{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:R6VMK3TYPOITBV2ZMJLUNMAR3C","short_pith_number":"pith:R6VMK3TY","canonical_record":{"source":{"id":"2312.07870","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-13T03:17:05Z","cross_cats_sorted":[],"title_canon_sha256":"6f4ebc83c60607b09c3a6deba433e0049d0c42da47dadba591c4243d1fb6e214","abstract_canon_sha256":"48c436c397b91dbb41dda039ff2966311655d650d3694847a953e2c50982d17b"},"schema_version":"1.0"},"canonical_sha256":"8faac56e787b9130d759625746b011d8b0dc915e4e72d85dad3a03fc1b1b7a57","source":{"kind":"arxiv","id":"2312.07870","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.07870","created_at":"2026-07-05T07:23:38Z"},{"alias_kind":"arxiv_version","alias_value":"2312.07870v1","created_at":"2026-07-05T07:23:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.07870","created_at":"2026-07-05T07:23:38Z"},{"alias_kind":"pith_short_12","alias_value":"R6VMK3TYPOIT","created_at":"2026-07-05T07:23:38Z"},{"alias_kind":"pith_short_16","alias_value":"R6VMK3TYPOITBV2Z","created_at":"2026-07-05T07:23:38Z"},{"alias_kind":"pith_short_8","alias_value":"R6VMK3TY","created_at":"2026-07-05T07:23:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:R6VMK3TYPOITBV2ZMJLUNMAR3C","target":"record","payload":{"canonical_record":{"source":{"id":"2312.07870","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-13T03:17:05Z","cross_cats_sorted":[],"title_canon_sha256":"6f4ebc83c60607b09c3a6deba433e0049d0c42da47dadba591c4243d1fb6e214","abstract_canon_sha256":"48c436c397b91dbb41dda039ff2966311655d650d3694847a953e2c50982d17b"},"schema_version":"1.0"},"canonical_sha256":"8faac56e787b9130d759625746b011d8b0dc915e4e72d85dad3a03fc1b1b7a57","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:23:38.568129Z","signature_b64":"fgZQJgo2TzXfcstbh3/IFZpprbXiZVU2uBIN0s5dgD6jyqMYoL6Mb0mcGdadvnUfka+LEZ72j9gg63iGFATlDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8faac56e787b9130d759625746b011d8b0dc915e4e72d85dad3a03fc1b1b7a57","last_reissued_at":"2026-07-05T07:23:38.567640Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:23:38.567640Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.07870","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:23:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8NTH6f0g3pTK34DxEhvlJyqGwTIRA+O7tq4dvDlqkdP/s7YWrARWnuFJ6w4zbgQNAMK2QFOf7cDfUjBQuL8jCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T19:49:34.416794Z"},"content_sha256":"7eb96c22b8cbee0ee7cf1f66f063eedcba47c1c218ee9a3eaa0daf76944abcf4","schema_version":"1.0","event_id":"sha256:7eb96c22b8cbee0ee7cf1f66f063eedcba47c1c218ee9a3eaa0daf76944abcf4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:R6VMK3TYPOITBV2ZMJLUNMAR3C","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Securing Graph Neural Networks in MLaaS: A Comprehensive Realization of Query-based Integrity Verification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bang Wu, Minhui Xue, Qi Li, Shirui Pan, Shuo Wang, Xingliang Yuan","submitted_at":"2023-12-13T03:17:05Z","abstract_excerpt":"The deployment of Graph Neural Networks (GNNs) within Machine Learning as a Service (MLaaS) has opened up new attack surfaces and an escalation in security concerns regarding model-centric attacks. These attacks can directly manipulate the GNN model parameters during serving, causing incorrect predictions and posing substantial threats to essential GNN applications. Traditional integrity verification methods falter in this context due to the limitations imposed by MLaaS and the distinct characteristics of GNN models.\n  In this research, we introduce a groundbreaking approach to protect GNN mod"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.07870","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.07870/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:23:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p1sm1U3cFwNUtUT0B90ckipgfXA/hmnMKUAvpGjAmMojZqnFyyJLw5SBoSityEqRvlCcE+uL38LpRi2L8JesBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T19:49:34.417530Z"},"content_sha256":"9a2cf1d17ab79d258528e13dcf3b0392650d336fca2a3cd3768bc61e02641715","schema_version":"1.0","event_id":"sha256:9a2cf1d17ab79d258528e13dcf3b0392650d336fca2a3cd3768bc61e02641715"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/R6VMK3TYPOITBV2ZMJLUNMAR3C/bundle.json","state_url":"https://pith.science