfa0483a8595116ca2842e3","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-06-14T08:46:26Z","title_canon_sha256":"b82892379178732b10389d7b022649420a7cf3c58cd29ccd09b43aa653b24a78"},"schema_version":"1.0","source":{"id":"2406.09836","kind":"arxiv","version":2}},"canonical_sha256":"d9ff2126e522c3280f5eb5be5d88e892d470a09742228f763d77994fc2a39897","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d9ff2126e522c3280f5eb5be5d88e892d470a09742228f763d77994fc2a39897","first_computed_at":"2026-07-05T10:29:18.237531Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:29:18.237531Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"j2iu/1SxwJvYCEJQyVssBn4jlWHNLQSWfu82LnSmBsHYolDMWBt04IAgtPneHF5cv/FLAVvLb9fAdaemBzg2Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:29:18.238047Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.09836","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:95561a7fc0cc71104fc494ea28ad3df2b8c597e213d7a007c8fa2e2c02b5038f","sha256:aa70c2ca2ffc67b457fdb66e56447a8c91a38ddd964008ed0e462ae376ccef19"],"state_sha256":"0edac48bbf58edbc66b73eaf7baef98de7fdbcbc052d7c62542299d563af2be8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Nj/f3fcMDKm5BXbW04wffhMuVUrWkTBhpx26z59HMggWyF+dY+/+5wbe7DvI93HIScbPH+YykWU/cksqKLKDBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T07:11:01.494761Z","bundle_sha256":"f3e6ed403219e847e7ced81456fe09a48d087115f6119ab41a24740c689ecff1"}}