{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:K4MI74M3RVZXKNPJVYPSEAD2W7","short_pith_number":"pith:K4MI74M3","canonical_record":{"source":{"id":"2005.02131","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-05T13:22:35Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f2cc80a0a969e23e8e527eabef7cfa6580a7db3f1d6ea83b3493c0929b6a1607","abstract_canon_sha256":"e5a305ceb50ebcda4720181a4d44597eff8b69a8db063b738a31eaab59a3fd8c"},"schema_version":"1.0"},"canonical_sha256":"57188ff19b8d737535e9ae1f22007ab7c825b778920f027e29d2df61d999ade5","source":{"kind":"arxiv","id":"2005.02131","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2005.02131","created_at":"2026-07-05T01:40:28Z"},{"alias_kind":"arxiv_version","alias_value":"2005.02131v2","created_at":"2026-07-05T01:40:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.02131","created_at":"2026-07-05T01:40:28Z"},{"alias_kind":"pith_short_12","alias_value":"K4MI74M3RVZX","created_at":"2026-07-05T01:40:28Z"},{"alias_kind":"pith_short_16","alias_value":"K4MI74M3RVZXKNPJ","created_at":"2026-07-05T01:40:28Z"},{"alias_kind":"pith_short_8","alias_value":"K4MI74M3","created_at":"2026-07-05T01:40:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:K4MI74M3RVZXKNPJVYPSEAD2W7","target":"record","payload":{"canonical_record":{"source":{"id":"2005.02131","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-05T13:22:35Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f2cc80a0a969e23e8e527eabef7cfa6580a7db3f1d6ea83b3493c0929b6a1607","abstract_canon_sha256":"e5a305ceb50ebcda4720181a4d44597eff8b69a8db063b738a31eaab59a3fd8c"},"schema_version":"1.0"},"canonical_sha256":"57188ff19b8d737535e9ae1f22007ab7c825b778920f027e29d2df61d999ade5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:40:28.327849Z","signature_b64":"KxC++ml9+QXaWk7VISIP1+hmyTwJNenFTuHBjvYNRexiYFtmbVU/MJkD2g/M/9EICIXWLBCteu5u2GwBSx5qCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"57188ff19b8d737535e9ae1f22007ab7c825b778920f027e29d2df61d999ade5","last_reissued_at":"2026-07-05T01:40:28.327385Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:40:28.327385Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2005.02131","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:40:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uXHfq5Nutc8wwK4yMhCZhsGvcL79le4vUJOkBB39Hr6qVpONaip2micesABcJCDe3DzsEDTaadNdgUDp7A2zBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T07:44:54.574290Z"},"content_sha256":"2a38f091007a0a8c860171099da3eb7ed399951639f1f20973a53eeed6bca74f","schema_version":"1.0","event_id":"sha256:2a38f091007a0a8c860171099da3eb7ed399951639f1f20973a53eeed6bca74f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:K4MI74M3RVZXKNPJVYPSEAD2W7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Stealing Links from Graph Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Jinyuan Jia, Michael Backes, Neil Zhenqiang Gong, Xinlei He, Yang Zhang","submitted_at":"2020-05-05T13:22:35Z","abstract_excerpt":"Graph data, such as chemical networks and social networks, may be deemed confidential/private because the data owner often spends lots of resources collecting the data or the data contains sensitive information, e.g., social relationships. Recently, neural networks were extended to graph data, which are known as graph neural networks (GNNs). Due to their superior performance, GNNs have many applications, such as healthcare analytics, recommender systems, and fraud detection. In this work, we propose the first attacks to steal a graph from the outputs of a GNN model that is trained on the graph"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.02131","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2005.02131/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:40:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t/PxXAHE42iHpiljbF/dMkWeG85jy1pT63rGrh9LpNR992LEl8WLtdQn17kV8IeIDEhEz6qOb4WCgtTleSUnAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T07:44:54.574784Z"},"content_sha256":"e35115f6430a07c663fe7eaba35a1f00638324eababa8a405cce685c30533d0f","schema_version":"1.0","event_id":"sha256:e35115f6430a07c663fe7eaba35a1f00638324eababa8a405cce685c30533d0f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/K4MI74M3RVZXKNPJVYPSEAD2W7/bundle.json","state_url":"https://