/pith/R6VMK3TYPOITBV2ZMJLUNMAR3C/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/R6VMK3TYPOITBV2ZMJLUNMAR3C/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T19:49:34Z","links":{"resolver":"https://pith.science/pith/R6VMK3TYPOITBV2ZMJLUNMAR3C","bundle":"https://pith.science/pith/R6VMK3TYPOITBV2ZMJLUNMAR3C/bundle.json","state":"https://pith.science/pith/R6VMK3TYPOITBV2ZMJLUNMAR3C/state.json","well_known_bundle":"https://pith.science/.well-known/pith/R6VMK3TYPOITBV2ZMJLUNMAR3C/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:R6VMK3TYPOITBV2ZMJLUNMAR3C","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"48c436c397b91dbb41dda039ff2966311655d650d3694847a953e2c50982d17b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-13T03:17:05Z","title_canon_sha256":"6f4ebc83c60607b09c3a6deba433e0049d0c42da47dadba591c4243d1fb6e214"},"schema_version":"1.0","source":{"id":"2312.07870","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.07870","created_at":"2026-07-05T07:23:38Z"},{"alias_kind":"arxiv_version","alias_value":"2312.07870v1","created_at":"2026-07-05T07:23:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.07870","created_at":"2026-07-05T07:23:38Z"},{"alias_kind":"pith_short_12","alias_value":"R6VMK3TYPOIT","created_at":"2026-07-05T07:23:38Z"},{"alias_kind":"pith_short_16","alias_value":"R6VMK3TYPOITBV2Z","created_at":"2026-07-05T07:23:38Z"},{"alias_kind":"pith_short_8","alias_value":"R6VMK3TY","created_at":"2026-07-05T07:23:38Z"}],"graph_snapshots":[{"event_id":"sha256:9a2cf1d17ab79d258528e13dcf3b0392650d336fca2a3cd3768bc61e02641715","target":"graph","created_at":"2026-07-05T07:23:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.07870/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The deployment of Graph Neural Networks (GNNs) within Machine Learning as a Service (MLaaS) has opened up new attack surfaces and an escalation in security concerns regarding model-centric attacks. These attacks can directly manipulate the GNN model parameters during serving, causing incorrect predictions and posing substantial threats to essential GNN applications. Traditional integrity verification methods falter in this context due to the limitations imposed by MLaaS and the distinct characteristics of GNN models.\n  In this research, we introduce a groundbreaking approach to protect GNN mod","authors_text":"Bang Wu, Minhui Xue, Qi Li, Shirui Pan, Shuo Wang, Xingliang Yuan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-13T03:17:05Z","title":"Securing Graph Neural Networks in MLaaS: A Comprehensive Realization of Query-based Integrity Verification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.07870","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7eb96c22b8cbee0ee7cf1f66f063eedcba47c1c218ee9a3eaa0daf76944abcf4","target":"record","created_at":"2026-07-05T07:23:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"48c436c397b91dbb41dda039ff2966311655d650d3694847a953e2c50982d17b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-13T03:17:05Z","title_canon_sha256":"6f4ebc83c60607b09c3a6deba433e0049d0c42da47dadba591c4243d1fb6e214"},"schema_version":"1.0","source":{"id":"2312.07870","kind":"arxiv","version":1}},"canonical_sha256":"8faac56e787b9130d759625746b011d8b0dc915e4e72d85dad3a03fc1b1b7a57","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8faac56e787b9130d759625746b011d8b0dc915e4e72d85dad3a03fc1b1b7a57","first_computed_at":"2026-07-05T07:23:38.567640Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:23:38.567640Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fgZQJgo2TzXfcstbh3/IFZpprbXiZVU2uBIN0s5dgD6jyqMYoL6Mb0mcGdadvnUfka+LEZ72j9gg63iGFATlDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:23:38.568129Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.07870","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7eb96c22b8cbee0ee7cf1f66f063eedcba47c1c218ee9a3eaa0daf76944abcf4","sha256:9a2cf1d17ab79d258528e13dcf3b0392650d336fca2a3cd3768bc61e02641715"],"state_sha256":"863f1cc1eae9dc240e2f6a1516c5776e56853e568a5fc5fc36f532e08a07141d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vBwebu7p4d35Eboktf24pkWP2jjwJQsiC+AdFpohVTJhww/78UivJMiDRcisC14iFvluyBorXcehTNO36aJvDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T19:49:34.424055Z","bundle_sha256":"3109095f78066ed632c9b0126d520a53d33b60519a0220b0cc27c7dab87fc4c3"}}