{"as_of":"2026-08-18T09:50:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7273ada105b66dbbe00c0f507a2e1358631bfa0373c92a69ea785c5ade697459","coverage":[{"denominator":247,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T15:39:55.698740Z","state":"measured"},{"denominator":104,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":104,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-30T21:53:59.325002Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-04T00:09:14.420902Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"cited_work":{"arxiv_id":"2508.19641","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.19641","snapshot_observed_at":"2026-07-04T00:09:14.420902Z","title":"Intellectual property in graph-based machine learning as a service: Attacks and defenses","venue":null,"work_id":"db9d3db8-1aba-4d37-ba45-6947e4074e76","year":2025},"citing_paper":{"arxiv_id":"2605.12827","last_updated":"2026-05-25T19:09:13Z","snapshot_observed_at":"2026-08-10T21:03:33.375693Z","submitted_at":"2026-05-12T23:49:45Z","title":"GraphIP-Bench: How Hard Is It to Steal a Graph Neural Network, and Can We Stop It?","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-14T19:28:31.180563Z"},"links":{"cited_paper":"/paper/2508.19641","citing_paper":"/paper/2605.12827"},"observation_digest":"sha256:1cf588e01039955dffdf49785c638eb0ce503b061a0dea894ef2511f0f7ff542","observation_id":"e53c51d2-5ce4-40cb-8e08-0ca9c3af599c","resolution":{"observed_at":"2026-05-14T19:29:23.839808Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"cited_work":{"arxiv_id":"2508.19641","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.19641","snapshot_observed_at":"2026-07-04T00:09:14.420902Z","title":"Intellectual property in graph-based machine learning as a service: Attacks and defenses","venue":null,"work_id":"db9d3db8-1aba-4d37-ba45-6947e4074e76","year":2025},"citing_paper":{"arxiv_id":"2605.12827","last_updated":"2026-05-25T19:09:13Z","snapshot_observed_at":"2026-08-10T21:03:33.375693Z","submitted_at":"2026-05-12T23:49:45Z","title":"GraphIP-Bench: How Hard Is It to Steal a Graph Neural Network, and Can We Stop It?","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-30T21:53:59.325002Z"},"links":{"cited_paper":"/paper/2508.19641","citing_paper":"/paper/2605.12827"},"observation_digest":"sha256:0b93bcd536545d9282db4efe7765127881d38fbf9262b500e988228d2ea81ed4","observation_id":"464fcff7-f662-4dd0-8847-9f5397b16934","resolution":{"observed_at":"2026-06-30T21:55:05.717760Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"cited_work":{"arxiv_id":"2508.19641","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.19641","snapshot_observed_at":"2026-07-04T00:09:14.420902Z","title":"Intellectual property in graph-based machine learning as a service: Attacks and defenses","venue":null,"work_id":"db9d3db8-1aba-4d37-ba45-6947e4074e76","year":2025},"citing_paper":{"arxiv_id":"2605.30470","last_updated":"2026-05-28T18:41:20Z","snapshot_observed_at":"2026-08-02T00:40:58.268658Z","submitted_at":"2026-05-28T18:41:20Z","title":"Can Subgraph Explanations Be Weaponized to Steal Graph Neural Networks?","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-29T08:32:47.166531Z"},"links":{"cited_paper":"/paper/2508.19641","citing_paper":"/paper/2605.30470"},"observation_digest":"sha256:b98785a1d026d27bf96682a7a7c015fdc104a2826a51de7bd9deb60eea957fea","observation_id":"e6d5ac1c-efc1-4b81-a16c-9a04c505f792","resolution":{"observed_at":"2026-06-29T08:33:14.869585Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"cited_work":{"arxiv_id":"2508.19641","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2508.19641","snapshot_observed_at":"2026-07-04T00:09:14.420902Z","title":"Intellectual property in graph-based machine learning as a service: Attacks and defenses","venue":null,"work_id":"db9d3db8-1aba-4d37-ba45-6947e4074e76","year":2025},"citing_paper":{"arxiv_id":"2606.19185","last_updated":"2026-06-17T15:24:37Z","snapshot_observed_at":"2026-08-17T18:32:40.110992Z","submitted_at":"2026-06-17T15:24:37Z","title":"AGDN: Learning to Solve Traveling Salesman Problem with Anisotropic Graph Diffusion Network","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-06-26T21:29:20.129182Z"},"links":{"cited_paper":"/paper/2508.19641","citing_paper":"/paper/2606.19185"},"observation_digest":"sha256:9117bc8fe7610572387a02e404ee0603727f37ce459f50c7bb7cce3959d832f7","observation_id":"23d75a01-8d8a-414d-8174-8eaf5c650e37","resolution":{"observed_at":"2026-07-04T00:09:14.423430Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2508.19641/citation-record","integrity":"/paper/2508.19641/integrity","json":"/paper/2508.19641/citation-record.json","paper":"/paper/2508.19641"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.118097Z","title":"Cross- links matter for link prediction: rethinking the debiased gnn from a data perspective,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.118097Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:1fa9944bffb2335c752d9027042a1efa00322f253f4e56aee43e2f9976b7c9c7","observation_id":"9c5c2ca2-012a-4049-b3c8-40bd419fc738","resolution":{"observed_at":"2026-08-05T15:39:55.118097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.04612","last_updated":"2023-10-06T22:07:49Z","snapshot_observed_at":"2026-08-17T20:34:26.675805Z","submitted_at":"2023-10-06T22:07:49Z","title":"A Topological Perspective on Demystifying GNN-Based Link Prediction Performance","version":1},"cited_work":{"arxiv_id":"2310.04612","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.04612","snapshot_observed_at":"2026-08-05T15:39:58.097901Z","title":"A Topological Perspective on Demystifying GNN-Based Link Prediction Performance","venue":"cs.LG","work_id":"4ba58857-24c5-4617-a807-68b11f5a648c","year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.124046Z"},"links":{"cited_paper":"/paper/2310.04612","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:20c56e66cf909ffd7fa22c052cc0af44878cbfdc6bdd4fce9ca5d47ea9a491a7","observation_id":"1624295b-05d6-49d6-9720-35ac947ddd1e","resolution":{"observed_at":"2026-08-05T15:39:58.103499Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.130082Z","title":"Page-link: Path-based graph neural network expla- nation for heterogeneous link prediction,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.130082Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:fbec1f3e39f79f5bd3ecfe8e806437c8cf51231e70de41f96542a5092bb39409","observation_id":"fcb47e06-a81e-4e9e-99ef-1eb9eb3858ee","resolution":{"observed_at":"2026-08-05T15:39:55.130082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.136634Z","title":"Contrastive attributed network anomaly detection with data augmentation,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.136634Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:c9675b12c53fe46edaff2f9e75e7cf705a93ee48f226dd94c3c2ef78de90fdd5","observation_id":"78f6892b-8558-45bf-a18f-45bfe757c00e","resolution":{"observed_at":"2026-08-05T15:39:55.136634Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.142359Z","title":"Adbench: