{"as_of":"2026-08-18T09:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:743fd0fad1afdcfbdfb4652b49521fc21fa01c2b18a6bb6795f9e9daeefd5986","coverage":[{"denominator":26,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T14:00:12.178454Z","state":"measured"},{"denominator":27,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":27,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T17:24:45.043933Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.01936","snapshot_observed_at":"2026-08-02T17:24:45.043933Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2603.26136","last_updated":"2026-07-28T09:17:19Z","snapshot_observed_at":"2026-08-14T01:40:16.606586Z","submitted_at":"2026-03-27T07:40:10Z","title":"PEANUT: Perturbations by Eigenvector Alignment for Attacking Graph Neural Networks Under Topology-Driven Message Passing","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T17:24:45.043933Z"},"links":{"cited_paper":"/paper/2502.01936","citing_paper":"/paper/2603.26136"},"observation_digest":"sha256:d159bf8ed6fddfaf8bde9cd030fbe28c5ecf77d289d2db4f1d009a07a6c97e04","observation_id":"f9e9935d-502b-4109-aed6-134502fbcf2d","resolution":{"observed_at":"2026-08-02T17:24:45.043933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2502.01936/citation-record","integrity":"/paper/2502.01936/integrity","json":"/paper/2502.01936/citation-record.json","paper":"/paper/2502.01936"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.643994Z","title":"Understanding and improving graph injection at- tack by promoting unnoticeability","venue":null,"work_id":"ea7e2ee0-9276-4ae9-9fe0-318e8b35c365","year":2022},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:11.987525Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:faf992f849b82f6cfa1676fec0e718df2b659bbfccbed2f8a50ba0d4eaa581cc","observation_id":"107af564-0ce1-4c13-8f58-3f2f0fc1f9a4","resolution":{"observed_at":"2026-08-09T14:00:12.647387Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.102111Z","title":"Open graph benchmark: Datasets for machine learning on graphs","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.102111Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:032914da7e729a21feeafe2e82ede4c2b1e96e4d80331834b1cae12c46545086","observation_id":"888b543d-3ac9-4deb-bbe5-1f1d39ef8f87","resolution":{"observed_at":"2026-08-09T14:00:12.102111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.565056Z","title":"Revisiting graph adversarial attack and defense from a data distribution perspective","venue":null,"work_id":"df66df87-99cd-4e0f-acc1-3b56b64a028b","year":2023},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.132888Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:60bdf9c9d929cbca79c4a42fb4d3e09493c76bfd83098a4b235790bd18282bf8","observation_id":"2dc3df71-0c18-4b57-a864-e7449613f1c9","resolution":{"observed_at":"2026-08-09T14:00:12.568561Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.555699Z","title":"Simple black-box ad- versarial attacks on deep neural networks","venue":null,"work_id":"585113df-b42f-4a47-8c69-de101a351a6f","year":2017},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.135634Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:8e7e9cfa5e1c730cf651a0077d979bba26af66c31ccb4722681bb38ff04b09e3","observation_id":"33236eb9-5589-4a75-ba3a-0d5bbb28551d","resolution":{"observed_at":"2026-08-09T14:00:12.559284Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.138824Z","title":"Collective classification in network data","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.138824Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:51f5081dbf0feed8d38f77435a08f08d8e7bfee2abe5d14e1caaae6373f2c327","observation_id":"b6e172f0-7039-4090-935f-caa82fae4684","resolution":{"observed_at":"2026-08-09T14:00:12.138824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.530801Z","title":"Single node injection attack against graph neural networks","venue":null,"work_id":"9bb97f87-dad1-48fc-9506-46edab9ca124","year":2021},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.143842Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:aa430f8ed37cf42b5c85f227ca7e902011dfaca99957ee03312554260edc4c7a","observation_id":"2f4074c7-3962-453f-a851-2b49aeb05f6d","resolution":{"observed_at":"2026-08-09T14:00:12.534524Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.146752Z","title":"Graph attention networks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.146752Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:d39141c1029113bc585a198ed49e1007fca02a8d3f22fbaf16c542eaad65c3ea","observation_id":"eb9d4791-27e2-4839-b296-c9270f957ad8","resolution":{"observed_at":"2026-08-09T14:00:12.146752Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.515778Z","title":"BRUSLEATTACK: A QUERY- EFFICIENT SCORE- BASED BLACK-BOX SPARSE ADVERSARIAL ATTACK","venue":null,"work_id":"b5744e02-a86d-4690-b3b8-d2af6c3818f9","year":2024},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.149860Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:7a599a790e19d4aa85eec3e6be28af7a85db39bef2af4498999febc3a414f152","observation_id":"9003b6cc-7dc8-4e04-b4fe-831112a1f46e","resolution":{"observed_at":"2026-08-09T14:00:12.519226Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2109.13069","last_updated":"2022-06-24T08:47:19Z","snapshot_observed_at":"2026-08-16T17:53:46.273101Z","submitted_at":"2021-09-27T14:19:17Z","title":"Cluster