{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:UXZIEDPKAEL53HKS5IFWLSWCXB","short_pith_number":"pith:UXZIEDPK","canonical_record":{"source":{"id":"2207.13766","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-07-27T19:46:26Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b2642c707f76ef21a366a153a78405d9b9dffe20baaa98a86cb608fcdb64bcee","abstract_canon_sha256":"f441ac1824e2d9fd1a315a8c5a395a1163af5b614a0e4ca2d515564ad512dc08"},"schema_version":"1.0"},"canonical_sha256":"a5f2820dea0117dd9d52ea0b65cac2b840739a92a16a3c83ccdcceccec1787d6","source":{"kind":"arxiv","id":"2207.13766","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.13766","created_at":"2026-07-05T04:44:12Z"},{"alias_kind":"arxiv_version","alias_value":"2207.13766v1","created_at":"2026-07-05T04:44:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.13766","created_at":"2026-07-05T04:44:12Z"},{"alias_kind":"pith_short_12","alias_value":"UXZIEDPKAEL5","created_at":"2026-07-05T04:44:12Z"},{"alias_kind":"pith_short_16","alias_value":"UXZIEDPKAEL53HKS","created_at":"2026-07-05T04:44:12Z"},{"alias_kind":"pith_short_8","alias_value":"UXZIEDPK","created_at":"2026-07-05T04:44:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:UXZIEDPKAEL53HKS5IFWLSWCXB","target":"record","payload":{"canonical_record":{"source":{"id":"2207.13766","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-07-27T19:46:26Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b2642c707f76ef21a366a153a78405d9b9dffe20baaa98a86cb608fcdb64bcee","abstract_canon_sha256":"f441ac1824e2d9fd1a315a8c5a395a1163af5b614a0e4ca2d515564ad512dc08"},"schema_version":"1.0"},"canonical_sha256":"a5f2820dea0117dd9d52ea0b65cac2b840739a92a16a3c83ccdcceccec1787d6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:44:12.004239Z","signature_b64":"x87jkXtVe9rMOlt0d8P1C6n4A3wXcu5hq9LeeWk4vWC7GilP81HcbeUNH4y6AK1dprttJU3gDS8DgjJ9Iel4AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a5f2820dea0117dd9d52ea0b65cac2b840739a92a16a3c83ccdcceccec1787d6","last_reissued_at":"2026-07-05T04:44:12.003834Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:44:12.003834Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2207.13766","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:44:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"moWlwn2kX+NdSiAAY2A3e1/UMgHyj11XTCmbkPFlJT3I7u2QSnaVL7jWMC3c+Qmb8x/PETbkTZ6Axlu9f2YVBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:52:12.492552Z"},"content_sha256":"f755ff6832744384918d16f29a9c067aefc7a6a57a3626949348ac449b8b4ab9","schema_version":"1.0","event_id":"sha256:f755ff6832744384918d16f29a9c067aefc7a6a57a3626949348ac449b8b4ab9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:UXZIEDPKAEL53HKS5IFWLSWCXB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Label-Only Membership Inference Attack against Node-Level Graph Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Jiaxin Li, Jing Xu, Mauro Conti, Stjepan Picek","submitted_at":"2022-07-27T19:46:26Z","abstract_excerpt":"Graph Neural Networks (GNNs), inspired by Convolutional Neural Networks (CNNs), aggregate the message of nodes' neighbors and structure information to acquire expressive representations of nodes for node classification, graph classification, and link prediction. Previous studies have indicated that GNNs are vulnerable to Membership Inference Attacks (MIAs), which infer whether a node is in the training data of GNNs and leak the node's private information, like the patient's disease history. The implementation of previous MIAs takes advantage of the models' probability output, which is infeasib"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.13766","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2207.13766/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:44:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2tVRiDrzS/ULU3vndRU+62ljEReL3D83DWPIPYX5bO6iO13LE+pb6ipz2XBBiPwUlfffgz8rwQF/HsRAhLp4Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:52:12.492922Z"},"content_sha256":"09eeca7f42f9aaea4f257ec1a01d0357de471d443c981f315f54ecf1b7e8f636","schema_version":"1.0","event_id":"sha256:09eeca7f42f9aaea4f257ec1a01d0357de471d443c981f315f54ecf1b7e8f636"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UXZIEDPKAEL53HKS5IFWLSWCXB/bundle.json","state_url":"https://pith.