Anomaly detection benchmark,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.142359Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:d35ddd233ef8c71c24342468c853f27759f45ac8613e75623ba909c3de7fd05e","observation_id":"68829ae5-8001-4d48-8148-822ba538d8b7","resolution":{"observed_at":"2026-08-05T15:39:55.142359Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.149697Z","title":"Few-shot network anomaly detection via cross-network meta-learning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.149697Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:a6c43d7d1cb9b4b8cca175aa5a3ea430d18c569cfd88aa912e30f14ed5541f99","observation_id":"695b01b8-1cd5-4ff6-95c7-b1929f39ad72","resolution":{"observed_at":"2026-08-05T15:39:55.149697Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.00121","last_updated":"2019-05-31T23:53:20Z","snapshot_observed_at":"2026-08-14T16:22:43.478101Z","submitted_at":"2019-05-31T23:53:20Z","title":"Graph WaveNet for Deep Spatial-Temporal Graph Modeling","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.00121","snapshot_observed_at":"2026-08-05T15:39:55.156317Z","title":"Graph wavenet for deep spatial-temporal graph modeling,","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.156317Z"},"links":{"cited_paper":"/paper/1906.00121","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:02288b593a278c96d32bd9f6ef1934c39ac34b128ca106a3f1cdd1de85c12bea","observation_id":"e6cd94fb-2516-4606-98d8-410f373e99fe","resolution":{"observed_at":"2026-08-05T15:39:55.156317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.162261Z","title":"Pre-training enhanced spatial-temporal graph neural network for multivariate time series forecasting,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.162261Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:d31218b89d0452ccb3f3fb4c5d64893a0e92ec9cf40765233c583788b9aef7f3","observation_id":"e6437030-4f7d-4905-ba90-87ba926b3038","resolution":{"observed_at":"2026-08-05T15:39:55.162261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.167914Z","title":"Adaptive graph convolutional recurrent network for traffic forecasting,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.167914Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:068690de7e0dd83a94ba610f5cc34ecb9dbac2d96cc4502528e1501f65894eeb","observation_id":"16283784-b221-4a6f-a0a0-19c59580251c","resolution":{"observed_at":"2026-08-05T15:39:55.167914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.173881Z","title":"Dgrec: Graph neural network for recommendation with diver- sified embedding generation,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.173881Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:fb5cea55617f14ddbb5e0caa3fda2f004318837e77aaaf77655acad414465d9a","observation_id":"c66bd100-9348-49a0-9267-b0822ea2c5d8","resolution":{"observed_at":"2026-08-05T15:39:55.173881Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.179475Z","title":"Distributionally robust graph-based recommen- dation system,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.179475Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:649b76df64026925c3b7e09694ffee8dee6de25d1fa1bd7d9207e0f1670fa7d3","observation_id":"2b7a42ac-1038-4030-880f-9cbd022fc5e9","resolution":{"observed_at":"2026-08-05T15:39:55.179475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.185307Z","title":"Disease prediction via graph neural networks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.185307Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:4154e6ac520ce3b5e0f7ff7c94f9b0442ae80aec68c89571fbdfeb7e3b6ca539","observation_id":"473860fb-64ea-404c-b1a9-e5e8476069ec","resolution":{"observed_at":"2026-08-05T15:39:55.185307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.190500Z","title":"Learning the graphical structure of electronic health records with graph convolutional transformer,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.190500Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:98b18e31a2fd8d3ec8730a10ed0e9cbfdc50133395405d72520de222a7d16711","observation_id":"73025001-9fb0-4c9e-abca-456f1178f4e7","resolution":{"observed_at":"2026-08-05T15:39:55.190500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.195602Z","title":"Map-adaptive multimodal trajectory prediction using hierarchical graph neural networks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.195602Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:e18157766c33a6ea70d63191a56a5a603158aef41ea6ac8194af9ddce51e54c2","observation_id":"9c6cd5d0-306c-46bc-83cb-4121e899d2c6","resolution":{"observed_at":"2026-08-05T15:39:55.195602Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.202413Z","title":"Graph relational reinforcement learning for mobile robot navigation in large-scale crowded environments,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.202413Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:b404170015453e4d8a39c6c846e124e1d5f06a05c2a99d2d39bbca7dc849a9a0","observation_id":"1f33ed07-67b3-4126-935a-6f639b588ae0","resolution":{"observed_at":"2026-08-05T15:39:55.202413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.207355Z","title":"Gnn at the edge: Cost-efficient graph neural network processing over distributed edge servers,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.207355Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:5efdbbeafb61e9ff087b28d7450874a8f23ab3ba781a4f155f38e4e0265b039c","observation_id":"3e05d44a-3a62-4634-a1b1-d45f013aacf5","resolution":{"observed_at":"2026-08-05T15:39:55.207355Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.215234Z","title":"Machine learning as a service: Challenges in research and applications,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.215234Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:28959b359b6329487d452d1268461b774e8eed85affb2836858c380c47b0e2ed","observation_id":"16812bfd-97af-4f64-852b-c4c3eacd9990","resolution":{"observed_at":"2026-08-05T15:39:55.215234Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.220018Z","title":"Intellectual property protection of dnn models,","venue":null,"work_id":null,"year":1911},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.220018Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:df0c29175435f7bca5b6b0551c940a3e3922e054c2eed155bcc71ba0667d31a1","observation_id":"1ecb546a-f808-4de5-8993-74a4fa99243c","resolution":{"observed_at":"2026-08-05T15:39:55.220018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.225239Z","title":"Protecting intellectual property of language generation apis with lexical watermark,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.225239Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:dd9c10468afe3d1183049f550436c80d5e2d9f3fe9f508e2b439f65ba2c390a6","observation_id":"1f6b40cb-47c8-4dff-b540-295cdec50d71","resolution":{"observed_at":"2026-08-05T15:39:55.225239Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.230108Z","title":"Hardware- assisted intellectual property protection of deep learning