{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:TI2UQMBQ5IGLC6PGPSZASWOI4E","short_pith_number":"pith:TI2UQMBQ","schema_version":"1.0","canonical_sha256":"9a35483030ea0cb179e67cb20959c8e123196f7d0f70c137e3784cc79e3a4a75","source":{"kind":"arxiv","id":"2405.10757","version":3},"attestation_state":"computed","paper":{"title":"Rethinking Graph Backdoor Attacks: A Distribution-Preserving Perspective","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Enyan Dai, Minhua Lin, Suhang Wang, Zhiwei Zhang","submitted_at":"2024-05-17T13:09:39Z","abstract_excerpt":"Graph Neural Networks (GNNs) have shown remarkable performance in various tasks. However, recent works reveal that GNNs are vulnerable to backdoor attacks. Generally, backdoor attack poisons the graph by attaching backdoor triggers and the target class label to a set of nodes in the training graph. A GNN trained on the poisoned graph will then be misled to predict test nodes attached with trigger to the target class. Despite their effectiveness, our empirical analysis shows that triggers generated by existing methods tend to be out-of-distribution (OOD), which significantly differ from the cle"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2405.10757","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-05-17T13:09:39Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"e73d8dffa151dcb494f7af2d2c681ee6099b7309dccabf617bf737ed9bfad56f","abstract_canon_sha256":"9f134e4b7051a092ad0e42328db0f91e0d6f823cc36dae95e547a3cb1e39c7ba"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:42:54.718426Z","signature_b64":"WLE0bDxLGSbr2bqDKHadnC5OyLzU7PfMaU6nsWkHFAbsgCyLaiWltIvdFwy5vZTXK/06hElvO096zlkWG/MPAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9a35483030ea0cb179e67cb20959c8e123196f7d0f70c137e3784cc79e3a4a75","last_reissued_at":"2026-07-05T08:42:54.717962Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:42:54.717962Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Rethinking Graph Backdoor Attacks: A Distribution-Preserving Perspective","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Enyan Dai, Minhua Lin, Suhang Wang, Zhiwei Zhang","submitted_at":"2024-05-17T13:09:39Z","abstract_excerpt":"Graph Neural Networks (GNNs) have shown remarkable performance in various tasks. However, recent works reveal that GNNs are vulnerable to backdoor attacks. Generally, backdoor attack poisons the graph by attaching backdoor triggers and the target class label to a set of nodes in the training graph. A GNN trained on the poisoned graph will then be misled to predict test nodes attached with trigger to the target class. Despite their effectiveness, our empirical analysis shows that triggers generated by existing methods tend to be out-of-distribution (OOD), which significantly differ from the cle"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.10757","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.10757/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2405.10757","created_at":"2026-07-05T08:42:54.718020+00:00"},{"alias_kind":"arxiv_version","alias_value":"2405.10757v3","created_at":"2026-07-05T08:42:54.718020+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.10757","created_at":"2026-07-05T08:42:54.718020+00:00"},{"alias_kind":"pith_short_12","alias_value":"TI2UQMBQ5IGL","created_at":"2026-07-05T08:42:54.718020+00:00"},{"alias_kind":"pith_short_16","alias_value":"TI2UQMBQ5IGLC6PG","created_at":"2026-07-05T08:42:54.718020+00:00"},{"alias_kind":"pith_short_8","alias_value":"TI2UQMBQ","created_at":"2026-07-05T08:42:54.718020+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/TI2UQMBQ5IGLC6PGPSZASWOI4E","json":"https://pith.science/pith/TI2UQMBQ5IGLC6PGPSZASWOI4E.json","graph_json":"https://pith.science/api/pith-number/TI2UQMBQ5IGLC6PGPSZASWOI4E/graph.json","events_json":"https://pith.science/api/pith-number/TI2UQMBQ5IGLC6PGPSZASWOI4E/events.json","paper":"https://pith.science/paper/TI2UQMBQ"},"agent_actions":{"view_html":"https://pith.science/pith/TI2UQMBQ5IGLC6PGPSZASWOI4E","download_json":"https://pith.science/pith/TI2UQMBQ5IGLC6PGPSZASWOI4E.json","view_paper":"https://pith.science/paper/TI2UQMBQ","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2405.10757&json=true","fetch_graph":"https://pith.science/api/pith-number/TI2UQMBQ5IGLC6PGPSZASWOI4E/graph.json","fetch_events":"https://pith.science/api/pith-number/TI2UQMBQ5IGLC6PGPSZASWOI4E/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/TI2UQMBQ5IGLC6PGPSZASWOI4E/action/timestamp_anchor","attest_storage":"https://pith.science/pith/TI2UQMBQ5IGLC6PGPSZASWOI4E/action/storage_attestation","attest_author":"https://pith.science/pith/TI2UQMBQ5IGLC6PGPSZASWOI4E/action/author_attestation","sign_citation":"https://pith.science/pith/TI2UQMBQ5IGLC6PGPSZASWOI4E/action/citation_signature","submit_replication":"https://pith.science/pith/TI2UQMBQ5IGLC6PGPSZASWOI4E/action/replication_record"}},"created_at":"2026-07-05T08:42:54.718020+00:00","updated_at":"2026-07-05T08:42:54.718020+00:00"}