{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:WMUZ75KF4VM6O4UFIC3BNU43JX","short_pith_number":"pith:WMUZ75KF","schema_version":"1.0","canonical_sha256":"b3299ff545e559e7728540b616d39b4de72caeb7acae34e65e03038eb2ae6d1b","source":{"kind":"arxiv","id":"2406.03193","version":1},"attestation_state":"computed","paper":{"title":"Graph Neural Network Explanations are Fragile","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Binghui Wang, Jiate Li, Jinyuan Jia, Meng Pang, Yun Dong","submitted_at":"2024-06-05T12:23:02Z","abstract_excerpt":"Explainable Graph Neural Network (GNN) has emerged recently to foster the trust of using GNNs. Existing GNN explainers are developed from various perspectives to enhance the explanation performance. We take the first step to study GNN explainers under adversarial attack--We found that an adversary slightly perturbing graph structure can ensure GNN model makes correct predictions, but the GNN explainer yields a drastically different explanation on the perturbed graph. Specifically, we first formulate the attack problem under a practical threat model (i.e., the adversary has limited knowledge ab"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2406.03193","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-05T12:23:02Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"8b3755322dc8564130234756dfa95965b5cdf6757ff8f91b39b732fb04a4e6d6","abstract_canon_sha256":"2308200f33cc41136684a99636f334484ac934453c4c7fcc87fa7be84d946a20"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:27:52.784197Z","signature_b64":"05SGHlFSQKphYfK58nZtY5XoWezEGPceGQ6Qyc35E9m5nbDxa9mPk+3I4NM4LBr9F0IRPmjkrrZYgBVxqP0fDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b3299ff545e559e7728540b616d39b4de72caeb7acae34e65e03038eb2ae6d1b","last_reissued_at":"2026-07-05T08:27:52.783675Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:27:52.783675Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Graph Neural Network Explanations are Fragile","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Binghui Wang, Jiate Li, Jinyuan Jia, Meng Pang, Yun Dong","submitted_at":"2024-06-05T12:23:02Z","abstract_excerpt":"Explainable Graph Neural Network (GNN) has emerged recently to foster the trust of using GNNs. Existing GNN explainers are developed from various perspectives to enhance the explanation performance. We take the first step to study GNN explainers under adversarial attack--We found that an adversary slightly perturbing graph structure can ensure GNN model makes correct predictions, but the GNN explainer yields a drastically different explanation on the perturbed graph. Specifically, we first formulate the attack problem under a practical threat model (i.e., the adversary has limited knowledge ab"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.03193","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.03193/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2406.03193","created_at":"2026-07-05T08:27:52.783740+00:00"},{"alias_kind":"arxiv_version","alias_value":"2406.03193v1","created_at":"2026-07-05T08:27:52.783740+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.03193","created_at":"2026-07-05T08:27:52.783740+00:00"},{"alias_kind":"pith_short_12","alias_value":"WMUZ75KF4VM6","created_at":"2026-07-05T08:27:52.783740+00:00"},{"alias_kind":"pith_short_16","alias_value":"WMUZ75KF4VM6O4UF","created_at":"2026-07-05T08:27:52.783740+00:00"},{"alias_kind":"pith_short_8","alias_value":"WMUZ75KF","created_at":"2026-07-05T08:27:52.783740+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2505.16893","citing_title":"Statistical Test for Saliency Maps of Graph Neural Networks via Selective Inference","ref_index":1986,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/WMUZ75KF4VM6O4UFIC3BNU43JX","json":"https://pith.science/pith/WMUZ75KF4VM6O4UFIC3BNU43JX.json","graph_json":"https://pith.science/api/pith-number/WMUZ75KF4VM6O4UFIC3BNU43JX/graph.json","events_json":"https://pith.science/api/pith-number/WMUZ75KF4VM6O4UFIC3BNU43JX/events.json","paper":"https://pith.science/paper/WMUZ75KF"},"agent_actions":{"view_html":"https://pith.science/pith/WMUZ75KF4VM6O4UFIC3BNU43JX","download_json":"https://pith.science/pith/WMUZ75KF4VM6O4UFIC3BNU43JX.json","view_paper":"https://pith.science/paper/WMUZ75KF","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2406.03193&json=true","fetch_graph":"https://pith.science/api/pith-number/WMUZ75KF4VM6O4UFIC3BNU43JX/graph.json","fetch_events":"https://pith.science/api/pith-number/WMUZ75KF4VM6O4UFIC3BNU43JX/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/WMUZ75KF4VM6O4UFIC3BNU43JX/action/timestamp_anchor","attest_storage":"https://pith.science/pith/WMUZ75KF4VM6O4UFIC3BNU43JX/action/storage_attestation","attest_author":"https://pith.science/pith/WMUZ75KF4VM6O4UFIC3BNU43JX/action/author_attestation","sign_citation":"https://pith.science/pith/WMUZ75KF4VM6O4UFIC3BNU43JX/action/citation_signature","submit_replication":"https://pith.science/pith/WMUZ75KF4VM6O4UFIC3BNU43JX/action/replication_record"}},"created_at":"2026-07-05T08:27:52.783740+00:00","updated_at":"2026-07-05T08:27:52.783740+00:00"}