{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:4OXATR6WVOILEKDDLH4E7K6J2T","short_pith_number":"pith:4OXATR6W","canonical_record":{"source":{"id":"2005.14611","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2020-05-24T19:31:02Z","cross_cats_sorted":["cs.CR","cs.LG","cs.SD","stat.ML"],"title_canon_sha256":"b381c2f5f350af4fbaff272e0d316fef9c3f6e629aac13f0c3167410aebfcd47","abstract_canon_sha256":"2b4cf9995239225de03f37ffb37b22d0bdc0fde4621c93049a466a92fd676b92"},"schema_version":"1.0"},"canonical_sha256":"e3ae09c7d6ab90b2286359f84fabc9d4ddf9902ba773c769146d4955a5466246","source":{"kind":"arxiv","id":"2005.14611","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2005.14611","created_at":"2026-07-05T01:24:00Z"},{"alias_kind":"arxiv_version","alias_value":"2005.14611v2","created_at":"2026-07-05T01:24:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.14611","created_at":"2026-07-05T01:24:00Z"},{"alias_kind":"pith_short_12","alias_value":"4OXATR6WVOIL","created_at":"2026-07-05T01:24:00Z"},{"alias_kind":"pith_short_16","alias_value":"4OXATR6WVOILEKDD","created_at":"2026-07-05T01:24:00Z"},{"alias_kind":"pith_short_8","alias_value":"4OXATR6W","created_at":"2026-07-05T01:24:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:4OXATR6WVOILEKDDLH4E7K6J2T","target":"record","payload":{"canonical_record":{"source":{"id":"2005.14611","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2020-05-24T19:31:02Z","cross_cats_sorted":["cs.CR","cs.LG","cs.SD","stat.ML"],"title_canon_sha256":"b381c2f5f350af4fbaff272e0d316fef9c3f6e629aac13f0c3167410aebfcd47","abstract_canon_sha256":"2b4cf9995239225de03f37ffb37b22d0bdc0fde4621c93049a466a92fd676b92"},"schema_version":"1.0"},"canonical_sha256":"e3ae09c7d6ab90b2286359f84fabc9d4ddf9902ba773c769146d4955a5466246","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:24:00.493061Z","signature_b64":"sJfZPTwL+EC2asUpgTKbo5XngJSoFLtgOLxqFzJzLf8OlvwP5+rqUAHJQVOQYj5EMeFI81PwW8u0gOGNzui/BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e3ae09c7d6ab90b2286359f84fabc9d4ddf9902ba773c769146d4955a5466246","last_reissued_at":"2026-07-05T01:24:00.492644Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:24:00.492644Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2005.14611","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:24:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0b49mSN3UmyAow8b/+mv0740Lx/f0rQA1CydYyhZ/Az32xBbpK6Lo+T6uJqxEzxnMoNFcGmW5NVGZ2ND5K/wBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T01:34:18.090303Z"},"content_sha256":"e80e2a016d957efda306121c9b6afbd85140d5643cb1bc1748b2a655ce4687db","schema_version":"1.0","event_id":"sha256:e80e2a016d957efda306121c9b6afbd85140d5643cb1bc1748b2a655ce4687db"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:4OXATR6WVOILEKDDLH4E7K6J2T","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Detecting Adversarial Examples for Speech Recognition via Uncertainty Quantification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG","cs.SD","stat.ML"],"primary_cat":"eess.AS","authors_text":"Asja Fischer, Dorothea Kolossa, Lea Sch\\\"onherr, Sina D\\\"aubener","submitted_at":"2020-05-24T19:31:02Z","abstract_excerpt":"Machine learning systems and also, specifically, automatic speech recognition (ASR) systems are vulnerable against adversarial attacks, where an attacker maliciously changes the input. In the case of ASR systems, the most interesting cases are targeted attacks, in which an attacker aims to force the system into recognizing given target transcriptions in an arbitrary audio sample. The increasing number of sophisticated, quasi imperceptible attacks raises the question of countermeasures. In this paper, we focus on hybrid ASR systems and compare four acoustic models regarding their ability to ind"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.14611","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2005.14611/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:24:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9eGL8OzvXVFUrwJglTv07y8UbVz4dtq3xDSOSQCb1JNuZs43oFazyAZRiTH4T90+TnddZLf8iS87M9VEgy9zAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T01:34:18.091348Z"},"content_sha256":"ab9f6f2e99cf009e2cf7739dc4da7fb1f951c5e861893fd5b11884331cd3d24f","schema_version":"1.0","event_id":"sha256:ab9f6f2e99cf009e2cf7739dc4da7fb1f951c5e861893fd5b11884331cd3d24f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4OXATR6WVOILEKDDLH4E7K6J2T/bundle.json","state_url":"https://pith.science