{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:6H2GDHXUBN2KTJU3336V2R2J43","short_pith_number":"pith:6H2GDHXU","canonical_record":{"source":{"id":"2107.14569","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-30T12:08:16Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"02bdb3e48f265cb17aedd1a25b60b6ebb39c91cd2e947a684a81c6e2b5850fe5","abstract_canon_sha256":"60a2604f0b9ac168782f3951541d9f687ced52fd6371d1d1e40b732c81b49ae7"},"schema_version":"1.0"},"canonical_sha256":"f1f4619ef40b74a9a69bdefd5d4749e6e481d2ddf0519a6484d50ce00097ef52","source":{"kind":"arxiv","id":"2107.14569","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.14569","created_at":"2026-07-05T06:14:33Z"},{"alias_kind":"arxiv_version","alias_value":"2107.14569v3","created_at":"2026-07-05T06:14:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.14569","created_at":"2026-07-05T06:14:33Z"},{"alias_kind":"pith_short_12","alias_value":"6H2GDHXUBN2K","created_at":"2026-07-05T06:14:33Z"},{"alias_kind":"pith_short_16","alias_value":"6H2GDHXUBN2KTJU3","created_at":"2026-07-05T06:14:33Z"},{"alias_kind":"pith_short_8","alias_value":"6H2GDHXU","created_at":"2026-07-05T06:14:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:6H2GDHXUBN2KTJU3336V2R2J43","target":"record","payload":{"canonical_record":{"source":{"id":"2107.14569","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-30T12:08:16Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"02bdb3e48f265cb17aedd1a25b60b6ebb39c91cd2e947a684a81c6e2b5850fe5","abstract_canon_sha256":"60a2604f0b9ac168782f3951541d9f687ced52fd6371d1d1e40b732c81b49ae7"},"schema_version":"1.0"},"canonical_sha256":"f1f4619ef40b74a9a69bdefd5d4749e6e481d2ddf0519a6484d50ce00097ef52","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:14:33.042773Z","signature_b64":"FmYRnOVp5Pvm0Th281QsbT7Xxv/1CMIO728y2U1byHoMD3AWJxf4a7SFSVdYoKZxnjv5vBqvnec7herN60IRCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f1f4619ef40b74a9a69bdefd5d4749e6e481d2ddf0519a6484d50ce00097ef52","last_reissued_at":"2026-07-05T06:14:33.042354Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:14:33.042354Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2107.14569","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:14:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eK3lwd6AZ62psCWioafc86J0WkTWGVy8ue6DG+uIbEkPQLzjDP5Dpa8i3m7HDCRn34EyYbojvXWIWmXyqcfHBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T14:05:27.339477Z"},"content_sha256":"8aac1cffd587c02ec555da65969ef9f5fdca310467514621e13884daa74aa80c","schema_version":"1.0","event_id":"sha256:8aac1cffd587c02ec555da65969ef9f5fdca310467514621e13884daa74aa80c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:6H2GDHXUBN2KTJU3336V2R2J43","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Can You Hear It? Backdoor Attacks via Ultrasonic Triggers","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Jing Xu, Mauro Conti, Stefanos Koffas, Stjepan Picek","submitted_at":"2021-07-30T12:08:16Z","abstract_excerpt":"This work explores backdoor attacks for automatic speech recognition systems where we inject inaudible triggers. By doing so, we make the backdoor attack challenging to detect for legitimate users, and thus, potentially more dangerous. We conduct experiments on two versions of a speech dataset and three neural networks and explore the performance of our attack concerning the duration, position, and type of the trigger. Our results indicate that less than 1% of poisoned data is sufficient to deploy a backdoor attack and reach a 100% attack success rate. We observed that short, non-continuous tr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.14569","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2107.14569/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:14:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qFvTtXkPj+d08Sa8ssOveWy8gP8eLgBkvYrdZP6O8YVb7FEc8QA83JaX6V7rz01yaj8n4sX+br8oc/YRO4N7Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T14:05:27.340011Z"},"content_sha256":"6fb04fd1a57cbcccbb24105b7e2117a758444ae1b17197d128cfce6205b46273","schema_version":"1.0","event_id":"sha256:6fb04fd1a57cbcccbb24105b7e2117a758444ae1b17197d128cfce6205b46273"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6H2GDHXUBN2KTJU3336V2R2J43/bundle.json","state_url":"https://