{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:CP4JJST23VIWNZZE2XHR27UDCH","short_pith_number":"pith:CP4JJST2","canonical_record":{"source":{"id":"2012.06757","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2020-12-12T08:52:56Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c229aa76adfcd7e4acad59062e2fbad7749c12235ed3260b2e42117d064bfb29","abstract_canon_sha256":"ebbd3f2e56398fa61ada16e2a7291122a950c0d6fd4c94be389a936ebe35cda0"},"schema_version":"1.0"},"canonical_sha256":"13f894ca7add5166e724d5cf1d7e8311f10df1c3767aa16da80c5c72524ac107","source":{"kind":"arxiv","id":"2012.06757","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.06757","created_at":"2026-07-05T03:10:00Z"},{"alias_kind":"arxiv_version","alias_value":"2012.06757v3","created_at":"2026-07-05T03:10:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.06757","created_at":"2026-07-05T03:10:00Z"},{"alias_kind":"pith_short_12","alias_value":"CP4JJST23VIW","created_at":"2026-07-05T03:10:00Z"},{"alias_kind":"pith_short_16","alias_value":"CP4JJST23VIWNZZE","created_at":"2026-07-05T03:10:00Z"},{"alias_kind":"pith_short_8","alias_value":"CP4JJST2","created_at":"2026-07-05T03:10:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:CP4JJST23VIWNZZE2XHR27UDCH","target":"record","payload":{"canonical_record":{"source":{"id":"2012.06757","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2020-12-12T08:52:56Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c229aa76adfcd7e4acad59062e2fbad7749c12235ed3260b2e42117d064bfb29","abstract_canon_sha256":"ebbd3f2e56398fa61ada16e2a7291122a950c0d6fd4c94be389a936ebe35cda0"},"schema_version":"1.0"},"canonical_sha256":"13f894ca7add5166e724d5cf1d7e8311f10df1c3767aa16da80c5c72524ac107","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:10:00.063631Z","signature_b64":"e/j8bdw2/9Y75uIaQJqwdZ+hNNTNj6d4CS7Zf7ygH52lV5AjlJI0O4n5mvWFzHazDrPhxXP5/E6eV3rirb+lDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"13f894ca7add5166e724d5cf1d7e8311f10df1c3767aa16da80c5c72524ac107","last_reissued_at":"2026-07-05T03:10:00.063206Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:10:00.063206Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2012.06757","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:10:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5uOeD30L5mLDqvV3BRJu9M2LXwwt+WG8Pld5OEsp/niykYWWX8piQ3e/cNTg17rNKE9arlTdn0k1n3im01MBAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T08:53:45.426668Z"},"content_sha256":"691146e15f907836626b5d2757ea48e00ede9eac3145c0dec0c8f8c0c591459d","schema_version":"1.0","event_id":"sha256:691146e15f907836626b5d2757ea48e00ede9eac3145c0dec0c8f8c0c591459d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:CP4JJST23VIWNZZE2XHR27UDCH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Blindfolded Attackers Still Threatening: Strict Black-Box Adversarial Attacks on Graphs","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Chunping Wang, Jiangang Lu, Jiarong Xu, Xin Jiang, Yang Yang, Yanhao Wang, Yizhou Sun","submitted_at":"2020-12-12T08:52:56Z","abstract_excerpt":"Adversarial attacks on graphs have attracted considerable research interests. Existing works assume the attacker is either (partly) aware of the victim model, or able to send queries to it. These assumptions are, however, unrealistic. To bridge the gap between theoretical graph attacks and real-world scenarios, in this work, we propose a novel and more realistic setting: strict black-box graph attack, in which the attacker has no knowledge about the victim model at all and is not allowed to send any queries. To design such an attack strategy, we first propose a generic graph filter to unify di"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.06757","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2012.06757/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:10:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NxAQSNHt+WEOJ/4nEHXlVtUGRHIPkjF9Wg5xpmoHUz9xDWvgWpOYZILpQ6Pnr7OPqWBMRBH/o6FfQJAivrimAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T08:53:45.427196Z"},"content_sha256":"d57be360c4ccd8bc55bd52d7b9d74207d0b90ae92d2e7a549bb02ae4d550f223","schema_version":"1.0","event_id":"sha256:d57be360c4ccd8bc55bd52d7b9d74207d0b90ae92d2e7a549bb02ae4d550f223"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CP4JJST23VIWNZZE2XHR27UDCH/bundle.json","state_url":"https