{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:XW6E5MHUT4RCZRMPIV3BQ6EQE6","short_pith_number":"pith:XW6E5MHU","canonical_record":{"source":{"id":"2108.13049","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-08-30T08:12:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"2c79ed616c52debdae1c0c2b126ef26821cdae0329b3803c94aae152cc76c74b","abstract_canon_sha256":"02de339002dcbdd56f439316e0dc78df6ecc4241fd3718eae261cc6398570b83"},"schema_version":"1.0"},"canonical_sha256":"bdbc4eb0f49f222cc58f45761878902794bfafa3bc1cba0ed41e6debcaa5c430","source":{"kind":"arxiv","id":"2108.13049","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.13049","created_at":"2026-07-05T03:19:45Z"},{"alias_kind":"arxiv_version","alias_value":"2108.13049v2","created_at":"2026-07-05T03:19:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.13049","created_at":"2026-07-05T03:19:45Z"},{"alias_kind":"pith_short_12","alias_value":"XW6E5MHUT4RC","created_at":"2026-07-05T03:19:45Z"},{"alias_kind":"pith_short_16","alias_value":"XW6E5MHUT4RCZRMP","created_at":"2026-07-05T03:19:45Z"},{"alias_kind":"pith_short_8","alias_value":"XW6E5MHU","created_at":"2026-07-05T03:19:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:XW6E5MHUT4RCZRMPIV3BQ6EQE6","target":"record","payload":{"canonical_record":{"source":{"id":"2108.13049","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-08-30T08:12:25Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"2c79ed616c52debdae1c0c2b126ef26821cdae0329b3803c94aae152cc76c74b","abstract_canon_sha256":"02de339002dcbdd56f439316e0dc78df6ecc4241fd3718eae261cc6398570b83"},"schema_version":"1.0"},"canonical_sha256":"bdbc4eb0f49f222cc58f45761878902794bfafa3bc1cba0ed41e6debcaa5c430","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:19:45.530944Z","signature_b64":"Sio6IJVIMLoBzzVyHpCbajcN25sx5s6LQPgR38FRD+NACOc19kFZzAYiqOpS86P3BTRE5dsJG1X7aKMfU7HnDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bdbc4eb0f49f222cc58f45761878902794bfafa3bc1cba0ed41e6debcaa5c430","last_reissued_at":"2026-07-05T03:19:45.530533Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:19:45.530533Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2108.13049","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:19:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x6AQ57WqcZEBwzULzAtXkOvS/5kTiRbHk76XUHmOIWsnXVf/LQeyFw5Glrd8ctDfS5YD1nLGR04IC4+Dm/LpDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T02:22:36.970433Z"},"content_sha256":"a57d1d32c06f79d3c726afd6bf7a4b7a87c0ff47cfee69fa33c89bad3abe986b","schema_version":"1.0","event_id":"sha256:a57d1d32c06f79d3c726afd6bf7a4b7a87c0ff47cfee69fa33c89bad3abe986b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:XW6E5MHUT4RCZRMPIV3BQ6EQE6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Single Node Injection Attack against Graph Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Huawei Shen, Junjie Huang, Qi Cao, Shuchang Tao, Xueqi Cheng, Yunfan Wu","submitted_at":"2021-08-30T08:12:25Z","abstract_excerpt":"Node injection attack on Graph Neural Networks (GNNs) is an emerging and practical attack scenario that the attacker injects malicious nodes rather than modifying original nodes or edges to affect the performance of GNNs. However, existing node injection attacks ignore extremely limited scenarios, namely the injected nodes might be excessive such that they may be perceptible to the target GNN. In this paper, we focus on an extremely limited scenario of single node injection evasion attack, i.e., the attacker is only allowed to inject one single node during the test phase to hurt GNN's performa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.13049","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2108.13049/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:19:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jbTRRwDlSRpcyVPXX8/RjXG0on9uvLJzaYPC768bBAc8dvG/yT1xMppIoUX0+BjCgMhu2pc51hbJoklOb0qcBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T02:22:36.970931Z"},"content_sha256":"5933a8b334d80abf0725f5836fe4e9d0de59286a596e438726280f70f00133aa","schema_version":"1.0","event_id":"sha256:5933a8b334d80abf0725f5836fe4e9d0de59286a596e438726280f70f00133aa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XW6E5MHUT4RCZRMPIV3BQ6EQE6/bundle.json","state_url":"https://pith.science/pith/XW6E5MHUT4RCZRMPIV3BQ6EQE6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XW6E5MHUT4RCZRMPIV3BQ6EQE6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T02:22:36Z","links":{"resolver":"https://pith.science/pith/XW6E5MHUT4RCZRMPIV3BQ6EQE6","bundle":"https://pith.science/pith/XW6E5MHUT4RCZRMPIV3BQ6EQE6/bundle.json","state":"https://pith.science/pith/XW6E5MHUT4RCZRMPIV3BQ6EQE6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XW6E5MHUT4RCZRMPIV3BQ6EQE6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:XW6E5MHUT4RCZRMPIV3BQ6EQE6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"02de339002dcbdd56f439316e0dc78df6ecc4241fd3718eae261cc6398570b83","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-08-30T08:12:25Z","title_canon_sha256":"2c79ed616c52debdae1c0c2b126ef26821cdae0329b3803c94aae152cc76c74b"},"schema_version":"1.0","source":{"id":"2108.13049","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.13049","created_at":"2026-07-05T03:19:45Z"},{"alias_kind":"arxiv_version","alias_value":"2108.13049v2","created_at":"2026-07-05T03:19:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.13049","created_at":"2026-07-05T03:19:45Z"},{"alias_kind":"pith_short_12","alias_value":"XW6E5MHUT4RC","created_at":"2026-07-05T03:19:45Z"},{"alias_kind":"pith_short_16","alias_value":"XW6E5MHUT4RCZRMP","created_at":"2026-07-05T03:19:45Z"},{"alias_kind":"pith_short_8","alias_value":"XW6E5MHU","created_at":"2026-07-05T03:19:45Z"}],"graph_snapshots":[{"event_id":"sha256:5933a8b334d80abf0725f5836fe4e9d0de59286a596e438726280f70f00133aa","target":"graph","created_at":"2026-07-05T03:19:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2108.13049/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Node injection attack on Graph Neural Networks (GNNs) is an emerging and practical attack scenario that the attacker injects malicious nodes rather than modifying original nodes or edges to affect the performance of GNNs. However, existing node injection attacks ignore extremely limited scenarios, namely the injected nodes might be excessive such that they may be perceptible to the target GNN. In this paper, we focus on an extremely limited scenario of single node injection evasion attack, i.e., the attacker is only allowed to inject one single node during the test phase to hurt GNN's performa","authors_text":"Huawei Shen, Junjie Huang, Qi Cao, Shuchang Tao, Xueqi Cheng, Yunfan Wu","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-08-30T08:12:25Z","title":"Single Node Injection Attack against Graph Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.13049","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a57d1d32c06f79d3c726afd6bf7a4b7a87c0ff47cfee69fa33c89bad3abe986b","target":"record","created_at":"2026-07-05T03:19:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"02de339002dcbdd56f439316e0dc78df6ecc4241fd3718eae261cc6398570b83","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-08-30T08:12:25Z","title_canon_sha256":"2c79ed616c52debdae1c0c2b126ef26821cdae0329b3803c94aae152cc76c74b"},"schema_version":"1.0","source":{"id":"2108.13049","kind":"arxiv","version":2}},"canonical_sha256":"bdbc4eb0f49f222cc58f45761878902794bfafa3bc1cba0ed41e6debcaa5c430","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bdbc4eb0f49f222cc58f45761878902794bfafa3bc1cba0ed41e6debcaa5c430","first_computed_at":"2026-07-05T03:19:45.530533Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:19:45.530533Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Sio6IJVIMLoBzzVyHpCbajcN25sx5s6LQPgR38FRD+NACOc19kFZzAYiqOpS86P3BTRE5dsJG1X7aKMfU7HnDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:19:45.530944Z","signed_message":"canonical_sha256_bytes"},"source_id":"2108.13049","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a57d1d32c06f79d3c726afd6bf7a4b7a87c0ff47cfee69fa33c89bad3abe986b","sha256:5933a8b334d80abf0725f5836fe4e9d0de59286a596e438726280f70f00133aa"],"state_sha256":"d0c2903531f90f9a9397a97eddb0b5b8e6a88352ee7e0072ad11065a7af06e7e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0RympeD0H/uWN+o3AN8KH7CwDnT+xzBeSmELfr3eizcB0Y1UiRodrovvoolKxmUncJ+xLjo3gk/JsnX44G4pCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T02:22:36.974176Z","bundle_sha256":"145ac7f99871f1b63540e4db128afd2236538f5a75451c8050141d7a2e9f6814"}}