{"as_of":"2026-08-17T21:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:824250ecaff27b5172e4691e15948d289ffe0e6391666cd88e6d5b2c38c1e02d","coverage":[{"denominator":46,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":46,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T20:57:04.707861Z","state":"measured"},{"denominator":46,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":46,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.09220/citation-record","integrity":"/paper/2411.09220/integrity","json":"/paper/2411.09220/citation-record.json","paper":"/paper/2411.09220"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:05.090743Z","title":"Daniels, Just health care","venue":null,"work_id":"08f327cf-3fcf-4f3b-a138-eea7d1bd72f0","year":1985},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.580323Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:aad8fd278f74a069ba665eae2d2282989a08dc5a58db167c48e866c2300bb9ae","observation_id":"76ded1ea-f233-44df-bd5a-ae3e9fec7b49","resolution":{"observed_at":"2026-08-12T20:57:05.093705Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.583967Z","title":"Preparing a nation for autonomous vehicles: opportunities, barriers and policy recommendations,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.583967Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:657b2a9ea42364a57630ead832be6c62c6a5c19e436166599cc4b44dc52469d3","observation_id":"9528cdd5-f850-47be-8d4e-491ed718310f","resolution":{"observed_at":"2026-08-12T20:57:04.583967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:05.077922Z","title":"Hear” no evil","venue":null,"work_id":"f7b69402-6829-4708-87c4-14171a171931","year":2021},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.587089Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:4c70f073518453cbae9b71eb28e9ef946ce7bd1b455c904e6d7640c88a7a2c5d","observation_id":"55820a8c-685f-4756-a8dd-8c75fbce79e2","resolution":{"observed_at":"2026-08-12T20:57:05.080737Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:05.068930Z","title":"{WaveGuard}: Understanding and mitigating audio adversarial exam- ples,","venue":null,"work_id":"9f89e201-eb18-45ae-9d2f-adae527e79cc","year":2021},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.590019Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:028a422da5df46dd06ab3a71a703351fe3a4577f8dd0a86d95bd689501976672","observation_id":"ab369255-f3b0-4653-bc22-dbd616bd5958","resolution":{"observed_at":"2026-08-12T20:57:05.072132Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:05.060124Z","title":"Characterizing audio adversar- ial examples using temporal dependency,","venue":null,"work_id":"8cf573f5-bd51-45ac-ba41-67169a0b6094","year":2019},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.593086Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:10536d944c8b876edc2190964799e54bfa01f052d19ea59507203c569bd745f9","observation_id":"b83ac3c3-1dcf-46a7-859d-81b70b04a20b","resolution":{"observed_at":"2026-08-12T20:57:05.063106Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:05.051597Z","title":"Noise flooding for detecting audio adversarial examples against automatic speech recognition,","venue":null,"work_id":"70f7dc2d-7c61-498a-ae79-c9ab6690bea5","year":2018},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.596168Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:7cec3550f1dacdd1ab516938b66912b100ae7398b7eb3199c9dd96acf5a07826","observation_id":"cc566e8d-db95-4159-9c88-6b782d3072a5","resolution":{"observed_at":"2026-08-12T20:57:05.054746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:05.041873Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"3176ea3c-d238-45e7-a6bf-7b19cdc55af0","year":2017},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.599713Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:0ff98bff7a66cddda6b02f3d2807a32f57dfa6bde3d174f885f236b75e7a434c","observation_id":"96b09df6-752e-4e11-9ec0-4e55f785c40a","resolution":{"observed_at":"2026-08-12T20:57:05.044928Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:05.033363Z","title":"There is more than one kind of robustness: Fooling Whisper with adversarial examples,","venue":null,"work_id":"f6dae90e-330e-4ce7-9d83-1b380fc81882","year":2023},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.603105Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:bec2fe4c0b53fc1e91035806f8364ca8df219855268bae0fcdade93c9b4d6d0f","observation_id":"b02fc02f-5d03-4d86-9883-a1b840a5c729","resolution":{"observed_at":"2026-08-12T20:57:05.036480Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:05.024446Z","title":"Adversarial examples attack and countermeasure for speech recognition system: A survey,","venue":null,"work_id":"bf81f68a-5b4f-4f98-9993-fdf77ffc0334","year":2020},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.605821Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:2d2bb386ef947fb5100ac24e7d30e2c4378b7c9edfeccd2acd4a68685fbe1e86","observation_id":"d7e4eea8-b975-47ee-88f0-43c79d5533ad","resolution":{"observed_at":"2026-08-12T20:57:05.027645Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.608478Z","title":"{KENKU}: Towards efficient and stealthy black-box adversarial at- tacks against {ASR} systems,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.608478Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:e2edd05c9a6b338fb0901265d38c76e011a3663a0229d15d59fb1826a3edc6a7","observation_id":"47ee03c3-111c-4ddd-bf59-25c598144628","resolution":{"observed_at":"2026-08-12T20:57:04.608478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:05.011422Z","title":"Audio adversarial examples: Targeted attacks on speech-to-text,","venue":null,"work_id":"a0f19c71-bd2a-4c88-8f52-236eda0aa593","year":2018},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.611178Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:f8fb9f1bbe99de0e368e1847dd62dcc1d0934b26956a8252ed55f7946675f548","observation_id":"56de521f-ae93-4da2-84e8-507fc7af036b","resolution":{"observed_at":"2026-08-12T20:57:05.014431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:05.002061Z","title":"Robust audio adversarial example for a physical attack,","venue":null,"work_id":"f6d95f84-ea4f-44fa-85c2-a9c5dc279a8c","year":2019},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.613788Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:f5fe335acf41ffe90857b8aaf77a453024b8cefd90f72d75e9396bab28d5bdcc","observation_id":"6b922d94-32e1-4f14-949e-bcda8e1cade2","resolution":{"observed_at":"2026-08-12T20:57:05.005430Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.992646Z","title":"Recent improvements of ASR models in the face of adversarial attacks,","venue":null,"work_id":"9cd8220f-101d-46d9-9e65-5b388b71bfc6","year":2022},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.616633Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:7d5f3fd1cdac39e6c9b4eb5f2f16cca77c99a80008e388032d42c32c02fd2ade","observation_id":"dca3c8de-f849-4113-9075-67d9a98de88d","resolution":{"observed_at":"2026-08-12T20:57:04.995951Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1808.05665","last_updated":"2018-10-30T12:02:07Z","snapshot_observed_at":"2026-08-14T18:40:13.249197Z","submitted_at":"2018-08-16T20:00:47Z","title":"Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1808.05665","snapshot_observed_at":"2026-08-12T20:57:04.619396Z","title":"Adversarial attacks against automatic speech recognition systems via psychoacoustic hiding,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.619396Z"},"links":{"cited_paper":"/paper/1808.05665","citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:d09879e182fcec76a023133f0bdd87ccb8f2de8e11d56e323804534399686a27","observation_id":"0b95c775-905e-46e9-bbf7-53e1683885f6","resolution":{"observed_at":"2026-08-12T20:57:04.619396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.983811Z","title":"Metamorph: Injecting inaudible commands into over-the-air voice controlled systems,","venue":null,"work_id":"4364a720-75be-47de-8e85-cf786cca261a","year":2020},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.622554Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:41195b95ae637606385f7765e56b778ba70f060d189e6dc2374b04df998b5d0f","observation_id":"e844517c-4ec9-4a12-b1e2-e76d06a6968f","resolution":{"observed_at":"2026-08-12T20:57:04.987062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.975009Z","title":"Imper- ceptible, robust, and targeted adversarial examples for automatic speech recognition,","venue":null,"work_id":"0e6a09ac-c104-458d-a3f2-dafb8e98443b","year":2019},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.625284Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:8ea56c5e69602241f4279e05b5e0fccb9f9a3c69e2b8188273a888487d315cb1","observation_id":"53d1d285-bd69-491a-bc76-72bdf746984d","resolution":{"observed_at":"2026-08-12T20:57:04.978236Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.966435Z","title":"Query-efficient adversarial attack with low perturbation against end- to-end speech recognition systems,","venue":null,"work_id":"f5c104b3-31e7-4f6f-ba22-1883bef295ab","year":2022},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.627932Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:b74a1e353ecdd40fb045294c43a92a02a4e4566c9d5e011d162d28d9fb0ad642","observation_id":"4e39b4cf-15ea-4fb3-a5be-2fcc4dbf763e","resolution":{"observed_at":"2026-08-12T20:57:04.969619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.957592Z","title":"Sok: The faults in our asrs: An overview of attacks against automatic speech recognition and speaker identification