mod- els,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.230108Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:0dd8d76949a3749e46d45e90a7bf6786af3712c8c242eb23bdda46a771d075e3","observation_id":"45f04479-b1a5-4713-a87b-e80f05e76aaf","resolution":{"observed_at":"2026-08-05T15:39:55.230108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.234928Z","title":"Secgnn: Privacy-preserving graph neural network training and inference as a cloud service,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.234928Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:fa5f4e3c09b0e52916f1c9505b59e599ff95db9fe4138b9b377679bba8604bad","observation_id":"e8e7457c-7e05-4aaf-8a82-00afbd36fdd9","resolution":{"observed_at":"2026-08-05T15:39:55.234928Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1803.05961","last_updated":"2018-03-15T19:27:17Z","snapshot_observed_at":"2026-08-17T21:40:59.738803Z","submitted_at":"2018-03-15T19:27:17Z","title":"Chiron: Privacy-preserving Machine Learning as a Service","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.05961","snapshot_observed_at":"2026-08-05T15:39:55.240620Z","title":"Ch- iron: Privacy-preserving machine learning as a service,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.240620Z"},"links":{"cited_paper":"/paper/1803.05961","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:946d621f2fa5fe41bf258ada06b3504577bd0cc9ea2f76eb0853955d67f70056","observation_id":"3da60d75-c844-4caf-a652-83082a3d937c","resolution":{"observed_at":"2026-08-05T15:39:55.240620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.246643Z","title":"Veriml: Enabling integrity assurances and fair payments for machine learning as a service,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.246643Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:a52e89c1fdc85d4bbc66b8485aa0c64ebd9a626fac08f3bb6db16d1958a587f5","observation_id":"f35d8d52-401a-4bd2-9b38-855be823d137","resolution":{"observed_at":"2026-08-05T15:39:55.246643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.251440Z","title":"Privacy- preserving deep learning on machine learning as a service—a comprehensive survey,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.251440Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:6a617002e6b582b194f05526295fd84bd85b7e9d222fd442c7f68016c8e7677e","observation_id":"d187cb2d-48e3-4057-b559-19a89b4bb3cc","resolution":{"observed_at":"2026-08-05T15:39:55.251440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.257458Z","title":"Model extraction attacks revisited,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.257458Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:f56a2e817860f4468f14fe047e724ea8c2c5ae11866382c0e8e929a4181bcc20","observation_id":"0c664b75-792a-4141-8d30-342ed880a195","resolution":{"observed_at":"2026-08-05T15:39:55.257458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.265413Z","title":"Model extraction warning in mlaas paradigm,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.265413Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:7fa8df66e7e18ddeef9ca85a5f6f63fbbdddd68152d7a256d9993e68addbb216","observation_id":"02b078b1-ddf0-45f5-bded-488d928fe4a2","resolution":{"observed_at":"2026-08-05T15:39:55.265413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.03233","last_updated":"2024-04-04T06:37:46Z","snapshot_observed_at":"2026-08-16T14:03:44.200977Z","submitted_at":"2024-04-04T06:37:46Z","title":"Learn What You Want to Unlearn: Unlearning Inversion Attacks against Machine Unlearning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.03233","snapshot_observed_at":"2026-08-05T15:39:55.272015Z","title":"Learn what you want to unlearn: Unlearning inversion attacks against machine unlearn- ing,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.272015Z"},"links":{"cited_paper":"/paper/2404.03233","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:3c080c9b4bda0ee446a5568e10a43c5fe8410c6c9422eac1ba536cdb5f0b58ac","observation_id":"c2cdce6c-588d-4f46-beff-65364f6438ff","resolution":{"observed_at":"2026-08-05T15:39:55.272015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.277802Z","title":"Cloud-driven machine learning with aws: A comprehensive review of services,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.277802Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:55d27b0064d6db3ab06814f37afaec8cd3d4e9471494103f7db6e3b3377d92ab","observation_id":"66164a62-87c2-4e6a-be8f-78efd0dc975b","resolution":{"observed_at":"2026-08-05T15:39:55.277802Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.283536Z","title":"Machine learning as a service cloud selection: An mcdm approach for optimal decision making,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.283536Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:a666c64db1e761a13d0a08d81a8afec36b5180ba9859ded0643aefaf40049bcc","observation_id":"842426eb-baa9-4849-9ac8-125e02b7fc4c","resolution":{"observed_at":"2026-08-05T15:39:55.283536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.14708","last_updated":"2024-11-27T12:15:06Z","snapshot_observed_at":"2026-08-16T14:16:10.211477Z","submitted_at":"2024-02-22T17:08:09Z","title":"CaT-GNN: Enhancing Credit Card Fraud Detection via Causal Temporal Graph Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.14708","snapshot_observed_at":"2026-08-05T15:39:55.288656Z","title":"Cat-gnn: Enhancing credit card fraud detection via causal temporal graph neural networks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.288656Z"},"links":{"cited_paper":"/paper/2402.14708","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:2fe35a570f0255281f7679fbcacd8f47f4352744999940ae2258bef4bb851d6e","observation_id":"9b498a8a-410c-4e19-908b-0b1dbc7fd9ae","resolution":{"observed_at":"2026-08-05T15:39:55.288656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.296322Z","title":"Internet financial fraud detection based on graph learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.296322Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:62828c3faa7502387af6e9a593af1ae41c8196e9c8459139e455c94c637e249d","observation_id":"be4a889a-7ef5-4201-b8bd-45cef80f0e9b","resolution":{"observed_at":"2026-08-05T15:39:55.296322Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.303622Z","title":"Finsformer: A novel approach to detecting financial attacks using transformer and cluster-attention,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.303622Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:5b62d9527d9187eaea733b24fd0f0b51505ac1053a53a13927fd8db877aa3185","observation_id":"579dc7a8-0c9b-4d5b-875b-1c01854ed0d7","resolution":{"observed_at":"2026-08-05T15:39:55.303622Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.22521","last_updated":"2025-06-26T22:02:01Z","snapshot_observed_at":"2026-08-17T10:14:30.703303Z","submitted_at":"2025-06-26T22:02:01Z","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.22521","snapshot_observed_at":"2026-08-05T15:39:55.309520Z","title":"A survey on model extraction attacks and defenses for large language