/pith/4OXATR6WVOILEKDDLH4E7K6J2T/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4OXATR6WVOILEKDDLH4E7K6J2T/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T01:34:18Z","links":{"resolver":"https://pith.science/pith/4OXATR6WVOILEKDDLH4E7K6J2T","bundle":"https://pith.science/pith/4OXATR6WVOILEKDDLH4E7K6J2T/bundle.json","state":"https://pith.science/pith/4OXATR6WVOILEKDDLH4E7K6J2T/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4OXATR6WVOILEKDDLH4E7K6J2T/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:4OXATR6WVOILEKDDLH4E7K6J2T","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2b4cf9995239225de03f37ffb37b22d0bdc0fde4621c93049a466a92fd676b92","cross_cats_sorted":["cs.CR","cs.LG","cs.SD","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2020-05-24T19:31:02Z","title_canon_sha256":"b381c2f5f350af4fbaff272e0d316fef9c3f6e629aac13f0c3167410aebfcd47"},"schema_version":"1.0","source":{"id":"2005.14611","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2005.14611","created_at":"2026-07-05T01:24:00Z"},{"alias_kind":"arxiv_version","alias_value":"2005.14611v2","created_at":"2026-07-05T01:24:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2005.14611","created_at":"2026-07-05T01:24:00Z"},{"alias_kind":"pith_short_12","alias_value":"4OXATR6WVOIL","created_at":"2026-07-05T01:24:00Z"},{"alias_kind":"pith_short_16","alias_value":"4OXATR6WVOILEKDD","created_at":"2026-07-05T01:24:00Z"},{"alias_kind":"pith_short_8","alias_value":"4OXATR6W","created_at":"2026-07-05T01:24:00Z"}],"graph_snapshots":[{"event_id":"sha256:ab9f6f2e99cf009e2cf7739dc4da7fb1f951c5e861893fd5b11884331cd3d24f","target":"graph","created_at":"2026-07-05T01:24:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2005.14611/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning systems and also, specifically, automatic speech recognition (ASR) systems are vulnerable against adversarial attacks, where an attacker maliciously changes the input. In the case of ASR systems, the most interesting cases are targeted attacks, in which an attacker aims to force the system into recognizing given target transcriptions in an arbitrary audio sample. The increasing number of sophisticated, quasi imperceptible attacks raises the question of countermeasures. In this paper, we focus on hybrid ASR systems and compare four acoustic models regarding their ability to ind","authors_text":"Asja Fischer, Dorothea Kolossa, Lea Sch\\\"onherr, Sina D\\\"aubener","cross_cats":["cs.CR","cs.LG","cs.SD","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2020-05-24T19:31:02Z","title":"Detecting Adversarial Examples for Speech Recognition via Uncertainty Quantification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2005.14611","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e80e2a016d957efda306121c9b6afbd85140d5643cb1bc1748b2a655ce4687db","target":"record","created_at":"2026-07-05T01:24:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2b4cf9995239225de03f37ffb37b22d0bdc0fde4621c93049a466a92fd676b92","cross_cats_sorted":["cs.CR","cs.LG","cs.SD","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2020-05-24T19:31:02Z","title_canon_sha256":"b381c2f5f350af4fbaff272e0d316fef9c3f6e629aac13f0c3167410aebfcd47"},"schema_version":"1.0","source":{"id":"2005.14611","kind":"arxiv","version":2}},"canonical_sha256":"e3ae09c7d6ab90b2286359f84fabc9d4ddf9902ba773c769146d4955a5466246","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e3ae09c7d6ab90b2286359f84fabc9d4ddf9902ba773c769146d4955a5466246","first_computed_at":"2026-07-05T01:24:00.492644Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:24:00.492644Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sJfZPTwL+EC2asUpgTKbo5XngJSoFLtgOLxqFzJzLf8OlvwP5+rqUAHJQVOQYj5EMeFI81PwW8u0gOGNzui/BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:24:00.493061Z","signed_message":"canonical_sha256_bytes"},"source_id":"2005.14611","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e80e2a016d957efda306121c9b6afbd85140d5643cb1bc1748b2a655ce4687db","sha256:ab9f6f2e99cf009e2cf7739dc4da7fb1f951c5e861893fd5b11884331cd3d24f"],"state_sha256":"d5b501df0dfe4b5c25c73286c01a6eb430218f176e7a0dacc2c321532b5a1988"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zYWK8ZIBX6QQfECOBLc2B27wovOsiWQLSJIkmyKX1hCU3W5WKTxu6/8u+TASe9vfUgaH7ottUD1OFOKMpd9YAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T01:34:18.098489Z","bundle_sha256":"bb62aa932ddda8f37487834e22a24155c5208dbbc9ff24bfc4c53cf8730b037c"}}