Attack: Query-based Adversarial Attacks on Graphs with Graph-Dependent Priors","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2109.13069","snapshot_observed_at":"2026-08-09T14:00:12.155802Z","title":"Cluster attack: Query-based adversarial attacks on graphs with graph-dependent priors","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.155802Z"},"links":{"cited_paper":"/paper/2109.13069","citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:0ccaf27dd74e9f8d39783f283f17ea12044f860b68052577aacb0ad9ba373a8c","observation_id":"77daff65-a2b4-4fe7-b033-c2f111ca9cc1","resolution":{"observed_at":"2026-08-09T14:00:12.155802Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.496499Z","title":"Topol- ogy attack and defense for graph neural networks: An op- timization perspective","venue":null,"work_id":"d9cce029-6fd6-4593-a44b-93e6bcf06557","year":2019},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.159045Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:2bffb5bcc77c73acc9b46b8978e9e64e3831c6b96aa49e29063bde47d69b56b2","observation_id":"95a7e58e-75e5-46fd-8403-061225a74526","resolution":{"observed_at":"2026-08-09T14:00:12.499746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.487512Z","title":"Revisiting semi-supervised learning with graph embeddings","venue":null,"work_id":"2252d801-58dd-4f45-af57-c2ced765375f","year":2016},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.161761Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:40c1c5a2161dee5edbd2f2b3e16942ca823f9cb017279182059113023932fde9","observation_id":"dea2249c-a015-4e43-8d67-ad131a7b6236","resolution":{"observed_at":"2026-08-09T14:00:12.490851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.393898Z","title":"Mini- mum topology attacks for graph neural networks","venue":null,"work_id":"5b6900f9-0d2e-4abe-911c-6fe2d4c53f1e","year":2023},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.167549Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:857c84c8ce379a017f35da6e3eaf4de5993c13ad9def10a3d828bddbcdb92bb7","observation_id":"0528dfd3-9359-4e40-8b7a-3595d54596cd","resolution":{"observed_at":"2026-08-09T14:00:12.458344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.295220Z","title":"Graph robustness benchmark: Benchmarking the adver- sarial robustness of graph machine learning","venue":null,"work_id":"5a00cc36-fb72-48f0-9a38-4de097ad0355","year":2021},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.170240Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:ba29137afbb88f9eb4abc6f4a939001c3ff3918b3d95318294271a7e92e9bbd0","observation_id":"11d5fb0e-a17d-401d-8084-cb7777e7a348","resolution":{"observed_at":"2026-08-09T14:00:12.347917Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.230911Z","title":"Tdgia: Effective injection attacks on graph neural networks","venue":null,"work_id":"f8d35501-f756-4059-85c2-53585dd8d503","year":2021},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.172931Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:940c13496e0869fc532aa1123a2cb968e7d3bdc8da018725c4521a084d00009c","observation_id":"076402df-a48e-4b53-9cff-5939cdc532f6","resolution":{"observed_at":"2026-08-09T14:00:12.257680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.221681Z","title":"Adversarial attacks on neural net- works for graph data","venue":null,"work_id":"bc926085-63ce-4134-abb5-1f24a9f53a2c","year":2018},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.175652Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:0c4be869c4562a0ecde5ab82eec628bca0b6461ebe4316e4062c5e0961d34375","observation_id":"0141f10e-84dd-4970-9da2-de07e7765bbd","resolution":{"observed_at":"2026-08-09T14:00:12.225372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.210505Z","title":"Adversarial attacks on graph neural networks via meta learning","venue":null,"work_id":"9e6b2d6c-865b-42c0-a5b3-7d909ed18199","year":2019},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.178454Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:55fb99a2aaa12a8335e2366b5b10c3a3a0a488ad74c296c8b92c4e8f575b1cc7","observation_id":"6dfa92f7-1249-43c9-8cee-5f98eb8a10a6","resolution":{"observed_at":"2026-08-09T14:00:12.215362Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.540799Z","title":"Adversarial attacks on graph neural networks via node injections: A hierar- chical reinforcement learning approach","venue":null,"work_id":"1e96f0b3-50a0-4cbb-aa86-9e31206d3810","year":2020},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":2008,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.141346Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:2bd7fe24f6852b8e4de0244bfc50f571bb648b4b40e2b57cd7502435ef209384","observation_id":"73d6769a-9a19-416b-b91e-e2d8f5484665","resolution":{"observed_at":"2026-08-09T14:00:12.544340Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.478139Z","title":"Gnnguard: Defending graph neural networks against ad- versarial