{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:3N2MCJSRQNZCKPVXKMI6GZULDU","short_pith_number":"pith:3N2MCJSR","canonical_record":{"source":{"id":"2201.06202","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2022-01-17T03:49:32Z","cross_cats_sorted":[],"title_canon_sha256":"6dce064cce58437d183ed19161420a9c15dc4393dd45170532deb32310bb5086","abstract_canon_sha256":"b095a0c55a43a87f40d681dd6b91905bd4be33ed665990276e189c5d8660094e"},"schema_version":"1.0"},"canonical_sha256":"db74c126518372253eb75311e3668b1d3cbfd78cae1d1afa2d681ff2adb4dd83","source":{"kind":"arxiv","id":"2201.06202","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.06202","created_at":"2026-07-05T03:48:55Z"},{"alias_kind":"arxiv_version","alias_value":"2201.06202v1","created_at":"2026-07-05T03:48:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.06202","created_at":"2026-07-05T03:48:55Z"},{"alias_kind":"pith_short_12","alias_value":"3N2MCJSRQNZC","created_at":"2026-07-05T03:48:55Z"},{"alias_kind":"pith_short_16","alias_value":"3N2MCJSRQNZCKPVX","created_at":"2026-07-05T03:48:55Z"},{"alias_kind":"pith_short_8","alias_value":"3N2MCJSR","created_at":"2026-07-05T03:48:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:3N2MCJSRQNZCKPVXKMI6GZULDU","target":"record","payload":{"canonical_record":{"source":{"id":"2201.06202","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2022-01-17T03:49:32Z","cross_cats_sorted":[],"title_canon_sha256":"6dce064cce58437d183ed19161420a9c15dc4393dd45170532deb32310bb5086","abstract_canon_sha256":"b095a0c55a43a87f40d681dd6b91905bd4be33ed665990276e189c5d8660094e"},"schema_version":"1.0"},"canonical_sha256":"db74c126518372253eb75311e3668b1d3cbfd78cae1d1afa2d681ff2adb4dd83","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:48:55.834899Z","signature_b64":"eG2HXJ/quF6lrtsNs7MVxQU0wTGqBei8HNUYV92V37ktMIVcTher3J0lOYzn/o8I395JS1rSSM/L8r1BTHXSAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"db74c126518372253eb75311e3668b1d3cbfd78cae1d1afa2d681ff2adb4dd83","last_reissued_at":"2026-07-05T03:48:55.834516Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:48:55.834516Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2201.06202","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:48:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SJYwqGYN54Jx0J/3qQ2bXib5slZRFzgFrMCb2bEXsNX+oqglGK7rb3sYM3PtAbmCAnxAfy60hrE4HTocmm80Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T19:19:38.964741Z"},"content_sha256":"4263c6a1cca3a79f16ca9551f7957ef4b3e033dc4920b8f7b9b6415f43d77ff8","schema_version":"1.0","event_id":"sha256:4263c6a1cca3a79f16ca9551f7957ef4b3e033dc4920b8f7b9b6415f43d77ff8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:3N2MCJSRQNZCKPVXKMI6GZULDU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Neighboring Backdoor Attacks on Graph Convolutional Network","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.AI","authors_text":"Jiawei Chen, Jintang Li, Liang Chen, Qibiao Peng, Yang Liu, Yong Li, Zibin Zheng","submitted_at":"2022-01-17T03:49:32Z","abstract_excerpt":"Backdoor attacks have been widely studied to hide the misclassification rules in the normal models, which are only activated when the model is aware of the specific inputs (i.e., the trigger). However, despite their success in the conventional Euclidean space, there are few studies of backdoor attacks on graph structured data. In this paper, we propose a new type of backdoor which is specific to graph data, called neighboring backdoor. Considering the discreteness of graph data, how to effectively design the triggers while retaining the model accuracy on the original task is the major challeng"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.06202","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2201.06202/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:48:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bmdlZLoDYRh+6PEEEIlsxQbd2RI6bzgK6/eqjehcNDOTEUqTf1FaLnqJaegE+aNzQ4qshEXPvKW4RTc03GLgCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T19:19:38.965197Z"},"content_sha256":"d7189216062136ac2474776ecdbc8f07082af925c032fbd57fcd33b1c1da4d1d","schema_version":"1.0","event_id":"sha256:d7189216062136ac2474776ecdbc8f07082af925c032fbd57fcd33b1c1da4d1d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3N2MCJSRQNZCKPVXKMI6GZULDU/bundle.json","state_url":"https