models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.309520Z"},"links":{"cited_paper":"/paper/2506.22521","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:37696aa564b54049db790770326e8413a134036b7ed4cd1b3814f2ba3dd8c88b","observation_id":"e1f01ec2-4229-432d-baaa-1229b4fed8e9","resolution":{"observed_at":"2026-08-05T15:39:55.309520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.315245Z","title":"Scn gnn: A gnn-based fraud detection algorithm combining strong node and graph topology information,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.315245Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:27a50008c36504bcfe36ea4c6d380c9f162c61d7c8d05f2f77316880ebfc40bc","observation_id":"8f362441-3150-400a-8198-9abf5eaaad71","resolution":{"observed_at":"2026-08-05T15:39:55.315245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.320140Z","title":"Exploiting explanations for model inversion attacks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.320140Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:5549568545ac33d9d7f6f154f817aa6e782d79e3dca2aca3818111a08a566520","observation_id":"87de71d0-feb0-44bb-95ac-5e9cb69a91f4","resolution":{"observed_at":"2026-08-05T15:39:55.320140Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.326002Z","title":"Gradient mechanism to pre- serve differential privacy and deter against model inversion attacks in healthcare analytics,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.326002Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:e4834e457dfe05ad617d9cbf153484a5365c5a0fc143724bb284744f72bb9acb","observation_id":"d14c6a95-5d94-442f-b369-be419baa10c2","resolution":{"observed_at":"2026-08-05T15:39:55.326002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.331154Z","title":"Towards electronic health record-based medical knowledge graph construction, completion, and applications: A literature study,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.331154Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:a21dd13588faadce6f0e6e08f97b16ee02b3166eef45ededa6c7c04561aec015","observation_id":"8b5cfd7a-049a-40e2-a7b5-5fef1547c298","resolution":{"observed_at":"2026-08-05T15:39:55.331154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.336221Z","title":"Deepnote-gnn: predicting hospital readmission using clinical notes and patient network,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.336221Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:c8837f4e1c6457998e6bc6fad2811bf147d173c337f3ab6db7c93980db0fb8c1","observation_id":"ecb72ec1-01e4-4bdd-b429-ece7fdc8e3af","resolution":{"observed_at":"2026-08-05T15:39:55.336221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.341160Z","title":"How to cover up anomalous accesses to electronic health records,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.341160Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:ca14a33d3bc9918ff67711db7219365712ae0c415098cc0503ca53861c79e29c","observation_id":"e957036a-ec4e-4161-8b8d-6d9f41ee498e","resolution":{"observed_at":"2026-08-05T15:39:55.341160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.346180Z","title":"A systematic review of graph neural network in healthcare- based applications: Recent advances, trends, and future direc- tions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.346180Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:6fe360dd87614f6a3dfd0f4801d2b2828ec9c9eccca5d0b23c21c4767e40e602","observation_id":"a2d1cf81-c9b1-4b06-b2d1-371d3b678039","resolution":{"observed_at":"2026-08-05T15:39:55.346180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.351052Z","title":"I know what you trained last summer: A survey on stealing machine learning models and defences,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.351052Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:8ce1f039b3eb41c084e05785ef5c28996b8e0120de1404e9ac428bfae737771a","observation_id":"6649ad16-e98c-4184-b6ad-ce39e0dd822a","resolution":{"observed_at":"2026-08-05T15:39:55.351052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.356540Z","title":"Model extraction attacks and defenses on cloud-based machine learning models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.356540Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:440539fd7f694122c44c6b5155a574032bbe85806f8345f5eeba70bb2740e2ff","observation_id":"12761373-063e-4043-91df-6fdb94647eaa","resolution":{"observed_at":"2026-08-05T15:39:55.356540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.361985Z","title":"Adversarial attack and defense on graph data: A survey,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.361985Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:59097cc3c9536b2341247f52c395058017218d9459c9711b0731a3b3302fab64","observation_id":"9debe04f-fa3b-4286-80f2-7aae9b62bf4f","resolution":{"observed_at":"2026-08-05T15:39:55.361985Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04013","last_updated":"2024-09-11T01:09:07Z","snapshot_observed_at":"2026-08-16T14:21:00.628189Z","submitted_at":"2024-02-06T14:06:23Z","title":"Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04013","snapshot_observed_at":"2026-08-05T15:39:55.367619Z","title":"Privacy leakage on dnns: A sur- vey of model inversion attacks and defenses,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.367619Z"},"links":{"cited_paper":"/paper/2402.04013","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:f9229103505923c803de466517ef360b55d2cab33358870968c78c4a3d1e4e2a","observation_id":"33aadbd3-29e2-4eab-9f90-b5a331e02b91","resolution":{"observed_at":"2026-08-05T15:39:55.367619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.372830Z","title":"Stealing machine learning models via prediction {APIs},","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.372830Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:5c0cd990cf2ee330fd7283f1bca971d52eba045a86a9cac3188623a81535337b","observation_id":"e89f955b-d429-4f09-bd2d-ac3a14ad92e8","resolution":{"observed_at":"2026-08-05T15:39:55.372830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.378561Z","title":"Model reconstruction from model explanations,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.378561Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:13ad65efb30a25b507186db5fa97d0b1ef1da2188bab55fa1dd7176c06748158","observation_id":"098b043c-d087-4373-bfff-e1f68217d88a","resolution":{"observed_at":"2026-08-05T15:39:55.378561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.384246Z","title":"Knockoff nets: Stealing functionality of black-box models,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.384246Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:511d6041f866a0fe49d8eaeeafb32138f35305e1f6343473d1a22e803051becd","observation_id":"2c93b43c-f799-4af1-865b-a8473ed75fbe","resolution":{"observed_at":"2026-08-05T15:39:55.384246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1912.07721","last_updated":"2019-12-16T21:54:21Z","snapshot_observed_at":"2026-08-16T15:14:03.448387Z","submitted_at":"2019-12-16T21:54:21Z","title":"Adversarial