{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:K3VONUV7U6YLEIUR6RPH7TPLEL","short_pith_number":"pith:K3VONUV7","canonical_record":{"source":{"id":"2109.13069","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-27T14:19:17Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"1c3cdcb67e4c57ab64b25f797d46a36b1566c35c32796fb2a741bb3893516bd1","abstract_canon_sha256":"5dfe5877de7da6f386f275ef76b6665bcf01672159a18b957d9ad26a9aec9eac"},"schema_version":"1.0"},"canonical_sha256":"56eae6d2bfa7b0b22291f45e7fcdeb22fa166d24fcf3314e315a59ddde3e717a","source":{"kind":"arxiv","id":"2109.13069","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.13069","created_at":"2026-07-05T04:42:56Z"},{"alias_kind":"arxiv_version","alias_value":"2109.13069v2","created_at":"2026-07-05T04:42:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.13069","created_at":"2026-07-05T04:42:56Z"},{"alias_kind":"pith_short_12","alias_value":"K3VONUV7U6YL","created_at":"2026-07-05T04:42:56Z"},{"alias_kind":"pith_short_16","alias_value":"K3VONUV7U6YLEIUR","created_at":"2026-07-05T04:42:56Z"},{"alias_kind":"pith_short_8","alias_value":"K3VONUV7","created_at":"2026-07-05T04:42:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:K3VONUV7U6YLEIUR6RPH7TPLEL","target":"record","payload":{"canonical_record":{"source":{"id":"2109.13069","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-27T14:19:17Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"1c3cdcb67e4c57ab64b25f797d46a36b1566c35c32796fb2a741bb3893516bd1","abstract_canon_sha256":"5dfe5877de7da6f386f275ef76b6665bcf01672159a18b957d9ad26a9aec9eac"},"schema_version":"1.0"},"canonical_sha256":"56eae6d2bfa7b0b22291f45e7fcdeb22fa166d24fcf3314e315a59ddde3e717a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:42:56.238164Z","signature_b64":"SzY0stfD1yU3IeLYUI9vb8ZjGkxZfAjLCNWsfyIvZ1C7hiD9N5SYDGajQ4s76vcCIuht0CdKPD/fivbwHPmADA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"56eae6d2bfa7b0b22291f45e7fcdeb22fa166d24fcf3314e315a59ddde3e717a","last_reissued_at":"2026-07-05T04:42:56.237729Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:42:56.237729Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2109.13069","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:42:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"K/LHyA76Lo9Fnl3BZyxH7b95UxWunoPSyyszYKix6hy0Sr7Lu5akZauCzdRVznDOOBpLpM4SusENhrr6q1tcAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T15:27:08.839956Z"},"content_sha256":"0929cdb7b8b0ecde7586acf787f39bb7336b34155833bd7de9259db669cce4ea","schema_version":"1.0","event_id":"sha256:0929cdb7b8b0ecde7586acf787f39bb7336b34155833bd7de9259db669cce4ea"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:K3VONUV7U6YLEIUR6RPH7TPLEL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Cluster Attack: Query-based Adversarial Attacks on Graphs with Graph-Dependent Priors","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Hang Su, Jun Zhu, Zhengyi Wang, Zhongkai Hao, Ziqiao Wang","submitted_at":"2021-09-27T14:19:17Z","abstract_excerpt":"While deep neural networks have achieved great success in graph analysis, recent work has shown that they are vulnerable to adversarial attacks. Compared with adversarial attacks on image classification, performing adversarial attacks on graphs is more challenging because of the discrete and non-differential nature of the adjacent matrix for a graph. In this work, we propose Cluster Attack -- a Graph Injection Attack (GIA) on node classification, which injects fake nodes into the original graph to degenerate the performance of graph neural networks (GNNs) on certain victim nodes while affectin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.13069","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.13069/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:42:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mVa4K3kNE9znxmUbGkz6ytMB2eO0iQpt2OC9blTptIulXRuN/jdh/2TRw5Jqo47eHzHnn7LD9PYLA4r9BwBqCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T15:27:08.840478Z"},"content_sha256":"212dbbcd8ade69879b787a66619c8eb563769dc370b18d9e941d4e622ee908ef","schema_version":"1.0","event_id":"sha256:212dbbcd8ade69879b787a66619c8eb563769dc370b18d9e941d4e622ee908ef"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/K3VONUV7U6YLEIUR6RPH7TPLEL/bundle.json","state_url":"https://