{"as_of":"2026-08-10T06:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:179b3105704e52fb7beab83610e4639167a96a480ca553ea1db9f5b39517b54a","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":5,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":5,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":5,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":5,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T11:29:43.246771Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-06-29T08:33:14.865139Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2503.16693","last_updated":"2025-03-20T20:25:32Z","snapshot_observed_at":"2026-08-07T16:48:02.770787Z","submitted_at":"2025-03-20T20:25:32Z","title":"ATOM: A Framework of Detecting Query-Based Model Extraction Attacks for Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.16693","snapshot_observed_at":"2026-08-07T11:29:43.246771Z","title":"Atom: A framework of detecting query-based model extraction attacks for graph neural networks.arXiv preprint arXiv:2503.16693, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.02362","last_updated":"2025-06-03T01:37:09Z","snapshot_observed_at":"2026-08-09T15:19:23.285991Z","submitted_at":"2025-06-03T01:37:09Z","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T11:29:43.246771Z"},"links":{"cited_paper":"/paper/2503.16693","citing_paper":"/paper/2506.02362"},"observation_digest":"sha256:f5e693844e344c58cd3f17d86b9fe46d9a01d7b9a0d82a430be953f0ae6c37c9","observation_id":"a3d4e200-4019-494e-8d89-8ced57857a80","resolution":{"observed_at":"2026-08-07T11:29:43.246771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16693","last_updated":"2025-03-20T20:25:32Z","snapshot_observed_at":"2026-08-07T16:48:02.770787Z","submitted_at":"2025-03-20T20:25:32Z","title":"ATOM: A Framework of Detecting Query-Based Model Extraction Attacks for Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.16693","snapshot_observed_at":"2026-08-06T22:23:07.801022Z","title":"arXiv preprint arXiv:2503.16693 (2025)","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-07T22:00:37.560675Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-06T22:23:07.801022Z"},"links":{"cited_paper":"/paper/2503.16693","citing_paper":"/paper/2506.22521"},"observation_digest":"sha256:8584999029a18adc32b12c5bfb2b10a272f89d99363e4bb25abab97ea16a9e81","observation_id":"0d339b38-58cd-4a1a-bb66-536055502c1a","resolution":{"observed_at":"2026-08-06T22:23:07.801022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16693","last_updated":"2025-03-20T20:25:32Z","snapshot_observed_at":"2026-08-07T16:48:02.770787Z","submitted_at":"2025-03-20T20:25:32Z","title":"ATOM: A Framework of Detecting Query-Based Model Extraction Attacks for Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.16693","snapshot_observed_at":"2026-08-06T19:25:28.124679Z","title":"Atom: A framework of detecting query-based model extraction attacks for graph neural networks","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.05649","last_updated":"2025-07-14T14:12:59Z","snapshot_observed_at":"2026-08-07T17:45:18.696744Z","submitted_at":"2025-07-08T04:01:53Z","title":"DESIGN: Encrypted GNN Inference via Server-Side Input Graph Pruning","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T19:25:28.124679Z"},"links":{"cited_paper":"/paper/2503.16693","citing_paper":"/paper/2507.05649"},"observation_digest":"sha256:1cb16734528d1d4139ac52c6e6f8f4120f191c0c89e861e30f1f1b9cda1a918d","observation_id":"5c1fc816-46b2-47f6-a1e4-f4ec289b6256","resolution":{"observed_at":"2026-08-06T19:25:28.124679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16693","last_updated":"2025-03-20T20:25:32Z","snapshot_observed_at":"2026-08-07T16:48:02.770787Z","submitted_at":"2025-03-20T20:25:32Z","title":"ATOM: A Framework of Detecting Query-Based Model Extraction Attacks for Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.16693","snapshot_observed_at":"2026-08-05T15:39:55.729820Z","title":"Atom: A framework of detecting query-based model extraction attacks for graph neural networks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-08T08:19:58.466694Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":108,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.729820Z"},"links":{"cited_paper":"/paper/2503.16693","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:17fc2b3c7e6762b02f9c394f96d18f54716490c8f151efe7a6942c1e654b02af","observation_id":"1cdfecf6-f830-4bb7-ba88-5339385a90db","resolution":{"observed_at":"2026-08-05T15:39:55.729820Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.16693","last_updated":"2025-03-20T20:25:32Z","snapshot_observed_at":"2026-08-07T16:48:02.770787Z","submitted_at":"2025-03-20T20:25:32Z","title":"ATOM: A Framework of Detecting Query-Based Model Extraction Attacks for Graph Neural Networks","version":1},"cited_work":{"arxiv_id":"2503.16693","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2503.16693","snapshot_observed_at":"2026-06-29T08:33:14.865139Z","title":"Cheng, B","venue":null,"work_id":"e9937ea4-1915-42cd-83d1-ed37da8b1f66","year":2025},"citing_paper":{"arxiv_id":"2605.30470","last_updated":"2026-05-28T18:41:20Z","snapshot_observed_at":"2026-08-02T00:40:58.268658Z","submitted_at":"2026-05-28T18:41:20Z","title":"Can Subgraph Explanations Be Weaponized to Steal Graph Neural Networks?","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-29T08:32:47.166531Z"},"links":{"cited_paper":"/paper/2503.16693","citing_paper":"/paper/2605.30470"},"observation_digest":"sha256:7a65b0cba433e7b3ec0be5ac9154ff62901bab2595b0dffd27eb2cabe358f5a2","observation_id":"e6dc2573-8724-4caa-b88f-08da776dfcbc","resolution":{"observed_at":"2026-06-29T08:33:14.866919Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2503.16693/citation-record","integrity":"/paper/2503.16693/integrity","json":"/paper/2503.16693/citation-record.json","paper":"/paper/2503.16693"},"outbound":[],"paper":{"arxiv_id":"2503.16693","last_updated":"2025-03-20T20:25:32Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-07T16:48:02.770787Z","submitted_at":"2025-03-20T20:25:32Z","title":"ATOM: A Framework of Detecting Query-Based Model Extraction Attacks for Graph Neural Networks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 5 inbound Pith citation observations for arXiv:2503.16693."}