{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:6LPPZMWVO3HSXAP55DG4DZPMIP","short_pith_number":"pith:6LPPZMWV","canonical_record":{"source":{"id":"2307.08208","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SD","submitted_at":"2023-07-17T02:58:25Z","cross_cats_sorted":["cs.CR","cs.LG","eess.AS"],"title_canon_sha256":"10eebbffb2d67fcb98feea830302d9606153cf7ddb044eb690eae2a9041fc3b0","abstract_canon_sha256":"71960a6790e9829a5fec0d1e5d6926a3bed9cbf093c675054b49345695ca4617"},"schema_version":"1.0"},"canonical_sha256":"f2defcb2d576cf2b81fde8cdc1e5ec43de4a3288c05d7e362374910da02da4ae","source":{"kind":"arxiv","id":"2307.08208","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.08208","created_at":"2026-07-05T06:31:21Z"},{"alias_kind":"arxiv_version","alias_value":"2307.08208v1","created_at":"2026-07-05T06:31:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.08208","created_at":"2026-07-05T06:31:21Z"},{"alias_kind":"pith_short_12","alias_value":"6LPPZMWVO3HS","created_at":"2026-07-05T06:31:21Z"},{"alias_kind":"pith_short_16","alias_value":"6LPPZMWVO3HSXAP5","created_at":"2026-07-05T06:31:21Z"},{"alias_kind":"pith_short_8","alias_value":"6LPPZMWV","created_at":"2026-07-05T06:31:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:6LPPZMWVO3HSXAP55DG4DZPMIP","target":"record","payload":{"canonical_record":{"source":{"id":"2307.08208","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SD","submitted_at":"2023-07-17T02:58:25Z","cross_cats_sorted":["cs.CR","cs.LG","eess.AS"],"title_canon_sha256":"10eebbffb2d67fcb98feea830302d9606153cf7ddb044eb690eae2a9041fc3b0","abstract_canon_sha256":"71960a6790e9829a5fec0d1e5d6926a3bed9cbf093c675054b49345695ca4617"},"schema_version":"1.0"},"canonical_sha256":"f2defcb2d576cf2b81fde8cdc1e5ec43de4a3288c05d7e362374910da02da4ae","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:31:21.618852Z","signature_b64":"H/v8i0z9rypr90Em9mr0oQeYZqK1NV3J3vBFTWW5YO6UoxQp7jb9btDUWu9CFHarAaQAbdDhNthTfgM24VqtCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f2defcb2d576cf2b81fde8cdc1e5ec43de4a3288c05d7e362374910da02da4ae","last_reissued_at":"2026-07-05T06:31:21.618401Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:31:21.618401Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.08208","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:31:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0sJzKe85nQOKru6ZLMVvNV6p+DojH3ZnRF/xKB1PLUuccFy+Vu5LnFdj9eHojj36XbQyK3T32kBpBfskEzEJBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T15:51:08.259649Z"},"content_sha256":"354360873b2ac7cdc74b580017c9698649602bef712315b38815c06bd53240e4","schema_version":"1.0","event_id":"sha256:354360873b2ac7cdc74b580017c9698649602bef712315b38815c06bd53240e4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:6LPPZMWVO3HSXAP55DG4DZPMIP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.LG","eess.AS"],"primary_cat":"cs.SD","authors_text":"Hai Dong, Hanbo Cai, Pengcheng Zhang, Stefanos Koffas, Yan Xiao, Yiming Li","submitted_at":"2023-07-17T02:58:25Z","abstract_excerpt":"Deep neural networks (DNNs) have been widely and successfully adopted and deployed in various applications of speech recognition. Recently, a few works revealed that these models are vulnerable to backdoor attacks, where the adversaries can implant malicious prediction behaviors into victim models by poisoning their training process. In this paper, we revisit poison-only backdoor attacks against speech recognition. We reveal that existing methods are not stealthy since their trigger patterns are perceptible to humans or machine detection. This limitation is mostly because their trigger pattern"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.08208","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.08208/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:31:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Z/DXn92owaGobZ9z+X22Q5Qdg7EkY/nqp9N7AlKhvVzUPwJWXiz+xBpsDxl5BG3LhgKCQ4h+pXq56W8eKAzYBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T15:51:08.260027Z"},"content_sha256":"fbc37249f002c7d4c16471807c5e048ac5646c3ff12b79d5d43395560a97723e","schema_version":"1.0","event_id":"sha256:fbc37249f002c7d4c16471807c5e048ac5646c3ff12b79d5d43395560a97723e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6LPPZMWVO3HSXAP55DG4DZPMIP/bundle.json","state_url":"https://pith.science/pith/6LPPZMWVO3HSXAP55DG4DZPMIP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