{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:77VWDOCLOXBJ26Z77VZLUO3CBG","short_pith_number":"pith:77VWDOCL","canonical_record":{"source":{"id":"2306.00578","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-01T11:49:43Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"274ff489d6d0dc5046a8b2722fe003d344dae164844fdc98c4c36fdc44df637f","abstract_canon_sha256":"bf7dd8384770a67218e5731d1f802e43f3085cfb28ec02d66115946ae6979325"},"schema_version":"1.0"},"canonical_sha256":"ffeb61b84b75c29d7b3ffd72ba3b62098c262ccddd960618ab4cfebfdd9fcfe1","source":{"kind":"arxiv","id":"2306.00578","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.00578","created_at":"2026-07-05T06:16:28Z"},{"alias_kind":"arxiv_version","alias_value":"2306.00578v1","created_at":"2026-07-05T06:16:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.00578","created_at":"2026-07-05T06:16:28Z"},{"alias_kind":"pith_short_12","alias_value":"77VWDOCLOXBJ","created_at":"2026-07-05T06:16:28Z"},{"alias_kind":"pith_short_16","alias_value":"77VWDOCLOXBJ26Z7","created_at":"2026-07-05T06:16:28Z"},{"alias_kind":"pith_short_8","alias_value":"77VWDOCL","created_at":"2026-07-05T06:16:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:77VWDOCLOXBJ26Z77VZLUO3CBG","target":"record","payload":{"canonical_record":{"source":{"id":"2306.00578","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-01T11:49:43Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"274ff489d6d0dc5046a8b2722fe003d344dae164844fdc98c4c36fdc44df637f","abstract_canon_sha256":"bf7dd8384770a67218e5731d1f802e43f3085cfb28ec02d66115946ae6979325"},"schema_version":"1.0"},"canonical_sha256":"ffeb61b84b75c29d7b3ffd72ba3b62098c262ccddd960618ab4cfebfdd9fcfe1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:16:28.443497Z","signature_b64":"h1K00VtymAZFIm3criwbNIyhD9JSVhv2DLUMH24C6dEo2Lb2/eDkNZTHfhsoxyzoqb8+Dn8y//voCT8mweIeCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ffeb61b84b75c29d7b3ffd72ba3b62098c262ccddd960618ab4cfebfdd9fcfe1","last_reissued_at":"2026-07-05T06:16:28.443006Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:16:28.443006Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.00578","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:16:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LnJNoxBb9lwDQCLQ04EkLa0PB94Udhd4vef6RlxLl+vYjKxHPH8EmoUoezjDEZ9wl+yDhQxsbhsMD+lhBFQdCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T07:05:37.307365Z"},"content_sha256":"16023db332be0bbf66af9a3bfd56a3ba27b1b8917a019d54a35267e62c8127e4","schema_version":"1.0","event_id":"sha256:16023db332be0bbf66af9a3bfd56a3ba27b1b8917a019d54a35267e62c8127e4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:77VWDOCLOXBJ26Z77VZLUO3CBG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Does Black-box Attribute Inference Attacks on Graph Neural Networks Constitute Privacy Risk?","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Anmar Hizber, Iyiola E. Olatunji, Megha Khosla, Oliver Sihlovec","submitted_at":"2023-06-01T11:49:43Z","abstract_excerpt":"Graph neural networks (GNNs) have shown promising results on real-life datasets and applications, including healthcare, finance, and education. However, recent studies have shown that GNNs are highly vulnerable to attacks such as membership inference attack and link reconstruction attack. Surprisingly, attribute inference attacks has received little attention. In this paper, we initiate the first investigation into attribute inference attack where an attacker aims to infer the sensitive user attributes based on her public or non-sensitive attributes. We ask the question whether black-box attri"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.00578","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.00578/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:16:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EqUjXFaHMot0cQSY/5jqYDXTNiqEJBxyt4LO+Jl+U8gH5doeznz/5pm2CiOmrTwb8nC2SRcyS5YK9Dhs/7AYBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T07:05:37.308282Z"},"content_sha256":"a5e5daa31d7683f6f1b010bd814ee62324d8ce4d5572164d6739c33db2698412","schema_version":"1.0","event_id":"sha256:a5e5daa31d7683f6f1b010bd814ee62324d8ce4d5572164d6739c33db2698412"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/77VWDOCLOXBJ26Z77VZLUO3CBG/bundle.json","state_url":"https