{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:OTH2NJKWTTO6JSBEDRUBO5UC5L","short_pith_number":"pith:OTH2NJKW","canonical_record":{"source":{"id":"2003.00653","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-03-02T04:32:38Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"fefd111f9ab3e385fab0f3df48915fed2184ea34ac2d99f1a5b36b77835f6932","abstract_canon_sha256":"f742a52e09d166aa5de8cb6f72fe890569b6917c766dc0952c1ed61a5bc625d1"},"schema_version":"1.0"},"canonical_sha256":"74cfa6a5569cdde4c8241c68177682eae3408915f17108c1095e202d85f066f6","source":{"kind":"arxiv","id":"2003.00653","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.00653","created_at":"2026-07-05T01:58:54Z"},{"alias_kind":"arxiv_version","alias_value":"2003.00653v3","created_at":"2026-07-05T01:58:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.00653","created_at":"2026-07-05T01:58:54Z"},{"alias_kind":"pith_short_12","alias_value":"OTH2NJKWTTO6","created_at":"2026-07-05T01:58:54Z"},{"alias_kind":"pith_short_16","alias_value":"OTH2NJKWTTO6JSBE","created_at":"2026-07-05T01:58:54Z"},{"alias_kind":"pith_short_8","alias_value":"OTH2NJKW","created_at":"2026-07-05T01:58:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:OTH2NJKWTTO6JSBEDRUBO5UC5L","target":"record","payload":{"canonical_record":{"source":{"id":"2003.00653","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-03-02T04:32:38Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"fefd111f9ab3e385fab0f3df48915fed2184ea34ac2d99f1a5b36b77835f6932","abstract_canon_sha256":"f742a52e09d166aa5de8cb6f72fe890569b6917c766dc0952c1ed61a5bc625d1"},"schema_version":"1.0"},"canonical_sha256":"74cfa6a5569cdde4c8241c68177682eae3408915f17108c1095e202d85f066f6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:58:54.759714Z","signature_b64":"jzIRySkLgZ7BY8YX7PTGxLsqi6SaSbWo7Up94PF+QCVcfHhKKuYa734mViksNXvudQAvYV/iuH0CPiwxV7QkBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"74cfa6a5569cdde4c8241c68177682eae3408915f17108c1095e202d85f066f6","last_reissued_at":"2026-07-05T01:58:54.759225Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:58:54.759225Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2003.00653","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:58:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qh52bmBd1hU5MKsl1uW/qzT7kJ/LRHfqZApdKz0AEKTNl9+wfDTnf6mW/NC4U2uzPALKqc+XCyoTCUePvKcbBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T04:52:32.990823Z"},"content_sha256":"2503181a444f5d08d8fea0321c30a69e66c665f23606f9b05a5d79c20de30134","schema_version":"1.0","event_id":"sha256:2503181a444f5d08d8fea0321c30a69e66c665f23606f9b05a5d79c20de30134"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:OTH2NJKWTTO6JSBEDRUBO5UC5L","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Attacks and Defenses on Graphs: A Review, A Tool and Empirical Studies","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Charu Aggarwal, Han Xu, Jiliang Tang, Shuiwang Ji, Wei Jin, Yaxin Li, Yiqi Wang","submitted_at":"2020-03-02T04:32:38Z","abstract_excerpt":"Deep neural networks (DNNs) have achieved significant performance in various tasks. However, recent studies have shown that DNNs can be easily fooled by small perturbation on the input, called adversarial attacks. As the extensions of DNNs to graphs, Graph Neural Networks (GNNs) have been demonstrated to inherit this vulnerability. Adversary can mislead GNNs to give wrong predictions by modifying the graph structure such as manipulating a few edges. This vulnerability has arisen tremendous concerns for adapting GNNs in safety-critical applications and has attracted increasing research attentio"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.00653","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2003.00653/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:58:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CYHfgWfhTWKwCsTBZ/UOyXI3zZb6z/XA9vV/LNVslfdaoX89juT1OlZG4/gSU35zNg2tzvU6Jid1rolsvE0jDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T04:52:32.991337Z"},"content_sha256":"7e620e094bf99d5a845b910f6d5ab414e70fe0dfb07ea4a4dcae67ae0f6f7c39","schema_version":"1.0","event_id":"sha256:7e620e094bf99d5a845b910f6d5ab414e70fe0dfb07ea4a4dcae67ae0f6f7c39"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OTH2NJKWTTO6JSBEDRUBO5UC5L/bundle.json","state_url":"https