Model Extraction on Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.07721","snapshot_observed_at":"2026-08-05T15:39:55.395968Z","title":"Adversarial model extraction on graph neural networks,","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.395968Z"},"links":{"cited_paper":"/paper/1912.07721","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:2fad431b1915b49f7b86054b9a9a2908955645201156150df90ac2464ea778ce","observation_id":"4f858406-15de-4904-a9de-aeb614f8cc5a","resolution":{"observed_at":"2026-08-05T15:39:55.395968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.402269Z","title":"Model stealing attacks against inductive graph neural networks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.402269Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:499d7300eae093643804d9d38fbd89bef1c7ffa5eff34259a19257660f058ad1","observation_id":"bb7d04a5-6402-47cd-b40b-7d4a6e4846dd","resolution":{"observed_at":"2026-08-05T15:39:55.402269Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.408383Z","title":"Model extraction at- tacks on graph neural networks: Taxonomy and realisation,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.408383Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:1214028931d9c699156d50505379c7f110ec22700cebd245bd5b00c6a2a77f14","observation_id":"a06ca83e-e1c0-4c20-824e-fa756ea0f321","resolution":{"observed_at":"2026-08-05T15:39:55.408383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.413916Z","title":"Knowledge-enhanced black-box attacks for recommendations,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.413916Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:4e068ca7e4a115bc22e0902156febe0e890a788d9cf3430649dca3b302efa92f","observation_id":"a43b5fa9-7c4e-47ef-b3fe-ff0631129c7f","resolution":{"observed_at":"2026-08-05T15:39:55.413916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.419633Z","title":"Unveiling the secrets without data: Can graph neural networks be exploited through {Data-Free} model extraction attacks?","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.419633Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:c6b75003f7addcb0ee7a34536a471eea229a47b863e6f33a02d5399647c98da1","observation_id":"785d6d84-e67b-4bb7-a183-4c36009de01f","resolution":{"observed_at":"2026-08-05T15:39:55.419633Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.426768Z","title":"A comprehensive survey of privacy- preserving federated learning: A taxonomy, review, and future IEEE TRANSACTIONS ON KNOWLEDGE AND DATA ENGINEERING 24 directions,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.426768Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:8319c438ceb2a2db9d7e8fa6709657cac66f9de1c13455457d8378308303a0cd","observation_id":"74665749-06e6-44fb-898c-ba49b64167a6","resolution":{"observed_at":"2026-08-05T15:39:55.426768Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.433458Z","title":"Model inversion attacks that exploit confidence information and basic countermeasures,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.433458Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:fe0f020526c1f6506842ef9cc62b5f0e81abc1f57c2ff57eb7129dea95ca6447","observation_id":"d3c70603-9a14-49b9-9e6f-2fbf04eab253","resolution":{"observed_at":"2026-08-05T15:39:55.433458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.440496Z","title":"Group property inference attacks against graph neural networks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.440496Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:63266f87c3b5bf1db74bd066328170dd63ad023d4f0dc1b58c70e26ba9ec9ada","observation_id":"a6b07db1-a691-4e67-ae45-6133ee138b86","resolution":{"observed_at":"2026-08-05T15:39:55.440496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.446506Z","title":"Model inversion attacks against graph neural networks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.446506Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:cef5a918a25af438419ee1c3cafaa4272f416c45e200c74683f211c217a418dd","observation_id":"cf05d8bf-9225-465c-a419-15907b29de34","resolution":{"observed_at":"2026-08-05T15:39:55.446506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2106.02820","last_updated":"2021-06-05T07:07:52Z","snapshot_observed_at":"2026-08-16T18:19:29.300777Z","submitted_at":"2021-06-05T07:07:52Z","title":"GraphMI: Extracting Private Graph Data from Graph Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.02820","snapshot_observed_at":"2026-08-05T15:39:55.452202Z","title":"Graphmi: Extracting private graph data from graph neural networks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.452202Z"},"links":{"cited_paper":"/paper/2106.02820","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:280174ef9b7b99a6097a3e1e9a98d937e0bc8a0e7ed4093ceb28b561dc7c3563","observation_id":"b920d3e6-c39b-4e2c-8c2c-c30ff4868b4b","resolution":{"observed_at":"2026-08-05T15:39:55.452202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.09800","last_updated":"2023-10-15T11:16:14Z","snapshot_observed_at":"2026-08-16T14:52:02.508502Z","submitted_at":"2023-10-15T11:16:14Z","title":"Model Inversion Attacks on Homogeneous and Heterogeneous Graph Neural Networks","version":1},"cited_work":{"arxiv_id":"2310.09800","doi":null,"metadata_source":"pith","pith_arxiv_id":"2310.09800","snapshot_observed_at":"2026-08-05T15:39:57.938871Z","title":"Model Inversion Attacks on Homogeneous and Heterogeneous Graph Neural Networks","venue":"cs.LG","work_id":"14c67d16-b1c4-4ac7-92ac-646e8ca5a261","year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.459035Z"},"links":{"cited_paper":"/paper/2310.09800","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:8da0df509dd1598e486d650953878122acc2b88f5b1b1b84d37ed4252edad895","observation_id":"ee2b6e4f-e8cd-41ef-9297-fc6890e5c15e","resolution":{"observed_at":"2026-08-05T15:39:57.943885Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1909.11835","last_updated":"2019-09-26T01:01:32Z","snapshot_observed_at":"2026-08-17T02:03:59.221459Z","submitted_at":"2019-09-26T01:01:32Z","title":"GAMIN: An Adversarial Approach to Black-Box Model Inversion","version":1},"cited_work":{"arxiv_id":"1909.11835","doi":null,"metadata_source":"pith","pith_arxiv_id":"1909.11835","snapshot_observed_at":"2026-08-05T15:39:57.910851Z","title":"GAMIN: An Adversarial Approach to Black-Box Model Inversion","venue":"cs.LG","work_id":"8fe15e33-e4b9-49e2-a43f-442da49b819e","year":2019},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.464189Z"},"links":{"cited_paper":"/paper/1909.11835","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:64c23354a19af8f8a8869265ca99e2c4c5a181b17c6b91d9d405b12ec53d2d25","observation_id":"bd29bf60-bff2-462e-8f4c-f14e72474a5e","resolution":{"observed_at":"2026-08-05T15:39:57.918070Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.470480Z","title":"Digital rights management and wa- termarking of multimedia content for m-commerce