://pith.science/pith/77VWDOCLOXBJ26Z77VZLUO3CBG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/77VWDOCLOXBJ26Z77VZLUO3CBG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T07:05:37Z","links":{"resolver":"https://pith.science/pith/77VWDOCLOXBJ26Z77VZLUO3CBG","bundle":"https://pith.science/pith/77VWDOCLOXBJ26Z77VZLUO3CBG/bundle.json","state":"https://pith.science/pith/77VWDOCLOXBJ26Z77VZLUO3CBG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/77VWDOCLOXBJ26Z77VZLUO3CBG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:77VWDOCLOXBJ26Z77VZLUO3CBG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bf7dd8384770a67218e5731d1f802e43f3085cfb28ec02d66115946ae6979325","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-01T11:49:43Z","title_canon_sha256":"274ff489d6d0dc5046a8b2722fe003d344dae164844fdc98c4c36fdc44df637f"},"schema_version":"1.0","source":{"id":"2306.00578","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.00578","created_at":"2026-07-05T06:16:28Z"},{"alias_kind":"arxiv_version","alias_value":"2306.00578v1","created_at":"2026-07-05T06:16:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.00578","created_at":"2026-07-05T06:16:28Z"},{"alias_kind":"pith_short_12","alias_value":"77VWDOCLOXBJ","created_at":"2026-07-05T06:16:28Z"},{"alias_kind":"pith_short_16","alias_value":"77VWDOCLOXBJ26Z7","created_at":"2026-07-05T06:16:28Z"},{"alias_kind":"pith_short_8","alias_value":"77VWDOCL","created_at":"2026-07-05T06:16:28Z"}],"graph_snapshots":[{"event_id":"sha256:a5e5daa31d7683f6f1b010bd814ee62324d8ce4d5572164d6739c33db2698412","target":"graph","created_at":"2026-07-05T06:16:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.00578/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph neural networks (GNNs) have shown promising results on real-life datasets and applications, including healthcare, finance, and education. However, recent studies have shown that GNNs are highly vulnerable to attacks such as membership inference attack and link reconstruction attack. Surprisingly, attribute inference attacks has received little attention. In this paper, we initiate the first investigation into attribute inference attack where an attacker aims to infer the sensitive user attributes based on her public or non-sensitive attributes. We ask the question whether black-box attri","authors_text":"Anmar Hizber, Iyiola E. Olatunji, Megha Khosla, Oliver Sihlovec","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-01T11:49:43Z","title":"Does Black-box Attribute Inference Attacks on Graph Neural Networks Constitute Privacy Risk?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.00578","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:16023db332be0bbf66af9a3bfd56a3ba27b1b8917a019d54a35267e62c8127e4","target":"record","created_at":"2026-07-05T06:16:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bf7dd8384770a67218e5731d1f802e43f3085cfb28ec02d66115946ae6979325","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-06-01T11:49:43Z","title_canon_sha256":"274ff489d6d0dc5046a8b2722fe003d344dae164844fdc98c4c36fdc44df637f"},"schema_version":"1.0","source":{"id":"2306.00578","kind":"arxiv","version":1}},"canonical_sha256":"ffeb61b84b75c29d7b3ffd72ba3b62098c262ccddd960618ab4cfebfdd9fcfe1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ffeb61b84b75c29d7b3ffd72ba3b62098c262ccddd960618ab4cfebfdd9fcfe1","first_computed_at":"2026-07-05T06:16:28.443006Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:16:28.443006Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"h1K00VtymAZFIm3criwbNIyhD9JSVhv2DLUMH24C6dEo2Lb2/eDkNZTHfhsoxyzoqb8+Dn8y//voCT8mweIeCw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:16:28.443497Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.00578","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:16023db332be0bbf66af9a3bfd56a3ba27b1b8917a019d54a35267e62c8127e4","sha256:a5e5daa31d7683f6f1b010bd814ee62324d8ce4d5572164d6739c33db2698412"],"state_sha256":"42679607b865090379484b5e49061defc0b8ec270c0509fe5a2f890739f2fc75"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DM+VUN69JMSgk6FvxDlW2ZvYiV8dXZpVbKepIgSRduzlXJMEO+/lWM9WjLUZtkQHk7d0UZp8h+CACmbF2iIcCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T07:05:37.315302Z","bundle_sha256":"fbb6fb6fbac3947158290d3fc0ebe87ab6f8557e0f934644a4754ec4bd62329b"}}