{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:JQ5LGHM7SY5IJUS7JHLSVTIWDC","short_pith_number":"pith:JQ5LGHM7","canonical_record":{"source":{"id":"2106.06663","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-12T01:53:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"debc94c59b4fb9ed7ba68480a576fb869e7f75e9708852e595f517a97e23c30c","abstract_canon_sha256":"5646c0521d66bbdf7e0ca1bb8322772f8c239d486894efb3629cca4be7095033"},"schema_version":"1.0"},"canonical_sha256":"4c3ab31d9f963a84d25f49d72acd1618bf4d5cb6ee6710420979bb4c8226f33b","source":{"kind":"arxiv","id":"2106.06663","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.06663","created_at":"2026-07-05T03:30:12Z"},{"alias_kind":"arxiv_version","alias_value":"2106.06663v2","created_at":"2026-07-05T03:30:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.06663","created_at":"2026-07-05T03:30:12Z"},{"alias_kind":"pith_short_12","alias_value":"JQ5LGHM7SY5I","created_at":"2026-07-05T03:30:12Z"},{"alias_kind":"pith_short_16","alias_value":"JQ5LGHM7SY5IJUS7","created_at":"2026-07-05T03:30:12Z"},{"alias_kind":"pith_short_8","alias_value":"JQ5LGHM7","created_at":"2026-07-05T03:30:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:JQ5LGHM7SY5IJUS7JHLSVTIWDC","target":"record","payload":{"canonical_record":{"source":{"id":"2106.06663","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-12T01:53:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"debc94c59b4fb9ed7ba68480a576fb869e7f75e9708852e595f517a97e23c30c","abstract_canon_sha256":"5646c0521d66bbdf7e0ca1bb8322772f8c239d486894efb3629cca4be7095033"},"schema_version":"1.0"},"canonical_sha256":"4c3ab31d9f963a84d25f49d72acd1618bf4d5cb6ee6710420979bb4c8226f33b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:30:12.626219Z","signature_b64":"7jzOykuJiTQuuAmkBPAitdqg8wc+aLJy6DT/ALVD5OHzE8rZpQ7wKCneq56Wor3W/SkJG1PH5ByGnW7mFYf9CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4c3ab31d9f963a84d25f49d72acd1618bf4d5cb6ee6710420979bb4c8226f33b","last_reissued_at":"2026-07-05T03:30:12.625793Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:30:12.625793Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.06663","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:30:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6Zx1SaFvQFloeZ3xDi1gZzo8GFe08hESsA7ratGPu5+JUoXDztrYqkvCHVcADkCdyTiuacHkcCtZ2iLzYTP0Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:41:16.493507Z"},"content_sha256":"d5d84502f4a50524e364e9effa8653f48d9182ad59f2ebe874e58290d8d39f77","schema_version":"1.0","event_id":"sha256:d5d84502f4a50524e364e9effa8653f48d9182ad59f2ebe874e58290d8d39f77"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:JQ5LGHM7SY5IJUS7JHLSVTIWDC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TDGIA:Effective Injection Attacks on Graph Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Evgeny Kharlamov, Jialiang Lu, Jie Tang, Qinkai Zheng, Xinyu Guan, Xu Zou, Yuxiao Dong","submitted_at":"2021-06-12T01:53:25Z","abstract_excerpt":"Graph Neural Networks (GNNs) have achieved promising performance in various real-world applications. However, recent studies have shown that GNNs are vulnerable to adversarial attacks. In this paper, we study a recently-introduced realistic attack scenario on graphs -- graph injection attack (GIA). In the GIA scenario, the adversary is not able to modify the existing link structure and node attributes of the input graph, instead the attack is performed by injecting adversarial nodes into it. We present an analysis on the topological vulnerability of GNNs under GIA setting, based on which we pr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.06663","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.06663/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:30:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SMkWRVvMdsdkxAQotDoLz002/f0K5FwryWN5mhpf8C+YOIyziYo4NdnKAU1XdZ+efZkX5UfyJ1/1W7f7m7O4Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:41:16.494398Z"},"content_sha256":"6692b181cc35f80dd6d8590a91c2a45ebafdde34631546a471f81d842194d8fa","schema_version":"1.0","event_id":"sha256:6692b181cc35f80dd6d8590a91c2a45ebafdde34631546a471f81d842194d8fa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JQ5LGHM7SY5IJUS7JHLSVTIWDC/bundle.json","state_url":"https://