applications,","venue":null,"work_id":null,"year":2000},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.470480Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:7d1a395fa090172006434aad14ac3bcba8f68717042a401ef4e38ba11fdefed3","observation_id":"9de7a278-1521-4e89-9d66-849f684e8693","resolution":{"observed_at":"2026-08-05T15:39:55.470480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.04435","last_updated":"2025-05-31T15:35:11Z","snapshot_observed_at":"2026-08-16T14:20:49.612132Z","submitted_at":"2024-02-06T22:13:49Z","title":"PreGIP: Watermarking the Pretraining of Graph Neural Networks for Deep Intellectual Property Protection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.04435","snapshot_observed_at":"2026-08-05T15:39:55.475529Z","title":"Pregip: Watermarking the pre- training of graph neural networks for deep intellectual property protection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.475529Z"},"links":{"cited_paper":"/paper/2402.04435","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:06af0dd90dbd86fd517e0b4f5150040b21a4afc2cd6450f9f1a7d9d147fcebe7","observation_id":"9d122ad7-ad2f-403f-819f-f533d34dd202","resolution":{"observed_at":"2026-08-05T15:39:55.475529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.481001Z","title":"Watermarking graph neural networks based on backdoor attacks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.481001Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:ccc07672adddb8e97e43a07451ef3181be9f2fdbd1ea6e996cab73bdc2609948","observation_id":"191389b8-bc57-4995-b989-c5b8e947d531","resolution":{"observed_at":"2026-08-05T15:39:55.481001Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.13177","last_updated":"2024-12-07T10:22:05Z","snapshot_observed_at":"2026-08-16T13:41:37.545141Z","submitted_at":"2024-06-19T03:16:11Z","title":"Transferable Watermarking to Self-supervised Pre-trained Graph Encoders by Trigger Embeddings","version":3},"cited_work":{"arxiv_id":"2406.13177","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.13177","snapshot_observed_at":"2026-08-05T15:39:57.867954Z","title":"Transferable Watermarking to Self-supervised Pre-trained Graph Encoders by Trigger Embeddings","venue":"cs.CR","work_id":"24db12a0-b785-44e6-bf43-d9fd46d34f31","year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.485941Z"},"links":{"cited_paper":"/paper/2406.13177","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:c4b10c94b0d52b68af81a536764476df1044e0c8ff569e919140041285ea7142","observation_id":"5418b8aa-130a-41a3-8cdb-5be8ce279421","resolution":{"observed_at":"2026-08-05T15:39:57.873230Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.492292Z","title":"Gnnfingers: A fingerprinting framework for verifying ownerships of graph neural networks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.492292Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:209ccf7ab4a7b4d49e0c4f4bbc8b31c52753951fd795af35f40eb08fafbeeb81","observation_id":"29706f48-2e55-41d0-ba03-2ec16ab182d1","resolution":{"observed_at":"2026-08-05T15:39:55.492292Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.497987Z","title":"Gnnguard: A finger- printing framework for verifying ownerships of graph neural networks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.497987Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:8a600d168b51a049861a05706974d815b9b75bcee6930b7be8317320421fa930","observation_id":"9a20767d-ac03-4779-b424-be97ccc17d76","resolution":{"observed_at":"2026-08-05T15:39:55.497987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.503340Z","title":"Smoothing adversarial training for gnn,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.503340Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:ebc3a96adf94112077a7f56be6cc57d007a164ce26e4b6ebc3d66d6131b3bc5c","observation_id":"9dcacc76-0d82-46d6-a0c3-fb398f0d0899","resolution":{"observed_at":"2026-08-05T15:39:55.503340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.09205","last_updated":"2022-03-17T09:56:32Z","snapshot_observed_at":"2026-08-16T17:13:51.008924Z","submitted_at":"2022-03-17T09:56:32Z","title":"SoK: Differential Privacy on Graph-Structured Data","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.09205","snapshot_observed_at":"2026-08-05T15:39:55.513830Z","title":"Sok: Differential privacy on graph-structured data,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.513830Z"},"links":{"cited_paper":"/paper/2203.09205","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:49dae82e8cd57c886fd3b08acc86790ce99c45acc7fb99bcea28375f6451c631","observation_id":"8ef3d7b1-00a1-41f4-908d-29bcbc3422f9","resolution":{"observed_at":"2026-08-05T15:39:55.513830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.519368Z","title":"Netfense: Adversarial defenses against privacy attacks on neural networks for graph data,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.519368Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:fc455a798ea0e5596e41c421bbfbe69eec0fb905bbf918b074b66b66abc4d610","observation_id":"b7ad67e7-3b63-4d70-82cb-ca9b09f723e8","resolution":{"observed_at":"2026-08-05T15:39:55.519368Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.526897Z","title":"Gnnguard: Defending graph neural networks against adversarial attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.526897Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:e206949e0b077e2f6c53cd63ee4a64e021ac6ca9b7d4e4884e85bda0c167d4bf","observation_id":"6c3a803c-8583-4603-adc1-8837b9f54882","resolution":{"observed_at":"2026-08-05T15:39:55.526897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.531995Z","title":"A comprehensive survey on trustworthy graph neu- ral networks: Privacy, robustness, fairness, and explainability,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.531995Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:70434978381f2c2bf656e797059e7cb80289f167bd1a93e29cd5d17a656184ab","observation_id":"0ef5c7df-f5b8-4e0c-9202-f8de899830b6","resolution":{"observed_at":"2026-08-05T15:39:55.531995Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.536909Z","title":"Trustworthy graph learning: Reliability, explainability, and privacy protection,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.536909Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:43e59ca00749997587723ee0e3afd908f82f8ce60fe485f1e81d58c6f237823e","observation_id":"7a2eb217-8917-4190-b639-378d98b9abad","resolution":{"observed_at":"2026-08-05T15:39:55.536909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.07424","last_updated":"2024-02-21T09:54:52Z","snapshot_observed_at":"2026-08-16T17:00:09.408954Z","submitted_at":"2022-05-16T02:21:09Z","title":"Trustworthy Graph Neural Networks: Aspects, Methods and Trends","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.07424","snapshot_observed_at":"2026-08-05T15:39:55.543085Z","title":"Trustwor- thy graph neural networks: Aspects, methods and trends,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.543085Z"},"links":{"cited_paper":"/paper/2205.07424","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:cd341c662f56bd7b0e931316475ddb62af45becb5a33e2b281257461364dd268","observation_id":"42582e2a-f09a-4416-abd4-6c1b04413b63","resolution":{"observed_at":"2026-08-05T15:39:55.543085Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.548163Z","title":"Trustworthy