{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:AGI3S7ZLFRTS3ZDEIITZ5U3KYH","short_pith_number":"pith:AGI3S7ZL","canonical_record":{"source":{"id":"2110.09714","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-10-19T03:36:35Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"e10900e500a98b1678cccff7629fb278182bbbd935597e8affb5e3f4c0077460","abstract_canon_sha256":"139328c4762dde7b0eec0a30cea78df6be1361cb601a66030a25241b77494889"},"schema_version":"1.0"},"canonical_sha256":"0191b97f2b2c672de46442279ed36ac1c4a3fb56f7247209d30da61d95138cde","source":{"kind":"arxiv","id":"2110.09714","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.09714","created_at":"2026-07-05T03:36:16Z"},{"alias_kind":"arxiv_version","alias_value":"2110.09714v2","created_at":"2026-07-05T03:36:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.09714","created_at":"2026-07-05T03:36:16Z"},{"alias_kind":"pith_short_12","alias_value":"AGI3S7ZLFRTS","created_at":"2026-07-05T03:36:16Z"},{"alias_kind":"pith_short_16","alias_value":"AGI3S7ZLFRTS3ZDE","created_at":"2026-07-05T03:36:16Z"},{"alias_kind":"pith_short_8","alias_value":"AGI3S7ZL","created_at":"2026-07-05T03:36:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:AGI3S7ZLFRTS3ZDEIITZ5U3KYH","target":"record","payload":{"canonical_record":{"source":{"id":"2110.09714","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-10-19T03:36:35Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"e10900e500a98b1678cccff7629fb278182bbbd935597e8affb5e3f4c0077460","abstract_canon_sha256":"139328c4762dde7b0eec0a30cea78df6be1361cb601a66030a25241b77494889"},"schema_version":"1.0"},"canonical_sha256":"0191b97f2b2c672de46442279ed36ac1c4a3fb56f7247209d30da61d95138cde","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:36:16.758869Z","signature_b64":"5uZDOXzTVrzirqaM1ZqO2CN52XwnMGzsl6KLKICRB1cxpVgb200c/xn6wbHBS9uBSqCx5fxa8jxH70Sz/vg4Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0191b97f2b2c672de46442279ed36ac1c4a3fb56f7247209d30da61d95138cde","last_reissued_at":"2026-07-05T03:36:16.758343Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:36:16.758343Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.09714","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:36:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T+fVyec7F6z7UM4nO7chofzb2i8fKUrXY+6rKfJwyx8L3ot1HTZJWQBq8olcxq+vf3NKGHNssd7/UCUJmEjrCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T23:48:41.144599Z"},"content_sha256":"a73412c9ca588bdd2c5e95480e397bb751abfc95b7535fdd9ab2bc269089f0ac","schema_version":"1.0","event_id":"sha256:a73412c9ca588bdd2c5e95480e397bb751abfc95b7535fdd9ab2bc269089f0ac"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:AGI3S7ZLFRTS3ZDEIITZ5U3KYH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Baolin Zheng, Chao Shen, Cong Wang, Peipei Jiang, Qian Wang, Qi Li, Qingyang Teng, Shenyi Zhang, Yunjie Ge","submitted_at":"2021-10-19T03:36:35Z","abstract_excerpt":"Adversarial attacks against commercial black-box speech platforms, including cloud speech APIs and voice control devices, have received little attention until recent years. The current \"black-box\" attacks all heavily rely on the knowledge of prediction/confidence scores to craft effective adversarial examples, which can be intuitively defended by service providers without returning these messages. In this paper, we propose two novel adversarial attacks in more practical and rigorous scenarios. For commercial cloud speech APIs, we propose Occam, a decision-only black-box adversarial attack, whe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.09714","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.09714/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:36:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uD4hsphw6PEtPRDCXFHkpymdnzq8wkyR1WJLNaBvRhP0Yuag4rCOl8rqPqSM9+SEGF107jdaEc3nZNadUxtjDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T23:48:41.145157Z"},"content_sha256":"1e28081d67d7f97377344d2595c8af2f78c65fe826071b43be24e8b13e5a2b14","schema_version":"1.0","event_id":"sha256:1e28081d67d7f97377344d2595c8af2f78c65fe826071b43be24e8b13e5a2b14"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AGI3S7ZLFRTS3ZDEIITZ5U3KYH/bundle.json","state_url":"https://pith.science/pith/AGI3S7ZLFRTS3ZDEIITZ5U3KYH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AGI3S7ZLFRTS3ZDEIITZ5U3KYH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T23:48:41Z","links":{"resolver":"https://pith.science/pith/AGI3S7ZLFRTS3ZDEIITZ5U3KYH","bundle":"https://pith.science/pith/AGI3S7ZLFRTS3ZDEIITZ5U3KYH/bundle.json","state":"https://pith.science/pith/AGI3S7ZLFRTS3ZDEIITZ5U3KYH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AGI3S7ZLFRTS3ZDEIITZ5U3KYH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:AGI3S7ZLFRTS3ZDEIITZ5U3KYH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"139328c4762dde7b0eec0a30cea78df6be1361cb601a66030a25241b77494889","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-10-19T03:36:35Z","title_canon_sha256":"e10900e500a98b1678cccff7629fb278182bbbd935597e8affb5e3f4c0077460"},"schema_version":"1.0","source":{"id":"2110.09714","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.09714","created_at":"2026-07-05T03:36:16Z"},{"alias_kind":"arxiv_version","alias_value":"2110.09714v2","created_at":"2026-07-05T03:36:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.09714","created_at":"2026-07-05T03:36:16Z"},{"alias_kind":"pith_short_12","alias_value":"AGI3S7ZLFRTS","created_at":"2026-07-05T03:36:16Z"},{"alias_kind":"pith_short_16","alias_value":"AGI3S7ZLFRTS3ZDE","created_at":"2026-07-05T03:36:16Z"},{"alias_kind":"pith_short_8","alias_value":"AGI3S7ZL","created_at":"2026-07-05T03:36:16Z"}],"graph_snapshots":[{"event_id":"sha256:1e28081d67d7f97377344d2595c8af2f78c65fe826071b43be24e8b13e5a2b14","target":"graph","created_at":"2026-07-05T03:36:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.09714/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks against commercial black-box speech platforms, including cloud speech APIs and voice control devices, have received little attention until recent years. The current \"black-box\" attacks all heavily rely on the knowledge of prediction/confidence scores to craft effective adversarial examples, which can be intuitively defended by service providers without returning these messages. In this paper, we propose two novel adversarial attacks in more practical and rigorous scenarios. For commercial cloud speech APIs, we propose Occam, a decision-only black-box adversarial attack, whe","authors_text":"Baolin Zheng, Chao Shen, Cong Wang, Peipei Jiang, Qian Wang, Qi Li, Qingyang Teng, Shenyi Zhang, Yunjie Ge","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-10-19T03:36:35Z","title":"Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.09714","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a73412c9ca588bdd2c5e95480e397bb751abfc95b7535fdd9ab2bc269089f0ac","target":"record","created_at":"2026-07-05T03:36:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"139328c4762dde7b0eec0a30cea78df6be1361cb601a66030a25241b77494889","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-10-19T03:36:35Z","title_canon_sha256":"e10900e500a98b1678cccff7629fb278182bbbd935597e8affb5e3f4c0077460"},"schema_version":"1.0","source":{"id":"2110.09714","kind":"arxiv","version":2}},"canonical_sha256":"0191b97f2b2c672de46442279ed36ac1c4a3fb56f7247209d30da61d95138cde","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0191b97f2b2c672de46442279ed36ac1c4a3fb56f7247209d30da61d95138cde","first_computed_at":"2026-07-05T03:36:16.758343Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:36:16.758343Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5uZDOXzTVrzirqaM1ZqO2CN52XwnMGzsl6KLKICRB1cxpVgb200c/xn6wbHBS9uBSqCx5fxa8jxH70Sz/vg4Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:36:16.758869Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.09714","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a73412c9ca588bdd2c5e95480e397bb751abfc95b7535fdd9ab2bc269089f0ac","sha256:1e28081d67d7f97377344d2595c8af2f78c65fe826071b43be24e8b13e5a2b14"],"state_sha256":"b238911f70d2256af7c9d676bc2ae3556ee45f8bfe179da2c58bff919e33b0fd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GdMex6VYeLtqPlwWBsX+AY7dQH3N8ZVNQUqyurgddtNNc7wz9pOfZ56SxhaFxFfbAWmPm92Y2nGYUIKK0BjTCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T23:48:41.150700Z","bundle_sha256":"c624ba0450595fc620996f95df6c292b1e328efaf46be7b3c747a10fb80e794f"}}