pith.science/pith/JQ5LGHM7SY5IJUS7JHLSVTIWDC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JQ5LGHM7SY5IJUS7JHLSVTIWDC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T07:41:16Z","links":{"resolver":"https://pith.science/pith/JQ5LGHM7SY5IJUS7JHLSVTIWDC","bundle":"https://pith.science/pith/JQ5LGHM7SY5IJUS7JHLSVTIWDC/bundle.json","state":"https://pith.science/pith/JQ5LGHM7SY5IJUS7JHLSVTIWDC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JQ5LGHM7SY5IJUS7JHLSVTIWDC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:JQ5LGHM7SY5IJUS7JHLSVTIWDC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5646c0521d66bbdf7e0ca1bb8322772f8c239d486894efb3629cca4be7095033","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-12T01:53:25Z","title_canon_sha256":"debc94c59b4fb9ed7ba68480a576fb869e7f75e9708852e595f517a97e23c30c"},"schema_version":"1.0","source":{"id":"2106.06663","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.06663","created_at":"2026-07-05T03:30:12Z"},{"alias_kind":"arxiv_version","alias_value":"2106.06663v2","created_at":"2026-07-05T03:30:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.06663","created_at":"2026-07-05T03:30:12Z"},{"alias_kind":"pith_short_12","alias_value":"JQ5LGHM7SY5I","created_at":"2026-07-05T03:30:12Z"},{"alias_kind":"pith_short_16","alias_value":"JQ5LGHM7SY5IJUS7","created_at":"2026-07-05T03:30:12Z"},{"alias_kind":"pith_short_8","alias_value":"JQ5LGHM7","created_at":"2026-07-05T03:30:12Z"}],"graph_snapshots":[{"event_id":"sha256:6692b181cc35f80dd6d8590a91c2a45ebafdde34631546a471f81d842194d8fa","target":"graph","created_at":"2026-07-05T03:30:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.06663/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph Neural Networks (GNNs) have achieved promising performance in various real-world applications. However, recent studies have shown that GNNs are vulnerable to adversarial attacks. In this paper, we study a recently-introduced realistic attack scenario on graphs -- graph injection attack (GIA). In the GIA scenario, the adversary is not able to modify the existing link structure and node attributes of the input graph, instead the attack is performed by injecting adversarial nodes into it. We present an analysis on the topological vulnerability of GNNs under GIA setting, based on which we pr","authors_text":"Evgeny Kharlamov, Jialiang Lu, Jie Tang, Qinkai Zheng, Xinyu Guan, Xu Zou, Yuxiao Dong","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-12T01:53:25Z","title":"TDGIA:Effective Injection Attacks on Graph Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.06663","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d5d84502f4a50524e364e9effa8653f48d9182ad59f2ebe874e58290d8d39f77","target":"record","created_at":"2026-07-05T03:30:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5646c0521d66bbdf7e0ca1bb8322772f8c239d486894efb3629cca4be7095033","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-12T01:53:25Z","title_canon_sha256":"debc94c59b4fb9ed7ba68480a576fb869e7f75e9708852e595f517a97e23c30c"},"schema_version":"1.0","source":{"id":"2106.06663","kind":"arxiv","version":2}},"canonical_sha256":"4c3ab31d9f963a84d25f49d72acd1618bf4d5cb6ee6710420979bb4c8226f33b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4c3ab31d9f963a84d25f49d72acd1618bf4d5cb6ee6710420979bb4c8226f33b","first_computed_at":"2026-07-05T03:30:12.625793Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:30:12.625793Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7jzOykuJiTQuuAmkBPAitdqg8wc+aLJy6DT/ALVD5OHzE8rZpQ7wKCneq56Wor3W/SkJG1PH5ByGnW7mFYf9CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:30:12.626219Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.06663","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d5d84502f4a50524e364e9effa8653f48d9182ad59f2ebe874e58290d8d39f77","sha256:6692b181cc35f80dd6d8590a91c2a45ebafdde34631546a471f81d842194d8fa"],"state_sha256":"ab2bba2d3895c0ca0915c97a280609817e9e8f5a3506e37a3f07b2250c681e90"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gA96bPXJYdOvZI9nG2xXElOfd5B9QVjROCD1dgKJEpPxFkv1L6SxowUfYvyprXcXUqH2MocKjt6EUEsxnmyBBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T07:41:16.537732Z","bundle_sha256":"8f9f3a3bee9c41af60896f2b27c5948c8364c59df50b4f2ebc2e3a66ed8f6a70"}}