{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:AWBP3KSJWIKYUNZ5SRELTW5K7C","short_pith_number":"pith:AWBP3KSJ","canonical_record":{"source":{"id":"1905.03828","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-05-09T19:35:30Z","cross_cats_sorted":["cs.SD","eess.AS","stat.ML"],"title_canon_sha256":"05ed85bc78e28f39e4f2ad51ca470db33849533b093b8c144a2d8651cc8605d1","abstract_canon_sha256":"e7cf79dad5d65410728f9dd3ad21fc67d651ffb9fe777dba350f6960215aba34"},"schema_version":"1.0"},"canonical_sha256":"0582fdaa49b2158a373d9448b9dbaaf8966d286b5b94d4810efc693b95fe86f3","source":{"kind":"arxiv","id":"1905.03828","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.03828","created_at":"2026-07-04T23:56:48Z"},{"alias_kind":"arxiv_version","alias_value":"1905.03828v2","created_at":"2026-07-04T23:56:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.03828","created_at":"2026-07-04T23:56:48Z"},{"alias_kind":"pith_short_12","alias_value":"AWBP3KSJWIKY","created_at":"2026-07-04T23:56:48Z"},{"alias_kind":"pith_short_16","alias_value":"AWBP3KSJWIKYUNZ5","created_at":"2026-07-04T23:56:48Z"},{"alias_kind":"pith_short_8","alias_value":"AWBP3KSJ","created_at":"2026-07-04T23:56:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:AWBP3KSJWIKYUNZ5SRELTW5K7C","target":"record","payload":{"canonical_record":{"source":{"id":"1905.03828","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-05-09T19:35:30Z","cross_cats_sorted":["cs.SD","eess.AS","stat.ML"],"title_canon_sha256":"05ed85bc78e28f39e4f2ad51ca470db33849533b093b8c144a2d8651cc8605d1","abstract_canon_sha256":"e7cf79dad5d65410728f9dd3ad21fc67d651ffb9fe777dba350f6960215aba34"},"schema_version":"1.0"},"canonical_sha256":"0582fdaa49b2158a373d9448b9dbaaf8966d286b5b94d4810efc693b95fe86f3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-04T23:56:48.520442Z","signature_b64":"22PuxtLkzdg2/QSFExerPjmkJ2BrGEpzxtz7odANQcTOAEUiAG/+aMn09xnA9i2nJsm5X23IfSzGC9kXB3oVDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0582fdaa49b2158a373d9448b9dbaaf8966d286b5b94d4810efc693b95fe86f3","last_reissued_at":"2026-07-04T23:56:48.519952Z","signature_status":"signed_v1","first_computed_at":"2026-07-04T23:56:48.519952Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1905.03828","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:56:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZN6DBDVuIPS/IBh3JPqXhVqZ27ti/bzW0XYTk7Z91F6PYD8NBwTLc15biHh7xFJe6xrq6m73sOAGbk4MtgudBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:29:21.184675Z"},"content_sha256":"93a0c623c230ae5227736cbad813f358cc490cdde0566c8e48e2128ece1ab9c7","schema_version":"1.0","event_id":"sha256:93a0c623c230ae5227736cbad813f358cc490cdde0566c8e48e2128ece1ab9c7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:AWBP3KSJWIKYUNZ5SRELTW5K7C","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Universal Adversarial Perturbations for Speech Recognition Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SD","eess.AS","stat.ML"],"primary_cat":"cs.LG","authors_text":"Farinaz Koushanfar, Julian McAuley, Paarth Neekhara, Prakhar Pandey, Shehzeen Hussain, Shlomo Dubnov","submitted_at":"2019-05-09T19:35:30Z","abstract_excerpt":"In this work, we demonstrate the existence of universal adversarial audio perturbations that cause mis-transcription of audio signals by automatic speech recognition (ASR) systems. We propose an algorithm to find a single quasi-imperceptible perturbation, which when added to any arbitrary speech signal, will most likely fool the victim speech recognition model. Our experiments demonstrate the application of our proposed technique by crafting audio-agnostic universal perturbations for the state-of-the-art ASR system -- Mozilla DeepSpeech. Additionally, we show that such perturbations