6LPPZMWVO3HSXAP55DG4DZPMIP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T15:51:08Z","links":{"resolver":"https://pith.science/pith/6LPPZMWVO3HSXAP55DG4DZPMIP","bundle":"https://pith.science/pith/6LPPZMWVO3HSXAP55DG4DZPMIP/bundle.json","state":"https://pith.science/pith/6LPPZMWVO3HSXAP55DG4DZPMIP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6LPPZMWVO3HSXAP55DG4DZPMIP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:6LPPZMWVO3HSXAP55DG4DZPMIP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"71960a6790e9829a5fec0d1e5d6926a3bed9cbf093c675054b49345695ca4617","cross_cats_sorted":["cs.CR","cs.LG","eess.AS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SD","submitted_at":"2023-07-17T02:58:25Z","title_canon_sha256":"10eebbffb2d67fcb98feea830302d9606153cf7ddb044eb690eae2a9041fc3b0"},"schema_version":"1.0","source":{"id":"2307.08208","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.08208","created_at":"2026-07-05T06:31:21Z"},{"alias_kind":"arxiv_version","alias_value":"2307.08208v1","created_at":"2026-07-05T06:31:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.08208","created_at":"2026-07-05T06:31:21Z"},{"alias_kind":"pith_short_12","alias_value":"6LPPZMWVO3HS","created_at":"2026-07-05T06:31:21Z"},{"alias_kind":"pith_short_16","alias_value":"6LPPZMWVO3HSXAP5","created_at":"2026-07-05T06:31:21Z"},{"alias_kind":"pith_short_8","alias_value":"6LPPZMWV","created_at":"2026-07-05T06:31:21Z"}],"graph_snapshots":[{"event_id":"sha256:fbc37249f002c7d4c16471807c5e048ac5646c3ff12b79d5d43395560a97723e","target":"graph","created_at":"2026-07-05T06:31:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.08208/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) have been widely and successfully adopted and deployed in various applications of speech recognition. Recently, a few works revealed that these models are vulnerable to backdoor attacks, where the adversaries can implant malicious prediction behaviors into victim models by poisoning their training process. In this paper, we revisit poison-only backdoor attacks against speech recognition. We reveal that existing methods are not stealthy since their trigger patterns are perceptible to humans or machine detection. This limitation is mostly because their trigger pattern","authors_text":"Hai Dong, Hanbo Cai, Pengcheng Zhang, Stefanos Koffas, Yan Xiao, Yiming Li","cross_cats":["cs.CR","cs.LG","eess.AS"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SD","submitted_at":"2023-07-17T02:58:25Z","title":"Towards Stealthy Backdoor Attacks against Speech Recognition via Elements of Sound"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.08208","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:354360873b2ac7cdc74b580017c9698649602bef712315b38815c06bd53240e4","target":"record","created_at":"2026-07-05T06:31:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"71960a6790e9829a5fec0d1e5d6926a3bed9cbf093c675054b49345695ca4617","cross_cats_sorted":["cs.CR","cs.LG","eess.AS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SD","submitted_at":"2023-07-17T02:58:25Z","title_canon_sha256":"10eebbffb2d67fcb98feea830302d9606153cf7ddb044eb690eae2a9041fc3b0"},"schema_version":"1.0","source":{"id":"2307.08208","kind":"arxiv","version":1}},"canonical_sha256":"f2defcb2d576cf2b81fde8cdc1e5ec43de4a3288c05d7e362374910da02da4ae","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f2defcb2d576cf2b81fde8cdc1e5ec43de4a3288c05d7e362374910da02da4ae","first_computed_at":"2026-07-05T06:31:21.618401Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:31:21.618401Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"H/v8i0z9rypr90Em9mr0oQeYZqK1NV3J3vBFTWW5YO6UoxQp7jb9btDUWu9CFHarAaQAbdDhNthTfgM24VqtCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:31:21.618852Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.08208","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:354360873b2ac7cdc74b580017c9698649602bef712315b38815c06bd53240e4","sha256:fbc37249f002c7d4c16471807c5e048ac5646c3ff12b79d5d43395560a97723e"],"state_sha256":"1c1802164e517a218497542ba1e75d15b55b7f9e360b21b3754a31bd08d21e2a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pUed1CXGyEzrVQyr4FV+4u6cVo/Z39+U9W4OUIzPf0BdV+8cGUzvES9cF3nn+14VyP7ARHbyRh8RKDbPcH93Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T15:51:08.261950Z","bundle_sha256":"ddab1453998e5db424166c48572a8b3ea73efa8c5e7c31ca78408e02ecdb33cb"}}