pith.science/pith/K4MI74M3RVZXKNPJVYPSEAD2W7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/K4MI74M3RVZXKNPJVYPSEAD2W7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T07:44:54Z","links":{"resolver":"https://pith.science/pith/K4MI74M3RVZXKNPJVYPSEAD2W7","bundle":"https://pith.science/pith/K4MI74M3RVZXKNPJVYPSEAD2W7/bundle.json","state":"https://pith.science/pith/K4MI74M3RVZXKNPJVYPSEAD2W7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/K4MI74M3RVZXKNPJVYPSEAD2W7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:K4MI74M3RVZXKNPJVYPSEAD2W7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e5a305ceb50ebcda4720181a4d44597eff8b69a8db063b738a31eaab59a3fd8c","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-05T13:22:35Z","title_canon_sha256":"f2cc80a0a969e23e8e527eabef7cfa6580a7db3f1d6ea83b3493c0929b6a1607"},"schema_version":"1.0","source":{"id":"2005.02131","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2005.02131","created_at":"2026-07-05T01:40:28Z"},{"alias_kind":"arxiv_version","alias_value":"2005.02131v2","created_at":"2026-07-05T01:40:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.02131","created_at":"2026-07-05T01:40:28Z"},{"alias_kind":"pith_short_12","alias_value":"K4MI74M3RVZX","created_at":"2026-07-05T01:40:28Z"},{"alias_kind":"pith_short_16","alias_value":"K4MI74M3RVZXKNPJ","created_at":"2026-07-05T01:40:28Z"},{"alias_kind":"pith_short_8","alias_value":"K4MI74M3","created_at":"2026-07-05T01:40:28Z"}],"graph_snapshots":[{"event_id":"sha256:e35115f6430a07c663fe7eaba35a1f00638324eababa8a405cce685c30533d0f","target":"graph","created_at":"2026-07-05T01:40:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2005.02131/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph data, such as chemical networks and social networks, may be deemed confidential/private because the data owner often spends lots of resources collecting the data or the data contains sensitive information, e.g., social relationships. Recently, neural networks were extended to graph data, which are known as graph neural networks (GNNs). Due to their superior performance, GNNs have many applications, such as healthcare analytics, recommender systems, and fraud detection. In this work, we propose the first attacks to steal a graph from the outputs of a GNN model that is trained on the graph","authors_text":"Jinyuan Jia, Michael Backes, Neil Zhenqiang Gong, Xinlei He, Yang Zhang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-05T13:22:35Z","title":"Stealing Links from Graph Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.02131","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2a38f091007a0a8c860171099da3eb7ed399951639f1f20973a53eeed6bca74f","target":"record","created_at":"2026-07-05T01:40:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e5a305ceb50ebcda4720181a4d44597eff8b69a8db063b738a31eaab59a3fd8c","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-05-05T13:22:35Z","title_canon_sha256":"f2cc80a0a969e23e8e527eabef7cfa6580a7db3f1d6ea83b3493c0929b6a1607"},"schema_version":"1.0","source":{"id":"2005.02131","kind":"arxiv","version":2}},"canonical_sha256":"57188ff19b8d737535e9ae1f22007ab7c825b778920f027e29d2df61d999ade5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"57188ff19b8d737535e9ae1f22007ab7c825b778920f027e29d2df61d999ade5","first_computed_at":"2026-07-05T01:40:28.327385Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:40:28.327385Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KxC++ml9+QXaWk7VISIP1+hmyTwJNenFTuHBjvYNRexiYFtmbVU/MJkD2g/M/9EICIXWLBCteu5u2GwBSx5qCA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:40:28.327849Z","signed_message":"canonical_sha256_bytes"},"source_id":"2005.02131","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2a38f091007a0a8c860171099da3eb7ed399951639f1f20973a53eeed6bca74f","sha256:e35115f6430a07c663fe7eaba35a1f00638324eababa8a405cce685c30533d0f"],"state_sha256":"8dc6d31f064953094c9bfacbafac019fea3b30605291cbcc5321652914fea254"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UclZhZ58TFmMu8BhY1oUQyfuRiVZYWzbvucTopGUNFlAOzUTEqz9O1Pb5fX+AFB3U4RFforvZhGmJxBJGjzwDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T07:44:54.578598Z","bundle_sha256":"426beaa83f157fde86e1b5effcba3fbd3cffdc779cc25cab17fa1e95e4c8f93f"}}