://pith.science/pith/3N2MCJSRQNZCKPVXKMI6GZULDU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3N2MCJSRQNZCKPVXKMI6GZULDU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T19:19:38Z","links":{"resolver":"https://pith.science/pith/3N2MCJSRQNZCKPVXKMI6GZULDU","bundle":"https://pith.science/pith/3N2MCJSRQNZCKPVXKMI6GZULDU/bundle.json","state":"https://pith.science/pith/3N2MCJSRQNZCKPVXKMI6GZULDU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3N2MCJSRQNZCKPVXKMI6GZULDU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:3N2MCJSRQNZCKPVXKMI6GZULDU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b095a0c55a43a87f40d681dd6b91905bd4be33ed665990276e189c5d8660094e","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2022-01-17T03:49:32Z","title_canon_sha256":"6dce064cce58437d183ed19161420a9c15dc4393dd45170532deb32310bb5086"},"schema_version":"1.0","source":{"id":"2201.06202","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.06202","created_at":"2026-07-05T03:48:55Z"},{"alias_kind":"arxiv_version","alias_value":"2201.06202v1","created_at":"2026-07-05T03:48:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.06202","created_at":"2026-07-05T03:48:55Z"},{"alias_kind":"pith_short_12","alias_value":"3N2MCJSRQNZC","created_at":"2026-07-05T03:48:55Z"},{"alias_kind":"pith_short_16","alias_value":"3N2MCJSRQNZCKPVX","created_at":"2026-07-05T03:48:55Z"},{"alias_kind":"pith_short_8","alias_value":"3N2MCJSR","created_at":"2026-07-05T03:48:55Z"}],"graph_snapshots":[{"event_id":"sha256:d7189216062136ac2474776ecdbc8f07082af925c032fbd57fcd33b1c1da4d1d","target":"graph","created_at":"2026-07-05T03:48:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.06202/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Backdoor attacks have been widely studied to hide the misclassification rules in the normal models, which are only activated when the model is aware of the specific inputs (i.e., the trigger). However, despite their success in the conventional Euclidean space, there are few studies of backdoor attacks on graph structured data. In this paper, we propose a new type of backdoor which is specific to graph data, called neighboring backdoor. Considering the discreteness of graph data, how to effectively design the triggers while retaining the model accuracy on the original task is the major challeng","authors_text":"Jiawei Chen, Jintang Li, Liang Chen, Qibiao Peng, Yang Liu, Yong Li, Zibin Zheng","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2022-01-17T03:49:32Z","title":"Neighboring Backdoor Attacks on Graph Convolutional Network"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.06202","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4263c6a1cca3a79f16ca9551f7957ef4b3e033dc4920b8f7b9b6415f43d77ff8","target":"record","created_at":"2026-07-05T03:48:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b095a0c55a43a87f40d681dd6b91905bd4be33ed665990276e189c5d8660094e","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2022-01-17T03:49:32Z","title_canon_sha256":"6dce064cce58437d183ed19161420a9c15dc4393dd45170532deb32310bb5086"},"schema_version":"1.0","source":{"id":"2201.06202","kind":"arxiv","version":1}},"canonical_sha256":"db74c126518372253eb75311e3668b1d3cbfd78cae1d1afa2d681ff2adb4dd83","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"db74c126518372253eb75311e3668b1d3cbfd78cae1d1afa2d681ff2adb4dd83","first_computed_at":"2026-07-05T03:48:55.834516Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:48:55.834516Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eG2HXJ/quF6lrtsNs7MVxQU0wTGqBei8HNUYV92V37ktMIVcTher3J0lOYzn/o8I395JS1rSSM/L8r1BTHXSAg==","signature_status":"signed_v1","signed_at":"2026-07-05T03:48:55.834899Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.06202","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4263c6a1cca3a79f16ca9551f7957ef4b3e033dc4920b8f7b9b6415f43d77ff8","sha256:d7189216062136ac2474776ecdbc8f07082af925c032fbd57fcd33b1c1da4d1d"],"state_sha256":"b24f88b46f621c98d902c842ea6cccbb543123b0a41514727225315b22b5a062"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1LvaunF1wpPSzk8YrXUzO6+p4Aw6zusGC4OGn0W51XWh4TCKyHoKz26dPYMd2XMW8ExYBOGGVPDVgyymYL4tBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T19:19:38.976292Z","bundle_sha256":"9960cee804eb445f34b22e059c83bc4eec52a7b05d330d2367298d297a50ee13"}}