://pith.science/pith/OTH2NJKWTTO6JSBEDRUBO5UC5L/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OTH2NJKWTTO6JSBEDRUBO5UC5L/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T04:52:32Z","links":{"resolver":"https://pith.science/pith/OTH2NJKWTTO6JSBEDRUBO5UC5L","bundle":"https://pith.science/pith/OTH2NJKWTTO6JSBEDRUBO5UC5L/bundle.json","state":"https://pith.science/pith/OTH2NJKWTTO6JSBEDRUBO5UC5L/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OTH2NJKWTTO6JSBEDRUBO5UC5L/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:OTH2NJKWTTO6JSBEDRUBO5UC5L","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f742a52e09d166aa5de8cb6f72fe890569b6917c766dc0952c1ed61a5bc625d1","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-03-02T04:32:38Z","title_canon_sha256":"fefd111f9ab3e385fab0f3df48915fed2184ea34ac2d99f1a5b36b77835f6932"},"schema_version":"1.0","source":{"id":"2003.00653","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.00653","created_at":"2026-07-05T01:58:54Z"},{"alias_kind":"arxiv_version","alias_value":"2003.00653v3","created_at":"2026-07-05T01:58:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.00653","created_at":"2026-07-05T01:58:54Z"},{"alias_kind":"pith_short_12","alias_value":"OTH2NJKWTTO6","created_at":"2026-07-05T01:58:54Z"},{"alias_kind":"pith_short_16","alias_value":"OTH2NJKWTTO6JSBE","created_at":"2026-07-05T01:58:54Z"},{"alias_kind":"pith_short_8","alias_value":"OTH2NJKW","created_at":"2026-07-05T01:58:54Z"}],"graph_snapshots":[{"event_id":"sha256:7e620e094bf99d5a845b910f6d5ab414e70fe0dfb07ea4a4dcae67ae0f6f7c39","target":"graph","created_at":"2026-07-05T01:58:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2003.00653/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) have achieved significant performance in various tasks. However, recent studies have shown that DNNs can be easily fooled by small perturbation on the input, called adversarial attacks. As the extensions of DNNs to graphs, Graph Neural Networks (GNNs) have been demonstrated to inherit this vulnerability. Adversary can mislead GNNs to give wrong predictions by modifying the graph structure such as manipulating a few edges. This vulnerability has arisen tremendous concerns for adapting GNNs in safety-critical applications and has attracted increasing research attentio","authors_text":"Charu Aggarwal, Han Xu, Jiliang Tang, Shuiwang Ji, Wei Jin, Yaxin Li, Yiqi Wang","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-03-02T04:32:38Z","title":"Adversarial Attacks and Defenses on Graphs: A Review, A Tool and Empirical Studies"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.00653","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2503181a444f5d08d8fea0321c30a69e66c665f23606f9b05a5d79c20de30134","target":"record","created_at":"2026-07-05T01:58:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f742a52e09d166aa5de8cb6f72fe890569b6917c766dc0952c1ed61a5bc625d1","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2020-03-02T04:32:38Z","title_canon_sha256":"fefd111f9ab3e385fab0f3df48915fed2184ea34ac2d99f1a5b36b77835f6932"},"schema_version":"1.0","source":{"id":"2003.00653","kind":"arxiv","version":3}},"canonical_sha256":"74cfa6a5569cdde4c8241c68177682eae3408915f17108c1095e202d85f066f6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"74cfa6a5569cdde4c8241c68177682eae3408915f17108c1095e202d85f066f6","first_computed_at":"2026-07-05T01:58:54.759225Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:58:54.759225Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jzIRySkLgZ7BY8YX7PTGxLsqi6SaSbWo7Up94PF+QCVcfHhKKuYa734mViksNXvudQAvYV/iuH0CPiwxV7QkBg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:58:54.759714Z","signed_message":"canonical_sha256_bytes"},"source_id":"2003.00653","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2503181a444f5d08d8fea0321c30a69e66c665f23606f9b05a5d79c20de30134","sha256:7e620e094bf99d5a845b910f6d5ab414e70fe0dfb07ea4a4dcae67ae0f6f7c39"],"state_sha256":"f11c53fc5834a8d9b1b23ff7326e912fefe53ab07da8c58f666462a943777a5d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gCvzOA1bnlKxRVtw5zn5s12sHQU0vQuCGZW9+PwEYNYEZPgODmRwo4zfzSzB2j3e3T4+0zr1LKOYBEenOwiTCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T04:52:32.996082Z","bundle_sha256":"5e9054ef068f0ab59d148b047c3cd7f9def32b98e7c05a1c95ce4fbd79578440"}}