{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2023:P4ZRJPWSSPICDG3PSSWOAZSBAZ","short_pith_number":"pith:P4ZRJPWS","schema_version":"1.0","canonical_sha256":"7f3314bed293d0219b6f94ace0664106726fb7ca25865bc9bec396a7238bc6a4","source":{"kind":"arxiv","id":"2304.02277","version":2},"attestation_state":"computed","paper":{"title":"Rethinking the Trigger-injecting Position in Graph Backdoor Attack","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Gorka Abad, Jing Xu, Stjepan Picek","submitted_at":"2023-04-05T07:50:05Z","abstract_excerpt":"Backdoor attacks have been demonstrated as a security threat for machine learning models. Traditional backdoor attacks intend to inject backdoor functionality into the model such that the backdoored model will perform abnormally on inputs with predefined backdoor triggers and still retain state-of-the-art performance on the clean inputs. While there are already some works on backdoor attacks on Graph Neural Networks (GNNs), the backdoor trigger in the graph domain is mostly injected into random positions of the sample. There is no work analyzing and explaining the backdoor attack performance w"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2304.02277","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-04-05T07:50:05Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"951229be40adbc22bb90236b71ab08e6124b196710fbefe884a44c9c986fc7a1","abstract_canon_sha256":"9cb3b5a9ce7a1a8bb66129c99eea4f35251cbcf49c1be66d629c0ec9cf640c57"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:02:09.356383Z","signature_b64":"avp18fAEh4whZrgFi7oB4WvyhbvdShGQm9efuWFa3HjFMmRqqCckovFw8tbcl9Q+VJxXXHT2dLNP1GfLV7kqCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7f3314bed293d0219b6f94ace0664106726fb7ca25865bc9bec396a7238bc6a4","last_reissued_at":"2026-07-05T06:02:09.355921Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:02:09.355921Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Rethinking the Trigger-injecting Position in Graph Backdoor Attack","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Gorka Abad, Jing Xu, Stjepan Picek","submitted_at":"2023-04-05T07:50:05Z","abstract_excerpt":"Backdoor attacks have been demonstrated as a security threat for machine learning models. Traditional backdoor attacks intend to inject backdoor functionality into the model such that the backdoored model will perform abnormally on inputs with predefined backdoor triggers and still retain state-of-the-art performance on the clean inputs. While there are already some works on backdoor attacks on Graph Neural Networks (GNNs), the backdoor trigger in the graph domain is mostly injected into random positions of the sample. There is no work analyzing and explaining the backdoor attack performance w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.02277","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.02277/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2304.02277","created_at":"2026-07-05T06:02:09.355978+00:00"},{"alias_kind":"arxiv_version","alias_value":"2304.02277v2","created_at":"2026-07-05T06:02:09.355978+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.02277","created_at":"2026-07-05T06:02:09.355978+00:00"},{"alias_kind":"pith_short_12","alias_value":"P4ZRJPWSSPIC","created_at":"2026-07-05T06:02:09.355978+00:00"},{"alias_kind":"pith_short_16","alias_value":"P4ZRJPWSSPICDG3P","created_at":"2026-07-05T06:02:09.355978+00:00"},{"alias_kind":"pith_short_8","alias_value":"P4ZRJPWS","created_at":"2026-07-05T06:02:09.355978+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/P4ZRJPWSSPICDG3PSSWOAZSBAZ","json":"https://pith.science/pith/P4ZRJPWSSPICDG3PSSWOAZSBAZ.json","graph_json":"https://pith.science/api/pith-number/P4ZRJPWSSPICDG3PSSWOAZSBAZ/graph.json","events_json":"https://pith.science/api/pith-number/P4ZRJPWSSPICDG3PSSWOAZSBAZ/events.json","paper":"https://pith.science/paper/P4ZRJPWS"},"agent_actions":{"view_html":"https://pith.science/pith/P4ZRJPWSSPICDG3PSSWOAZSBAZ","download_json":"https://pith.science/pith/P4ZRJPWSSPICDG3PSSWOAZSBAZ.json","view_paper":"https://pith.science/paper/P4ZRJPWS","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2304.02277&json=true","fetch_graph":"https://pith.science/api/pith-number/P4ZRJPWSSPICDG3PSSWOAZSBAZ/graph.json","fetch_events":"https://pith.science/api/pith-number/P4ZRJPWSSPICDG3PSSWOAZSBAZ/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/P4ZRJPWSSPICDG3PSSWOAZSBAZ/action/timestamp_anchor","attest_storage":"https://pith.science/pith/P4ZRJPWSSPICDG3PSSWOAZSBAZ/action/storage_attestation","attest_author":"https://pith.science/pith/P4ZRJPWSSPICDG3PSSWOAZSBAZ/action/author_attestation","sign_citation":"https://pith.science/pith/P4ZRJPWSSPICDG3PSSWOAZSBAZ/action/citation_signature","submit_replication":"https://pith.science/pith/P4ZRJPWSSPICDG3PSSWOAZSBAZ/action/replication_record"}},"created_at":"2026-07-05T06:02:09.355978+00:00","updated_at":"2026-07-05T06:02:09.355978+00:00"}