://pith.science/pith/CP4JJST23VIWNZZE2XHR27UDCH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CP4JJST23VIWNZZE2XHR27UDCH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T08:53:45Z","links":{"resolver":"https://pith.science/pith/CP4JJST23VIWNZZE2XHR27UDCH","bundle":"https://pith.science/pith/CP4JJST23VIWNZZE2XHR27UDCH/bundle.json","state":"https://pith.science/pith/CP4JJST23VIWNZZE2XHR27UDCH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CP4JJST23VIWNZZE2XHR27UDCH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:CP4JJST23VIWNZZE2XHR27UDCH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ebbd3f2e56398fa61ada16e2a7291122a950c0d6fd4c94be389a936ebe35cda0","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2020-12-12T08:52:56Z","title_canon_sha256":"c229aa76adfcd7e4acad59062e2fbad7749c12235ed3260b2e42117d064bfb29"},"schema_version":"1.0","source":{"id":"2012.06757","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.06757","created_at":"2026-07-05T03:10:00Z"},{"alias_kind":"arxiv_version","alias_value":"2012.06757v3","created_at":"2026-07-05T03:10:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.06757","created_at":"2026-07-05T03:10:00Z"},{"alias_kind":"pith_short_12","alias_value":"CP4JJST23VIW","created_at":"2026-07-05T03:10:00Z"},{"alias_kind":"pith_short_16","alias_value":"CP4JJST23VIWNZZE","created_at":"2026-07-05T03:10:00Z"},{"alias_kind":"pith_short_8","alias_value":"CP4JJST2","created_at":"2026-07-05T03:10:00Z"}],"graph_snapshots":[{"event_id":"sha256:d57be360c4ccd8bc55bd52d7b9d74207d0b90ae92d2e7a549bb02ae4d550f223","target":"graph","created_at":"2026-07-05T03:10:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2012.06757/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks on graphs have attracted considerable research interests. Existing works assume the attacker is either (partly) aware of the victim model, or able to send queries to it. These assumptions are, however, unrealistic. To bridge the gap between theoretical graph attacks and real-world scenarios, in this work, we propose a novel and more realistic setting: strict black-box graph attack, in which the attacker has no knowledge about the victim model at all and is not allowed to send any queries. To design such an attack strategy, we first propose a generic graph filter to unify di","authors_text":"Chunping Wang, Jiangang Lu, Jiarong Xu, Xin Jiang, Yang Yang, Yanhao Wang, Yizhou Sun","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2020-12-12T08:52:56Z","title":"Blindfolded Attackers Still Threatening: Strict Black-Box Adversarial Attacks on Graphs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.06757","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:691146e15f907836626b5d2757ea48e00ede9eac3145c0dec0c8f8c0c591459d","target":"record","created_at":"2026-07-05T03:10:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ebbd3f2e56398fa61ada16e2a7291122a950c0d6fd4c94be389a936ebe35cda0","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2020-12-12T08:52:56Z","title_canon_sha256":"c229aa76adfcd7e4acad59062e2fbad7749c12235ed3260b2e42117d064bfb29"},"schema_version":"1.0","source":{"id":"2012.06757","kind":"arxiv","version":3}},"canonical_sha256":"13f894ca7add5166e724d5cf1d7e8311f10df1c3767aa16da80c5c72524ac107","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"13f894ca7add5166e724d5cf1d7e8311f10df1c3767aa16da80c5c72524ac107","first_computed_at":"2026-07-05T03:10:00.063206Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:10:00.063206Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"e/j8bdw2/9Y75uIaQJqwdZ+hNNTNj6d4CS7Zf7ygH52lV5AjlJI0O4n5mvWFzHazDrPhxXP5/E6eV3rirb+lDw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:10:00.063631Z","signed_message":"canonical_sha256_bytes"},"source_id":"2012.06757","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:691146e15f907836626b5d2757ea48e00ede9eac3145c0dec0c8f8c0c591459d","sha256:d57be360c4ccd8bc55bd52d7b9d74207d0b90ae92d2e7a549bb02ae4d550f223"],"state_sha256":"f9b91869e82b003486bf40f3884c3ade1585d5e897bdb6d93dab930bdaf7577a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WshHQ6zneGW11RMV0cM+8KG3QX0EV/r/t7m/aXm8fKcQD3hSF2iavbjGiYUQGdtRYldghiDAFz3/wrFFuXthAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T08:53:45.430896Z","bundle_sha256":"22eb31eda5e34504ee31eac41e7f9c79633786c0234169cbdb52441dbe5ea339"}}