pith.science/pith/6H2GDHXUBN2KTJU3336V2R2J43/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6H2GDHXUBN2KTJU3336V2R2J43/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T14:05:27Z","links":{"resolver":"https://pith.science/pith/6H2GDHXUBN2KTJU3336V2R2J43","bundle":"https://pith.science/pith/6H2GDHXUBN2KTJU3336V2R2J43/bundle.json","state":"https://pith.science/pith/6H2GDHXUBN2KTJU3336V2R2J43/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6H2GDHXUBN2KTJU3336V2R2J43/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:6H2GDHXUBN2KTJU3336V2R2J43","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"60a2604f0b9ac168782f3951541d9f687ced52fd6371d1d1e40b732c81b49ae7","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-30T12:08:16Z","title_canon_sha256":"02bdb3e48f265cb17aedd1a25b60b6ebb39c91cd2e947a684a81c6e2b5850fe5"},"schema_version":"1.0","source":{"id":"2107.14569","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.14569","created_at":"2026-07-05T06:14:33Z"},{"alias_kind":"arxiv_version","alias_value":"2107.14569v3","created_at":"2026-07-05T06:14:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.14569","created_at":"2026-07-05T06:14:33Z"},{"alias_kind":"pith_short_12","alias_value":"6H2GDHXUBN2K","created_at":"2026-07-05T06:14:33Z"},{"alias_kind":"pith_short_16","alias_value":"6H2GDHXUBN2KTJU3","created_at":"2026-07-05T06:14:33Z"},{"alias_kind":"pith_short_8","alias_value":"6H2GDHXU","created_at":"2026-07-05T06:14:33Z"}],"graph_snapshots":[{"event_id":"sha256:6fb04fd1a57cbcccbb24105b7e2117a758444ae1b17197d128cfce6205b46273","target":"graph","created_at":"2026-07-05T06:14:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2107.14569/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This work explores backdoor attacks for automatic speech recognition systems where we inject inaudible triggers. By doing so, we make the backdoor attack challenging to detect for legitimate users, and thus, potentially more dangerous. We conduct experiments on two versions of a speech dataset and three neural networks and explore the performance of our attack concerning the duration, position, and type of the trigger. Our results indicate that less than 1% of poisoned data is sufficient to deploy a backdoor attack and reach a 100% attack success rate. We observed that short, non-continuous tr","authors_text":"Jing Xu, Mauro Conti, Stefanos Koffas, Stjepan Picek","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-30T12:08:16Z","title":"Can You Hear It? Backdoor Attacks via Ultrasonic Triggers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.14569","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8aac1cffd587c02ec555da65969ef9f5fdca310467514621e13884daa74aa80c","target":"record","created_at":"2026-07-05T06:14:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"60a2604f0b9ac168782f3951541d9f687ced52fd6371d1d1e40b732c81b49ae7","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-30T12:08:16Z","title_canon_sha256":"02bdb3e48f265cb17aedd1a25b60b6ebb39c91cd2e947a684a81c6e2b5850fe5"},"schema_version":"1.0","source":{"id":"2107.14569","kind":"arxiv","version":3}},"canonical_sha256":"f1f4619ef40b74a9a69bdefd5d4749e6e481d2ddf0519a6484d50ce00097ef52","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f1f4619ef40b74a9a69bdefd5d4749e6e481d2ddf0519a6484d50ce00097ef52","first_computed_at":"2026-07-05T06:14:33.042354Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:14:33.042354Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FmYRnOVp5Pvm0Th281QsbT7Xxv/1CMIO728y2U1byHoMD3AWJxf4a7SFSVdYoKZxnjv5vBqvnec7herN60IRCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:14:33.042773Z","signed_message":"canonical_sha256_bytes"},"source_id":"2107.14569","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8aac1cffd587c02ec555da65969ef9f5fdca310467514621e13884daa74aa80c","sha256:6fb04fd1a57cbcccbb24105b7e2117a758444ae1b17197d128cfce6205b46273"],"state_sha256":"79e3599d0c4debe7f3a45bafb080cc290e901ce34a82c7701d4b170690206fa9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GBCQCioJ7XIhA7STZh9l0wjAvY6lAwhYgVIMJAFFMAVwq5Ultmm1itDY3n1OQrpitzaRLqJ5LDxCD1DkTvswDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T14:05:27.344148Z","bundle_sha256":"f21fde12a95dfeaeb3be026e247ee84c82176f16a98edc4fefc975b8a6b94b87"}}