systems,","venue":null,"work_id":"d0ceda83-0da5-46b2-9782-d9f6762576c4","year":2021},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.630664Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:87fc9cec4a1cf456b83a3184c03af3f56c271d64a599b6f7779398760a517e1b","observation_id":"be845488-6a76-45fc-a0e3-06914368a86d","resolution":{"observed_at":"2026-08-12T20:57:04.960750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.633332Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.633332Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:958069267b5e871199b25689e8eb2528d51584ec8756dbb266495efa9f6d5e91","observation_id":"c743345d-0b78-472d-9d92-cac4c9122438","resolution":{"observed_at":"2026-08-12T20:57:04.633332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.944559Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":"3074ec54-321f-486f-8f4e-4420466a9af5","year":2018},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.636030Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:6597596538b702c6404134cf13c588fb2e93a963a7aeea3091382a89784eef38","observation_id":"c7868b43-c648-47ee-b8ca-ffe7bc27385f","resolution":{"observed_at":"2026-08-12T20:57:04.947665Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.936023Z","title":"Investigating top-k white-box and transferable black-box attack,","venue":null,"work_id":"2eab3d94-9a23-4f19-b09d-b2a7de29f002","year":2022},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.638884Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:76239f280ce2babe4ab549dbfa7c488ee1cf96b642b23f223239aa3e65b8b8f9","observation_id":"cbdf8410-e66d-4a9d-b94d-a77db3963059","resolution":{"observed_at":"2026-08-12T20:57:04.939055Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.927339Z","title":"Sibling- attack: Rethinking transferable adversarial attacks against face recogni- tion,","venue":null,"work_id":"87dfb87d-ebc9-453f-ad7d-0ee6becf2535","year":2023},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.641622Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:1579dedf3378b38a2f7112a7c00ee471a1ba76146f834406b38a0005661a3ccf","observation_id":"fdd73892-3243-431e-953b-7f8d1fd09df7","resolution":{"observed_at":"2026-08-12T20:57:04.930525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.918406Z","title":"White-box multi-objective adversarial attack on dialogue generation,","venue":null,"work_id":"fe05b62f-e7a5-4f6b-92df-7ef368f6c359","year":2023},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.644362Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:6a3e5b9dca758951e555ddc9fa0c16b3cb83d7cc240c647f093efd60435ece57","observation_id":"440c09d9-d01b-42ae-98fa-8406fac7f8b7","resolution":{"observed_at":"2026-08-12T20:57:04.921994Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.647101Z","title":"Hotflip: White-box adversarial examples for text classification,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.647101Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:810fe7dadc9fb86d2378139b2c611bc5f3b6870a2b6357596765bd1cc6d3a3eb","observation_id":"f99a7567-0916-4914-8661-f17f8655d229","resolution":{"observed_at":"2026-08-12T20:57:04.647101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.904234Z","title":"Textbugger: Generating adversarial text against real-world applications,","venue":null,"work_id":"99c9c9dd-bdd0-426c-8a78-2dbc9d4b9517","year":2019},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.649814Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:019ba18f5425bcd0045e06d3f3eb992f80de11df9291aa4c328384a225e10f29","observation_id":"352fdfbe-001d-460b-95d7-f07a4eca2125","resolution":{"observed_at":"2026-08-12T20:57:04.907385Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.652502Z","title":"{Devil’s} whisper: A general approach for physical adversarial attacks against commercial black-box speech recognition devices,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.652502Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:af03f44846a427ba581c7e898477e2b9e410fea4dfcb4c2aa49977df4da170d6","observation_id":"80fc9395-bba5-4fdb-9522-612597e8ec9f","resolution":{"observed_at":"2026-08-12T20:57:04.652502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.890918Z","title":"Universal adversarial perturbations for speech recog- nition systems,","venue":null,"work_id":"9778d434-f2af-4db3-97cd-6359cecbb0aa","year":2019},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.655049Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:a462bc3474c1951d11532964b94c3794ddcfe81a1a4b21aa4430156d8faeabbe","observation_id":"04b49b1f-3495-4fa2-80a5-523c3f2942f6","resolution":{"observed_at":"2026-08-12T20:57:04.893967Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.882298Z","title":"Demysti- fying limited adversarial transferability in automatic speech recognition systems,","venue":null,"work_id":"5830dc32-113e-4ad0-814d-2c38317bae34","year":2021},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.657753Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:20816ffa353e0b92ab19ad9df959da6b31add0efc88914236f722ecda96bfde4","observation_id":"022d9c43-5170-4436-b66d-91a1e02f7c94","resolution":{"observed_at":"2026-08-12T20:57:04.885491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.661681Z","title":"Robust speech recognition via large-scale weak