pith.science/pith/K3VONUV7U6YLEIUR6RPH7TPLEL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/K3VONUV7U6YLEIUR6RPH7TPLEL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T15:27:08Z","links":{"resolver":"https://pith.science/pith/K3VONUV7U6YLEIUR6RPH7TPLEL","bundle":"https://pith.science/pith/K3VONUV7U6YLEIUR6RPH7TPLEL/bundle.json","state":"https://pith.science/pith/K3VONUV7U6YLEIUR6RPH7TPLEL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/K3VONUV7U6YLEIUR6RPH7TPLEL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:K3VONUV7U6YLEIUR6RPH7TPLEL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5dfe5877de7da6f386f275ef76b6665bcf01672159a18b957d9ad26a9aec9eac","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-27T14:19:17Z","title_canon_sha256":"1c3cdcb67e4c57ab64b25f797d46a36b1566c35c32796fb2a741bb3893516bd1"},"schema_version":"1.0","source":{"id":"2109.13069","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.13069","created_at":"2026-07-05T04:42:56Z"},{"alias_kind":"arxiv_version","alias_value":"2109.13069v2","created_at":"2026-07-05T04:42:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.13069","created_at":"2026-07-05T04:42:56Z"},{"alias_kind":"pith_short_12","alias_value":"K3VONUV7U6YL","created_at":"2026-07-05T04:42:56Z"},{"alias_kind":"pith_short_16","alias_value":"K3VONUV7U6YLEIUR","created_at":"2026-07-05T04:42:56Z"},{"alias_kind":"pith_short_8","alias_value":"K3VONUV7","created_at":"2026-07-05T04:42:56Z"}],"graph_snapshots":[{"event_id":"sha256:212dbbcd8ade69879b787a66619c8eb563769dc370b18d9e941d4e622ee908ef","target":"graph","created_at":"2026-07-05T04:42:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2109.13069/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While deep neural networks have achieved great success in graph analysis, recent work has shown that they are vulnerable to adversarial attacks. Compared with adversarial attacks on image classification, performing adversarial attacks on graphs is more challenging because of the discrete and non-differential nature of the adjacent matrix for a graph. In this work, we propose Cluster Attack -- a Graph Injection Attack (GIA) on node classification, which injects fake nodes into the original graph to degenerate the performance of graph neural networks (GNNs) on certain victim nodes while affectin","authors_text":"Hang Su, Jun Zhu, Zhengyi Wang, Zhongkai Hao, Ziqiao Wang","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-27T14:19:17Z","title":"Cluster Attack: Query-based Adversarial Attacks on Graphs with Graph-Dependent Priors"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.13069","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0929cdb7b8b0ecde7586acf787f39bb7336b34155833bd7de9259db669cce4ea","target":"record","created_at":"2026-07-05T04:42:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5dfe5877de7da6f386f275ef76b6665bcf01672159a18b957d9ad26a9aec9eac","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-27T14:19:17Z","title_canon_sha256":"1c3cdcb67e4c57ab64b25f797d46a36b1566c35c32796fb2a741bb3893516bd1"},"schema_version":"1.0","source":{"id":"2109.13069","kind":"arxiv","version":2}},"canonical_sha256":"56eae6d2bfa7b0b22291f45e7fcdeb22fa166d24fcf3314e315a59ddde3e717a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"56eae6d2bfa7b0b22291f45e7fcdeb22fa166d24fcf3314e315a59ddde3e717a","first_computed_at":"2026-07-05T04:42:56.237729Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:42:56.237729Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SzY0stfD1yU3IeLYUI9vb8ZjGkxZfAjLCNWsfyIvZ1C7hiD9N5SYDGajQ4s76vcCIuht0CdKPD/fivbwHPmADA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:42:56.238164Z","signed_message":"canonical_sha256_bytes"},"source_id":"2109.13069","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0929cdb7b8b0ecde7586acf787f39bb7336b34155833bd7de9259db669cce4ea","sha256:212dbbcd8ade69879b787a66619c8eb563769dc370b18d9e941d4e622ee908ef"],"state_sha256":"9c893c96efe82f6819db83ed7d9be05d6bc2effca407047672d77898e40702fe"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MBLpSaIUKhaI8n1AbxVn1kz++0w103nvQDUJcCq3IqhAXXZRneCdKGPmWv6aIv2vx1gNc1KCeW7iUYliX+jiCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T15:27:08.845225Z","bundle_sha256":"0245d8df0c704390f343055779d9f409dba33331a337a028eff6551991ea18bc"}}