science/pith/UXZIEDPKAEL53HKS5IFWLSWCXB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UXZIEDPKAEL53HKS5IFWLSWCXB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T22:52:12Z","links":{"resolver":"https://pith.science/pith/UXZIEDPKAEL53HKS5IFWLSWCXB","bundle":"https://pith.science/pith/UXZIEDPKAEL53HKS5IFWLSWCXB/bundle.json","state":"https://pith.science/pith/UXZIEDPKAEL53HKS5IFWLSWCXB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UXZIEDPKAEL53HKS5IFWLSWCXB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:UXZIEDPKAEL53HKS5IFWLSWCXB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f441ac1824e2d9fd1a315a8c5a395a1163af5b614a0e4ca2d515564ad512dc08","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-07-27T19:46:26Z","title_canon_sha256":"b2642c707f76ef21a366a153a78405d9b9dffe20baaa98a86cb608fcdb64bcee"},"schema_version":"1.0","source":{"id":"2207.13766","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2207.13766","created_at":"2026-07-05T04:44:12Z"},{"alias_kind":"arxiv_version","alias_value":"2207.13766v1","created_at":"2026-07-05T04:44:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.13766","created_at":"2026-07-05T04:44:12Z"},{"alias_kind":"pith_short_12","alias_value":"UXZIEDPKAEL5","created_at":"2026-07-05T04:44:12Z"},{"alias_kind":"pith_short_16","alias_value":"UXZIEDPKAEL53HKS","created_at":"2026-07-05T04:44:12Z"},{"alias_kind":"pith_short_8","alias_value":"UXZIEDPK","created_at":"2026-07-05T04:44:12Z"}],"graph_snapshots":[{"event_id":"sha256:09eeca7f42f9aaea4f257ec1a01d0357de471d443c981f315f54ecf1b7e8f636","target":"graph","created_at":"2026-07-05T04:44:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2207.13766/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Graph Neural Networks (GNNs), inspired by Convolutional Neural Networks (CNNs), aggregate the message of nodes' neighbors and structure information to acquire expressive representations of nodes for node classification, graph classification, and link prediction. Previous studies have indicated that GNNs are vulnerable to Membership Inference Attacks (MIAs), which infer whether a node is in the training data of GNNs and leak the node's private information, like the patient's disease history. The implementation of previous MIAs takes advantage of the models' probability output, which is infeasib","authors_text":"Jiaxin Li, Jing Xu, Mauro Conti, Stjepan Picek","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-07-27T19:46:26Z","title":"Label-Only Membership Inference Attack against Node-Level Graph Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.13766","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f755ff6832744384918d16f29a9c067aefc7a6a57a3626949348ac449b8b4ab9","target":"record","created_at":"2026-07-05T04:44:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f441ac1824e2d9fd1a315a8c5a395a1163af5b614a0e4ca2d515564ad512dc08","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-07-27T19:46:26Z","title_canon_sha256":"b2642c707f76ef21a366a153a78405d9b9dffe20baaa98a86cb608fcdb64bcee"},"schema_version":"1.0","source":{"id":"2207.13766","kind":"arxiv","version":1}},"canonical_sha256":"a5f2820dea0117dd9d52ea0b65cac2b840739a92a16a3c83ccdcceccec1787d6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a5f2820dea0117dd9d52ea0b65cac2b840739a92a16a3c83ccdcceccec1787d6","first_computed_at":"2026-07-05T04:44:12.003834Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:44:12.003834Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"x87jkXtVe9rMOlt0d8P1C6n4A3wXcu5hq9LeeWk4vWC7GilP81HcbeUNH4y6AK1dprttJU3gDS8DgjJ9Iel4AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:44:12.004239Z","signed_message":"canonical_sha256_bytes"},"source_id":"2207.13766","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f755ff6832744384918d16f29a9c067aefc7a6a57a3626949348ac449b8b4ab9","sha256:09eeca7f42f9aaea4f257ec1a01d0357de471d443c981f315f54ecf1b7e8f636"],"state_sha256":"d94cfd8ac5094c6d1b2a189fcdc707d429349fccf57b6d91983d6d83edc41cc9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aRZkqt9NXMmlon2o9Qlo6q9DnSHWBYnaC9+nUQcT0LAAD8OkBVRYnpLQl44QqAk5mkm87/zV0ElAx8sMPcGmAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T22:52:12.495741Z","bundle_sha256":"13a154d5311721b5c8f7c5bfbbc891ec0584b88510feb063a86bd0850dc18bb7"}}