super- vision,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.661681Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:5d6d3e4cca38b476ce609a9e0f23e507809899a9d87396850a4f9bb5335aba95","observation_id":"237822b4-1cf3-4f5f-b1b5-61bd0a1bddfb","resolution":{"observed_at":"2026-08-12T20:57:04.661681Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.869047Z","title":"Fairseq s2t: Fast speech-to-text modeling with fairseq,","venue":null,"work_id":"eee92c1e-0954-4ea0-a282-0385f5c78566","year":2020},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.664307Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:e7ae322917096924d8bd3de5af6e0067483505d2bbf2e6700fa9483966317396","observation_id":"76e5517c-c47e-46ea-9b57-4ce7b5627f91","resolution":{"observed_at":"2026-08-12T20:57:04.872065Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.861006Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":"df57d1dc-541e-479a-9474-33e607950c8c","year":2018},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.666884Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:08dd0a05b27d55f3306d6f05d93ca73a8d04ad423fd68b7b190cfdfb57e0b723","observation_id":"92bda874-ad84-4f8a-9b43-0fdf59510228","resolution":{"observed_at":"2026-08-12T20:57:04.863988Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.852768Z","title":"Enhancing the transferability of adversarial attacks through variance tuning,","venue":null,"work_id":"a7751d17-cff9-42d7-9672-8c3b6c772de5","year":2021},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.669495Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:e586af33f70569aa5c62a312a69cbc44d48a8ebb044d3ac6ee3070053fbbd30e","observation_id":"26dcf50b-e090-483e-8ee1-9e606faf21ee","resolution":{"observed_at":"2026-08-12T20:57:04.855726Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.844613Z","title":"Transferable adversarial perturbations,","venue":null,"work_id":"54a7a66a-5def-4277-951c-37e8c284d333","year":2018},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.672087Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:bac34daa5818ad1ebc842370dfe73c47d2308488f719d33730bdea9a84a5014a","observation_id":"75b71c37-19d7-4a26-9960-f810e994db06","resolution":{"observed_at":"2026-08-12T20:57:04.847518Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.836036Z","title":"Improving adversarial transferability via neuron attribution-based attacks,","venue":null,"work_id":"af5cf2b2-f5fa-4ced-8e3c-6cbdbf1517c1","year":2022},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.674674Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:d1a9327b0eca939a656786474c99350ea8b4718f7487bbef14d358ef5e1eff3d","observation_id":"2f5bdef3-9456-4138-b08a-451884893c20","resolution":{"observed_at":"2026-08-12T20:57:04.839126Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.827435Z","title":"Transferable adversarial attack based on integrated gradients,","venue":null,"work_id":"24899091-0f75-4f59-9a3a-c5297585cd80","year":2022},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.677375Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:ee7ffd457939ecd17d02b0d4022f76e531ff2fb746a03764183c14513dac74f3","observation_id":"44705c63-5158-466b-b94c-29676031fb57","resolution":{"observed_at":"2026-08-12T20:57:04.830420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.818854Z","title":"Incorporating vad into asr system by multi- task learning,","venue":null,"work_id":"3a8273b8-d059-4de9-ba2d-a8d16d7d6686","year":2022},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.680066Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:876a621001dbb6e5cd13cc963c7eca63696f391e8e2cb2195a2a7876f18a4e09","observation_id":"0b752469-2cab-483b-8fb5-8fc8de5695c4","resolution":{"observed_at":"2026-08-12T20:57:04.822015Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.809543Z","title":"Improving asr robustness in noisy condition through vad integration,","venue":null,"work_id":"dba4896e-baf6-4a83-980e-8ab53b75a99c","year":2022},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.683035Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:6a4b4a500827a1ff0fc51512c6a5b41962f57fee0a4483ae85f62bef3f92c803","observation_id":"db62cb9c-26db-4362-b028-0cc5611c7e0a","resolution":{"observed_at":"2026-08-12T20:57:04.812878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.800303Z","title":"Vadoi: V oice- activity-detection overlapping inference for end-to-end long-form speech recognition,","venue":null,"work_id":"d99f9af0-752f-4b3d-97a8-3438ea6a469b","year":2022},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.685888Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:53c934dd5feb8cb58b89e5b5a1f9916300c661a8244128de4a7935707ed64cd9","observation_id":"46c1fec6-fee1-4771-89c9-5130b874a35d","resolution":{"observed_at":"2026-08-12T20:57:04.803523Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2201.01763","last_updated":"2022-07-14T23:05:52Z","snapshot_observed_at":"2026-08-16T17:30:04.025374Z","submitted_at":"2022-01-05T18:50:50Z","title":"Robust Self-Supervised Audio-Visual Speech Recognition","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.01763","snapshot_observed_at":"2026-08-12T20:57:04.688498Z","title":"Robust