{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:GVW2JXBUZPY62NOYZNPSOXQRTU","short_pith_number":"pith:GVW2JXBU","canonical_record":{"source":{"id":"2311.13244","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-22T09:02:04Z","cross_cats_sorted":["cs.CR","cs.SI"],"title_canon_sha256":"b960958d3d9531f2ef609aeb3d2f3082d70b97e5885e3303ec84e4ecca9095cb","abstract_canon_sha256":"2c9a0d4a86c321a38f91c744ea642733fd1475ba2af950fe8264ccf740adc4bc"},"schema_version":"1.0"},"canonical_sha256":"356da4dc34cbf1ed35d8cb5f275e119d1cf09d55ce07ea9d86e551262645036c","source":{"kind":"arxiv","id":"2311.13244","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.13244","created_at":"2026-07-05T07:15:26Z"},{"alias_kind":"arxiv_version","alias_value":"2311.13244v1","created_at":"2026-07-05T07:15:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.13244","created_at":"2026-07-05T07:15:26Z"},{"alias_kind":"pith_short_12","alias_value":"GVW2JXBUZPY6","created_at":"2026-07-05T07:15:26Z"},{"alias_kind":"pith_short_16","alias_value":"GVW2JXBUZPY62NOY","created_at":"2026-07-05T07:15:26Z"},{"alias_kind":"pith_short_8","alias_value":"GVW2JXBU","created_at":"2026-07-05T07:15:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:GVW2JXBUZPY62NOYZNPSOXQRTU","target":"record","payload":{"canonical_record":{"source":{"id":"2311.13244","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-22T09:02:04Z","cross_cats_sorted":["cs.CR","cs.SI"],"title_canon_sha256":"b960958d3d9531f2ef609aeb3d2f3082d70b97e5885e3303ec84e4ecca9095cb","abstract_canon_sha256":"2c9a0d4a86c321a38f91c744ea642733fd1475ba2af950fe8264ccf740adc4bc"},"schema_version":"1.0"},"canonical_sha256":"356da4dc34cbf1ed35d8cb5f275e119d1cf09d55ce07ea9d86e551262645036c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:15:26.593831Z","signature_b64":"yg7CM8IfPa+9HpKVJp+iAovQCgtxtHeP/trVEDenMzWsGkEXsPg+PdjLZXmfpmUfTyv07rrBaob4jEtjgFptBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"356da4dc34cbf1ed35d8cb5f275e119d1cf09d55ce07ea9d86e551262645036c","last_reissued_at":"2026-07-05T07:15:26.592866Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:15:26.592866Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.13244","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:15:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v1TcsAG1G2q5fltkucTog4F/iAFYgeZDqTzycZNj7p5YXHjSoBlJCKWc+U+r3V0EhJ98YJiJdKukm5fUNU32BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:54:45.986233Z"},"content_sha256":"93079204bcf36f742aa8db9839d876066a8e32452a871f97a7f5b4c9df03f5ae","schema_version":"1.0","event_id":"sha256:93079204bcf36f742aa8db9839d876066a8e32452a871f97a7f5b4c9df03f5ae"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:GVW2JXBUZPY62NOYZNPSOXQRTU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Hard Label Black Box Node Injection Attack on Graph Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.SI"],"primary_cat":"cs.LG","authors_text":"Guofeng Zhang, Jingchen Tang, Yu Zhou, Zihao Dong","submitted_at":"2023-11-22T09:02:04Z","abstract_excerpt":"While graph neural networks have achieved state-of-the-art performances in many real-world tasks including graph classification and node classification, recent works have demonstrated they are also extremely vulnerable to adversarial attacks. Most previous works have focused on attacking node classification networks under impractical white-box scenarios. In this work, we will propose a non-targeted Hard Label Black Box Node Injection Attack on Graph Neural Networks, which to the best of our knowledge, is the first of its kind. Under this setting, more real world tasks can be studied because ou"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.13244","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.13244/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:15:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mVA4fSwfugsk3ryeMLEaKEL99Q28fMCxaFpxlt7osJFL8YMigCj2RHOOjU4V1cSY3UyDBvyJr2ZI/o2w5JLyAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T04:54:45.986720Z"},"content_sha256":"0a1699938320995a4f2a2560e62febfaa6571f047779a2abaee646f78acce19b","schema_version":"1.0","event_id":"sha256:0a1699938320995a4f2a2560e62febfaa6571f047779a2abaee646f78acce19b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GVW2JXBUZPY62NOYZNPSOXQRTU/bundle.json","state_url":"https://pith.science/pith/GVW2JXBUZPY62NOYZNPSOXQRTU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GVW2JXBUZPY62NOYZNPSOXQRTU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T04:54:45Z","links":{"resolver":"https://pith.science/pith/GVW2JXBUZPY62NOYZNPSOXQRTU","bundle":"https://pith.science/pith/GVW2JXBUZPY62NOYZNPSOXQRTU/bundle.json","state":"https://pith.science/pith/GVW2JXBUZPY62NOYZNPSOXQRTU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GVW2JXBUZPY62NOYZNPSOXQRTU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:GVW2JXBUZPY62NOYZNPSOXQRTU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2c9a0d4a86c321a38f91c744ea642733fd1475ba2af950fe8264ccf740adc4bc","cross_cats_sorted":["cs.CR","cs.SI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-22T09:02:04Z","title_canon_sha256":"b960958d3d9531f2ef609aeb3d2f3082d70b97e5885e3303ec84e4ecca9095cb"},"schema_version":"1.0","source":{"id":"2311.13244","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.13244","created_at":"2026-07-05T07:15:26Z"},{"alias_kind":"arxiv_version","alias_value":"2311.13244v1","created_at":"2026-07-05T07:15:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.13244","created_at":"2026-07-05T07:15:26Z"},{"alias_kind":"pith_short_12","alias_value":"GVW2JXBUZPY6","created_at":"2026-07-05T07:15:26Z"},{"alias_kind":"pith_short_16","alias_value":"GVW2JXBUZPY62NOY","created_at":"2026-07-05T07:15:26Z"},{"alias_kind":"pith_short_8","alias_value":"GVW2JXBU","created_at":"2026-07-05T07:15:26Z"}],"graph_snapshots":[{"event_id":"sha256:0a1699938320995a4f2a2560e62febfaa6571f047779a2abaee646f78acce19b","target":"graph","created_at":"2026-07-05T07:15:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.13244/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While graph neural networks have achieved state-of-the-art performances in many real-world tasks including graph classification and node classification, recent works have demonstrated they are also extremely vulnerable to adversarial attacks. Most previous works have focused on attacking node classification networks under impractical white-box scenarios. In this work, we will propose a non-targeted Hard Label Black Box Node Injection Attack on Graph Neural Networks, which to the best of our knowledge, is the first of its kind. Under this setting, more real world tasks can be studied because ou","authors_text":"Guofeng Zhang, Jingchen Tang, Yu Zhou, Zihao Dong","cross_cats":["cs.CR","cs.SI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-22T09:02:04Z","title":"Hard Label Black Box Node Injection Attack on Graph Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.13244","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:93079204bcf36f742aa8db9839d876066a8e32452a871f97a7f5b4c9df03f5ae","target":"record","created_at":"2026-07-05T07:15:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2c9a0d4a86c321a38f91c744ea642733fd1475ba2af950fe8264ccf740adc4bc","cross_cats_sorted":["cs.CR","cs.SI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-11-22T09:02:04Z","title_canon_sha256":"b960958d3d9531f2ef609aeb3d2f3082d70b97e5885e3303ec84e4ecca9095cb"},"schema_version":"1.0","source":{"id":"2311.13244","kind":"arxiv","version":1}},"canonical_sha256":"356da4dc34cbf1ed35d8cb5f275e119d1cf09d55ce07ea9d86e551262645036c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"356da4dc34cbf1ed35d8cb5f275e119d1cf09d55ce07ea9d86e551262645036c","first_computed_at":"2026-07-05T07:15:26.592866Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:15:26.592866Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yg7CM8IfPa+9HpKVJp+iAovQCgtxtHeP/trVEDenMzWsGkEXsPg+PdjLZXmfpmUfTyv07rrBaob4jEtjgFptBA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:15:26.593831Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.13244","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:93079204bcf36f742aa8db9839d876066a8e32452a871f97a7f5b4c9df03f5ae","sha256:0a1699938320995a4f2a2560e62febfaa6571f047779a2abaee646f78acce19b"],"state_sha256":"023e1305c578b4192368e2b4fae096ae0f7396443362268c57c68e2c90c0394b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rHXKgV2xgWRQDeTSQicUgSonyMlaOSGDZDFH+GIy+dhIcMCJrL5hkisWs67YlyCxFeXEJNkdJCbcy4DSLFITBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T04:54:45.990142Z","bundle_sha256":"e1a0aeb977fb3f7ffe351cc7ca09b9e4c9769c3aca97be2c7b670550b0fa1aca"}}