graph learning: Reliability, explainability, and privacy protection,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.548163Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:7c617f28f7ced456bc47f71893caf9534790158e8abecb03237f46c039f7b2de","observation_id":"3519eb96-d38f-4fd2-a3f3-cc0f4196bd97","resolution":{"observed_at":"2026-08-05T15:39:55.548163Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.554196Z","title":"A review of adversarial attacks and defenses on graphs,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.554196Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:cca78b03b02948438a1936c7aac36161e32f1bcbe5488fff7e0a4c2d91756e2a","observation_id":"d115f3af-93df-4e47-a65f-2160fbee355b","resolution":{"observed_at":"2026-08-05T15:39:55.554196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.564475Z","title":"Graph robustness benchmark: Benchmarking the adversarial robustness of graph machine learning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.564475Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:5908a7d2437e69040b12b6eabdbe89a876f76192e753c680ef65e3601147440f","observation_id":"3bd8a2f1-d77b-404f-9b82-718ed0619a1f","resolution":{"observed_at":"2026-08-05T15:39:55.564475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.572591Z","title":"Adversarial attack and defense on graph data: A survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.572591Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:683ffdbb6f6e0f0fb34c6b5076427ccf2e282033bb426e98e59cf6457fa9650b","observation_id":"ee817541-06d2-4078-8d85-47d500043d86","resolution":{"observed_at":"2026-08-05T15:39:55.572591Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.578621Z","title":"Intellectual property pro- tection for deep learning models: Taxonomy, methods, attacks, and evaluations,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.578621Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:c99f872ec49bc1e630496028d427867fe7384b450f04c591b6b2c3c49c2ae100","observation_id":"5cc8c181-4de7-49ca-9af5-3ef1468a3139","resolution":{"observed_at":"2026-08-05T15:39:55.578621Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2304.14613","last_updated":"2023-06-17T09:08:18Z","snapshot_observed_at":"2026-08-16T15:37:05.314408Z","submitted_at":"2023-04-28T03:34:43Z","title":"Deep Intellectual Property Protection: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.14613","snapshot_observed_at":"2026-08-05T15:39:55.584136Z","title":"Deep intellectual property protection: A survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.584136Z"},"links":{"cited_paper":"/paper/2304.14613","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:b6ad1895d5f97de0795e5caa147006d4ac4f22bcd7ae105b48e1c9f8f8cb2758","observation_id":"d69f90e1-c0d3-47fb-997c-f3cbeab6bf54","resolution":{"observed_at":"2026-08-05T15:39:55.584136Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.590985Z","title":"A survey of graph neural networks in real world: Imbalance, noise, privacy and ood challenges,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.590985Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:30e75937020f3cef72cc558bd01999f282763367dfff6fa653ac520e7ee019f6","observation_id":"ea775abd-6da9-4c56-93bd-2bf5f143409c","resolution":{"observed_at":"2026-08-05T15:39:55.590985Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.596087Z","title":"A machine learning-based approach to identify unlawful practices in online terms of service: analysis, implementation and eval- uation,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.596087Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:8b4ef835bec948865f2070e19d82dec3ec5941feda4584344eb940e43541ba61","observation_id":"88472e42-85e5-4a1f-b716-b41f12fcc134","resolution":{"observed_at":"2026-08-05T15:39:55.596087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.602820Z","title":"Simplifying graph convolutional networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.602820Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:dab04e796effb72cc50f81df548410f39bbe22a01b06ab384c6f33192d39cbd3","observation_id":"452ddb4c-aec7-4c4d-8a8d-f27097669588","resolution":{"observed_at":"2026-08-05T15:39:55.602820Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.608229Z","title":"Inductive representation learning on large graphs,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.608229Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:bf0734931054f0797ffdc7b2a514292bd3c79d0a99d10da3d1f262584d163352","observation_id":"5f5806d1-0bc2-4297-87c2-a87c848cf540","resolution":{"observed_at":"2026-08-05T15:39:55.608229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.10903","last_updated":"2018-02-04T19:13:29Z","snapshot_observed_at":"2026-08-13T22:35:40.714745Z","submitted_at":"2017-10-30T12:41:12Z","title":"Graph Attention Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.10903","snapshot_observed_at":"2026-08-05T15:39:55.613852Z","title":"Graph attention networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.613852Z"},"links":{"cited_paper":"/paper/1710.10903","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:9be400e5af1c5122e1bcfdc3aa237d99a427c8ef35ad3435b5f1077e457edf00","observation_id":"8b1d8d0b-8e6d-4016-b23a-d20225ed9822","resolution":{"observed_at":"2026-08-05T15:39:55.613852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.00826","last_updated":"2019-02-22T19:15:54Z","snapshot_observed_at":"2026-08-13T05:06:48.606308Z","submitted_at":"2018-10-01T17:11:31Z","title":"How Powerful are Graph Neural Networks?","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.00826","snapshot_observed_at":"2026-08-05T15:39:55.619328Z","title":"How powerful are graph neural networks?","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.619328Z"},"links":{"cited_paper":"/paper/1810.00826","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:9db88bf17930fc9f8152a4783111d4e7453a1af52809c880b699b4d8b2c28e1f","observation_id":"8a97836b-7648-4b03-96de-f0e39758b830","resolution":{"observed_at":"2026-08-05T15:39:55.619328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.624679Z","title":"node2vec: Scalable feature learning for networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.624679Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:f023efdfdbd1e7267fbfc5e18c8fc3a5de3822af3529f3d31007d98eb7f7f88e","observation_id":"31060d3c-9cbc-41e5-9b5d-f7e5e85a58c0","resolution":{"observed_at":"2026-08-05T15:39:55.624679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.629463Z","title":"Heterogeneous graph neural network,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.629463Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:a2fe7d8434fe6dddccf93418a802309cf2dac4280d4282df6624cf9481b3e83b","observation_id":"2b0dfb42-a068-4a1c-b95b-f393874e2dcb","resolution":{"observed_at":"2026-08-05T15:39:55.629463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2506.17709","last_updated":"2025-06-21T13:11:42Z","snapshot_observed_at":"2026-08-16T22:23:08.417592Z","submitted_at":"2025-06-21T13:11:42Z","title":"CEGA: A Cost-Effective Approach for Graph-Based Model Extraction and Acquisition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2506.17709","snapshot_observed_at":"2026-08-05T15:39:55.634206Z","title":"Cega: A cost-effective approach for graph-based model extraction and acquisition,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.634206Z"},"links":{"cited_paper":"/paper/2506.17709","citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:65e519433804e2617daec2729a5a888017e3dc442efb5314c2a56ca706ed4aed","observation_id":"5bfcbb38-ced0-470b-8645-bbb2a888207b","resolution":{"observed_at":"2026-08-05T15:39:55.634206Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.639159Z","title":"Estimat- ing node importance in knowledge graphs using graph neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.639159Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:fdb9d21f514817dab79a37b2272f39694354870daf950e3f83827cdf1b0004a0","observation_id":"d5be2c9b-ef97-49f0-8eab-8ae951384be8","resolution":{"observed_at":"2026-08-05T15:39:55.639159Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.643655Z","title":"Residual correlation in graph neural network regression,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.643655Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:81b7af148618adccb5c8541b4a4cfa4d64f92c6d55527a744814430354e1e9ef","observation_id":"1326a69a-760d-45ae-a08f-9b08836dce94","resolution":{"observed_at":"2026-08-05T15:39:55.643655Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.648504Z","title":"Spectral clustering with graph neural networks for graph pooling,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.648504Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:62fd66ca6ad4c2e832251f19a4f19eeab39e9cf393e416aa9ffc71e394c01222","observation_id":"4a6c700f-1692-4c19-9408-33ef192148c5","resolution":{"observed_at":"2026-08-05T15:39:55.648504Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.653279Z","title":"Graph clus- tering with graph neural networks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.653279Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:d3af557e2a50852aa9a090ada56102361de7ac793fbe7d52ee467b2ec3838505","observation_id":"d7321b98-4f99-4c91-b8db-3f3d1834759e","resolution":{"observed_at":"2026-08-05T15:39:55.653279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.658808Z","title":"Position-aware graph neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.658808Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:435425359edd6ec854a70dad6bbe026e793ee542e258d29e0cbbbf2d418b2a5c","observation_id":"ff025767-2ede-4643-ba6f-d71df4473b1a","resolution":{"observed_at":"2026-08-05T15:39:55.658808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.664049Z","title":"Iterative deep graph learning for graph neural networks: Better and robust node embeddings,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.664049Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:b657ac68e0e92758e2ae64614a7cc90a9ec4deaec363740c79267eafb8c1e23f","observation_id":"a8c5f222-cccd-484b-9c2f-2ded8d9dd80b","resolution":{"observed_at":"2026-08-05T15:39:55.664049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.668872Z","title":"Link prediction based on graph neu- ral networks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.668872Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:2f1f520452bfbb3c2b7ad3eca825a9ad7a4a306e257d0f3e9abb000f88ace692","observation_id":"80b5463f-b679-4c1a-892a-79fc52382c3d","resolution":{"observed_at":"2026-08-05T15:39:55.668872Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.674135Z","title":"Graph convolutional neural networks for web-scale recommender systems,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.674135Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:641635f9604b2348d140a6cce5f0e4e642be65213cb5aadaa9cd2b227db48852","observation_id":"fe23ac5a-e846-49cc-919a-be4c3132dd0b","resolution":{"observed_at":"2026-08-05T15:39:55.674135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.678781Z","title":"Dual subgraph-based graph neural network for friendship prediction in location-based social networks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.678781Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:be007a5af4f995bfb476426e7bfa32c43d22aa43b0acce28cae37552f37a6f6b","observation_id":"6cf72c5f-c2dd-42a8-8a7d-013aed279314","resolution":{"observed_at":"2026-08-05T15:39:55.678781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.683742Z","title":"A comprehensive survey on graph neural networks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.683742Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:377c9e06e85b23cc335a1c4a27a4f5ddafe623edc4cc69bdbb83232e5c02eaad","observation_id":"47b0606d-e454-4754-9c56-f339b59b9060","resolution":{"observed_at":"2026-08-05T15:39:55.683742Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.688709Z","title":"Drug repurposing based on the dtd-gnn graph neural network: revealing the relationships among drugs, targets and diseases,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.688709Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:cd4d15d176e16e78da850092cbd9cf70aba06b37676ab459a81b99f608fd251b","observation_id":"d5462790-a885-44f9-ab06-954548ae7be6","resolution":{"observed_at":"2026-08-05T15:39:55.688709Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.693743Z","title":"Graphsmote: Imbalanced node classification on graphs with graph neural networks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.693743Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:30d7ed3462e829818cd1c61b7cae9b5748fce40bcd526f25f8efc3dc90f00d6f","observation_id":"02092d51-d653-4fd4-af2c-3afebdf29f15","resolution":{"observed_at":"2026-08-05T15:39:55.693743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T15:39:55.698740Z","title":"Superglue: Learning feature matching with graph neural net- works,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","version":1},"reference_index":102,"source":"pdf_text","source_observed_at":"2026-08-05T15:39:55.698740Z"},"links":{"citing_paper":"/paper/2508.19641"},"observation_digest":"sha256:a4168d10431bd7aa4e23935c07ff7fe68ca956ac3e1d27af8b82f1e5a8970db0","observation_id":"3ea1e628-370e-4c9c-962e-f068b22f2a93","resolution":{"observed_at":"2026-08-05T15:39:55.698740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2508.19641","last_updated":"2025-08-27T07:37:52Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T12:22:11.859691Z","submitted_at":"2025-08-27T07:37:52Z","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":96,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":247},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 100 of 247 outbound references and 4 inbound Pith citation observations for arXiv:2508.19641."}