self-supervised audio- visual speech recognition,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.688498Z"},"links":{"cited_paper":"/paper/2201.01763","citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:71b5ebe754d997d7f6487ac6f43f9f4a35d2108a11cc1bf28a3447ac7ed60d2a","observation_id":"a8283a08-0728-4e2f-8948-2eda275426f3","resolution":{"observed_at":"2026-08-12T20:57:04.688498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.791524Z","title":"Optimization and global minimization meth- ods suitable for neural networks,","venue":null,"work_id":"3e575ef8-f2b4-4f33-84f0-e8255844a426","year":1998},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.691340Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:8c2ce8258947dfbed82f2c0083c98f08fef4a187c5daa2088e4e57c324258fac","observation_id":"2631424a-cbbb-4ead-a31e-b526377cdb9c","resolution":{"observed_at":"2026-08-12T20:57:04.794701Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2306.00794","last_updated":"2023-06-01T15:25:14Z","snapshot_observed_at":"2026-08-16T15:27:27.599100Z","submitted_at":"2023-06-01T15:25:14Z","title":"SlothSpeech: Denial-of-service Attack Against Speech Recognition Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2306.00794","snapshot_observed_at":"2026-08-12T20:57:04.693913Z","title":"Sloth- speech: Denial-of-service attack against speech recognition models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.693913Z"},"links":{"cited_paper":"/paper/2306.00794","citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:357efcfce3833c9ff5915736cc653296463beceeb8070ef7fa771601e407605f","observation_id":"538beaac-8415-45de-802f-2969a35887c1","resolution":{"observed_at":"2026-08-12T20:57:04.693913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.782723Z","title":"The kaldi speech recognition toolkit,","venue":null,"work_id":"eae9d2c6-9b45-4425-b3c2-76ff872c6c39","year":2011},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.696878Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:e7a1e7263784476b0bf1948624083f3c04a4ae69b067cf59883ee2da9922606e","observation_id":"4f5479ad-be6a-45a1-aab9-02094039efe0","resolution":{"observed_at":"2026-08-12T20:57:04.785793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.774171Z","title":"Esp- net: End-to-end speech processing toolkit,","venue":null,"work_id":"b50b197e-f2b2-4aaa-9707-6ee7d64720a4","year":2018},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.699518Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:3409af5667e2c0039b63f4c215fc6f743245bd317042e5ce8517b53b77d75079","observation_id":"cc1485b7-3515-4754-aa08-cd404f1c18cc","resolution":{"observed_at":"2026-08-12T20:57:04.777159Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.763441Z","title":"Librispeech: an asr corpus based on public domain audio books,","venue":null,"work_id":"0262a919-c04c-411a-b3d8-0322a94d0eb3","year":2015},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.702159Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:bdc6c7e1b7a0eedd1dd8738857e7332c5db90bbc7a7c98381c976d626b376628","observation_id":"9b6454d4-d3cf-487e-b7c2-c4f90ad1c299","resolution":{"observed_at":"2026-08-12T20:57:04.768234Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T20:57:04.705242Z","title":"The lj speech dataset,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.705242Z"},"links":{"citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:322b47f6abd82f6170ab5ee453ddceb4708e19cbdfdd225cd32938b09edddd86","observation_id":"20381bc6-9736-41bc-b884-ab367e6ce99a","resolution":{"observed_at":"2026-08-12T20:57:04.705242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1510.08484","last_updated":"2015-10-28T20:59:04Z","snapshot_observed_at":"2026-08-14T22:25:51.884597Z","submitted_at":"2015-10-28T20:59:04Z","title":"MUSAN: A Music, Speech, and Noise Corpus","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1510.08484","snapshot_observed_at":"2026-08-12T20:57:04.707861Z","title":"Musan: A music, speech, and noise corpus,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T20:57:04.707861Z"},"links":{"cited_paper":"/paper/1510.08484","citing_paper":"/paper/2411.09220"},"observation_digest":"sha256:a430dee285601c102223ec98c1f9a04f410c8e55243311ff877496a62519f4cb","observation_id":"3f091eab-6ece-461b-8a9e-c4dc0b6b6f0d","resolution":{"observed_at":"2026-08-12T20:57:04.707861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2411.09220","last_updated":"2024-11-14T06:32:31Z","latest_version":1,"primary_category":"eess.AS","snapshot_observed_at":"2026-08-17T15:07:09.345537Z","submitted_at":"2024-11-14T06:32:31Z","title":"Transferable Adversarial Attacks against ASR"},"reference_resolution":{"displayed":46,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":0,"verified_fuzzy":35},"total_outbound_references":46},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 46 of 46 outbound references and 0 inbound Pith citation observations for arXiv:2411.09220."}