attacks","venue":null,"work_id":"c3f75d12-df9a-4ced-b7c2-79a08d582000","year":2020},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.164788Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:deeff4f6c27595a11f39b23b1d4933c274e5a6baf67c0f206d3fb62272003448","observation_id":"7c37ab52-1a17-4a18-930d-fe28c7ef79bd","resolution":{"observed_at":"2026-08-09T14:00:12.481479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.574450Z","title":"Query-efficient and scalable black-box adversarial attacks on discrete sequential data via bayesian optimization","venue":null,"work_id":"fa581e8e-75d5-41d5-8619-6392567cc1ac","year":2022},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.130052Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:0f9300c8974c117b8f15f411d5a8bbc872a0fb97e752a67b57b6a7ccbb2407c2","observation_id":"22445b2a-eedc-49ea-a44f-403cc8f8184b","resolution":{"observed_at":"2026-08-09T14:00:12.577799Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.617366Z","title":"Combining neural networks with personalized pagerank for classification on graphs","venue":null,"work_id":"75724551-2a67-494e-b3dc-61731641a622","year":2019},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.057443Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:a4290df6e558939486662f051494526373b02810da7c1c0be211369c585f101b","observation_id":"40904e50-a59a-4f72-a803-e909fdddf6cd","resolution":{"observed_at":"2026-08-09T14:00:12.620258Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.625761Z","title":"Adversarial attack on graph structured data","venue":null,"work_id":"e7a44b46-4264-49fa-9b7b-c23d9511ea42","year":2018},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.027646Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:c3c2cce00090bdb7f1f253791a929c29bd4c55ca99ee4d41e6aa767859bdb787","observation_id":"50cbccf7-81ad-440c-86d4-22b33d13cbc6","resolution":{"observed_at":"2026-08-09T14:00:12.629264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.602448Z","title":"Could graph neural networks learn better molecular representa- tion for drug discovery? a comparison study of descriptor- based and graph-based models","venue":null,"work_id":"49d835d1-bd1d-48a8-a005-ea57ab5d1b8c","year":2021},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.120259Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:94a015ff192620be0c54c36d81b1dfc4123d1dc0d280493cc745addebfee5547","observation_id":"ac6feda7-1b2c-495e-8ca5-0273ec48cbdf","resolution":{"observed_at":"2026-08-09T14:00:12.605754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.593290Z","title":"Let graph be the go board: gradient-free node injection attack for graph neural networks via reinforce- ment learning","venue":null,"work_id":"3f51f192-4908-473a-9425-924c1fe24bdd","year":2023},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.123877Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:8591e1412cb9a1a6fcf7ffbd7049e62f2942ef51bf6069c77053b26df7c16a1b","observation_id":"caf93477-0c97-4d2a-be36-2011cc4b6fb8","resolution":{"observed_at":"2026-08-09T14:00:12.596440Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.634969Z","title":"Sparse and imperceivable adversarial attacks","venue":null,"work_id":"59e395e2-e8ad-4af0-991d-05734400bb8f","year":2019},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:11.999786Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:ad2f89321bf1eee60cd8f595e61c4d810a8aa72fd1af8cd9bbe38f25f00cd6b3","observation_id":"263e4840-2766-45a1-b6ac-6485dbf154dc","resolution":{"observed_at":"2026-08-09T14:00:12.638096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.583657Z","title":"Kipf and Max Welling","venue":null,"work_id":"40b2a3d1-757e-4759-a60f-678a2bc122bc","year":2017},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.127102Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:cf878f71d8fbf897a2155e19bb42e98b05d094bd096ce9a424fd6c7a867546e3","observation_id":"4db5a650-c06e-4943-87eb-63b2d37f61d9","resolution":{"observed_at":"2026-08-09T14:00:12.586802Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T14:00:12.505513Z","title":"Scalable attack on graph data by injecting vicious nodes.Data Min- ing and Knowledge Discovery, 34:1363–1389,","venue":null,"work_id":"1e0eb0ca-ad25-4175-aa0c-52f619c30d46","year":2020},"citing_paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-09T14:00:12.152786Z"},"links":{"citing_paper":"/paper/2502.01936"},"observation_digest":"sha256:d07f3f60d352fbddecac875448c9c62b6352ab1d2f42ba6a87d02bc6ee110095","observation_id":"2060eb35-78af-4210-92cf-8bfebd862771","resolution":{"observed_at":"2026-08-09T14:00:12.509241Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.01936","last_updated":"2025-02-04T02:11:57Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-16T08:36:08.303735Z","submitted_at":"2025-02-04T02:11:57Z","title":"Query-Based and Unnoticeable Graph Injection Attack from Neighborhood Perspective"},"reference_resolution":{"displayed":26,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":4,"verified_exact":0,"verified_fuzzy":22},"total_outbound_references":26},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 26 of 26 outbound references and 1 inbound Pith citation observation for arXiv:2502.01936."}