{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2023:XOFKHJP6XL5QEVLZJJWF36PP4W","short_pith_number":"pith:XOFKHJP6","schema_version":"1.0","canonical_sha256":"bb8aa3a5febafb0255794a6c5df9efe5822f61f0da2ef77cb2c2f3f37af2b1e1","source":{"kind":"arxiv","id":"2302.08051","version":2},"attestation_state":"computed","paper":{"title":"Graph Adversarial Immunization for Certifiable Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.SI"],"primary_cat":"cs.LG","authors_text":"Huawei Shen, Liang Hou, Qi Cao, Shuchang Tao, Xueqi Cheng, Yunfan Wu","submitted_at":"2023-02-16T03:18:43Z","abstract_excerpt":"Despite achieving great success, graph neural networks (GNNs) are vulnerable to adversarial attacks. Existing defenses focus on developing adversarial training or model modification. In this paper, we propose and formulate graph adversarial immunization, i.e., vaccinating part of graph structure to improve certifiable robustness of graph against any admissible adversarial attack. We first propose edge-level immunization to vaccinate node pairs. Unfortunately, such edge-level immunization cannot defend against emerging node injection attacks, since it only immunizes existing node pairs. To this"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2302.08051","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-16T03:18:43Z","cross_cats_sorted":["cs.CR","cs.SI"],"title_canon_sha256":"8d7a615fe671c79b85ba73ae2b41600049838665d66809b767e5dda7942ba017","abstract_canon_sha256":"d70966679670b37c83a8c5a9d62040a58ae95254d53c7144aef4bacffa706d71"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:53:34.448537Z","signature_b64":"VmbISwi2VPmSzNY+qeGi5slb5B06RrKRAW38bVDntj+0wt4ouZegUxxyrB75KblGsxp2Qi0T/7NvSeKN8OqDCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bb8aa3a5febafb0255794a6c5df9efe5822f61f0da2ef77cb2c2f3f37af2b1e1","last_reissued_at":"2026-07-05T06:53:34.448071Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:53:34.448071Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Graph Adversarial Immunization for Certifiable Robustness","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.SI"],"primary_cat":"cs.LG","authors_text":"Huawei Shen, Liang Hou, Qi Cao, Shuchang Tao, Xueqi Cheng, Yunfan Wu","submitted_at":"2023-02-16T03:18:43Z","abstract_excerpt":"Despite achieving great success, graph neural networks (GNNs) are vulnerable to adversarial attacks. Existing defenses focus on developing adversarial training or model modification. In this paper, we propose and formulate graph adversarial immunization, i.e., vaccinating part of graph structure to improve certifiable robustness of graph against any admissible adversarial attack. We first propose edge-level immunization to vaccinate node pairs. Unfortunately, such edge-level immunization cannot defend against emerging node injection attacks, since it only immunizes existing node pairs. To this"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.08051","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.08051/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2302.08051","created_at":"2026-07-05T06:53:34.448127+00:00"},{"alias_kind":"arxiv_version","alias_value":"2302.08051v2","created_at":"2026-07-05T06:53:34.448127+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.08051","created_at":"2026-07-05T06:53:34.448127+00:00"},{"alias_kind":"pith_short_12","alias_value":"XOFKHJP6XL5Q","created_at":"2026-07-05T06:53:34.448127+00:00"},{"alias_kind":"pith_short_16","alias_value":"XOFKHJP6XL5QEVLZ","created_at":"2026-07-05T06:53:34.448127+00:00"},{"alias_kind":"pith_short_8","alias_value":"XOFKHJP6","created_at":"2026-07-05T06:53:34.448127+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W","json":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W.json","graph_json":"https://pith.science/api/pith-number/XOFKHJP6XL5QEVLZJJWF36PP4W/graph.json","events_json":"https://pith.science/api/pith-number/XOFKHJP6XL5QEVLZJJWF36PP4W/events.json","paper":"https://pith.science/paper/XOFKHJP6"},"agent_actions":{"view_html":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W","download_json":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W.json","view_paper":"https://pith.science/paper/XOFKHJP6","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2302.08051&json=true","fetch_graph":"https://pith.science/api/pith-number/XOFKHJP6XL5QEVLZJJWF36PP4W/graph.json","fetch_events":"https://pith.science/api/pith-number/XOFKHJP6XL5QEVLZJJWF36PP4W/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W/action/timestamp_anchor","attest_storage":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W/action/storage_attestation","attest_author":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W/action/author_attestation","sign_citation":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W/action/citation_signature","submit_replication":"https://pith.science/pith/XOFKHJP6XL5QEVLZJJWF36PP4W/action/replication_record"}},"created_at":"2026-07-05T06:53:34.448127+00:00","updated_at":"2026-07-05T06:53:34.448127+00:00"}