generalize"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.03828","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1905.03828/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:56:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xCtowiEQzWQSNfKuNqc6wk4Z+IXcs32T587j3Nkofj8OwtTSI3jkdmoIlWdlX+yjyUkYKoDJOyj470oQ+z4zBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T18:29:21.185165Z"},"content_sha256":"cf42c2e1069289a649dd6c60648707b6b03ea9989075761c531ce488cfb32e83","schema_version":"1.0","event_id":"sha256:cf42c2e1069289a649dd6c60648707b6b03ea9989075761c531ce488cfb32e83"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AWBP3KSJWIKYUNZ5SRELTW5K7C/bundle.json","state_url":"https://pith.science/pith/AWBP3KSJWIKYUNZ5SRELTW5K7C/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AWBP3KSJWIKYUNZ5SRELTW5K7C/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T18:29:21Z","links":{"resolver":"https://pith.science/pith/AWBP3KSJWIKYUNZ5SRELTW5K7C","bundle":"https://pith.science/pith/AWBP3KSJWIKYUNZ5SRELTW5K7C/bundle.json","state":"https://pith.science/pith/AWBP3KSJWIKYUNZ5SRELTW5K7C/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AWBP3KSJWIKYUNZ5SRELTW5K7C/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:AWBP3KSJWIKYUNZ5SRELTW5K7C","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e7cf79dad5d65410728f9dd3ad21fc67d651ffb9fe777dba350f6960215aba34","cross_cats_sorted":["cs.SD","eess.AS","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-05-09T19:35:30Z","title_canon_sha256":"05ed85bc78e28f39e4f2ad51ca470db33849533b093b8c144a2d8651cc8605d1"},"schema_version":"1.0","source":{"id":"1905.03828","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.03828","created_at":"2026-07-04T23:56:48Z"},{"alias_kind":"arxiv_version","alias_value":"1905.03828v2","created_at":"2026-07-04T23:56:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.03828","created_at":"2026-07-04T23:56:48Z"},{"alias_kind":"pith_short_12","alias_value":"AWBP3KSJWIKY","created_at":"2026-07-04T23:56:48Z"},{"alias_kind":"pith_short_16","alias_value":"AWBP3KSJWIKYUNZ5","created_at":"2026-07-04T23:56:48Z"},{"alias_kind":"pith_short_8","alias_value":"AWBP3KSJ","created_at":"2026-07-04T23:56:48Z"}],"graph_snapshots":[{"event_id":"sha256:cf42c2e1069289a649dd6c60648707b6b03ea9989075761c531ce488cfb32e83","target":"graph","created_at":"2026-07-04T23:56:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1905.03828/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this work, we demonstrate the existence of universal adversarial audio perturbations that cause mis-transcription of audio signals by automatic speech recognition (ASR) systems. We propose an algorithm to find a single quasi-imperceptible perturbation, which when added to any arbitrary speech signal, will most likely fool the victim speech recognition model. Our experiments demonstrate the application of our proposed technique by crafting audio-agnostic universal perturbations for the state-of-the-art ASR system -- Mozilla DeepSpeech. Additionally, we show that such perturbations generalize","authors_text":"Farinaz Koushanfar, Julian McAuley, Paarth Neekhara, Prakhar Pandey, Shehzeen Hussain, Shlomo Dubnov","cross_cats":["cs.SD","eess.AS","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-05-09T19:35:30Z","title":"Universal Adversarial Perturbations for Speech Recognition Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.03828","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:93a0c623c230ae5227736cbad813f358cc490cdde0566c8e48e2128ece1ab9c7","target":"record","created_at":"2026-07-04T23:56:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e7cf79dad5d65410728f9dd3ad21fc67d651ffb9fe777dba350f6960215aba34","cross_cats_sorted":["cs.SD","eess.AS","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-05-09T19:35:30Z","title_canon_sha256":"05ed85bc78e28f39e4f2ad51ca470db33849533b093b8c144a2d8651cc8605d1"},"schema_version":"1.0","source":{"id":"1905.03828","kind":"arxiv","version":2}},"canonical_sha256":"0582fdaa49b2158a373d9448b9dbaaf8966d286b5b94d4810efc693b95fe86f3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0582fdaa49b2158a373d9448b9dbaaf8966d286b5b94d4810efc693b95fe86f3","first_computed_at":"2026-07-04T23:56:48.519952Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-04T23:56:48.519952Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"22PuxtLkzdg2/QSFExerPjmkJ2BrGEpzxtz7odANQcTOAEUiAG/+aMn09xnA9i2nJsm5X23IfSzGC9kXB3oVDQ==","signature_status":"signed_v1","signed_at":"2026-07-04T23:56:48.520442Z","signed_message":"canonical_sha256_bytes"},"source_id":"1905.03828","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:93a0c623c230ae5227736cbad813f358cc490cdde0566c8e48e2128ece1ab9c7","sha256:cf42c2e1069289a649dd6c60648707b6b03ea9989075761c531ce488cfb32e83"],"state_sha256":"3bb7c0b20712d15c6523174ab45a0b1c23a891a76e106ad7be0ea15c583621b9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mTJPPyukxmFSK90lcgixglzMEpIdwECE6hj4YeYms7n88pH8a4Lz+zCuK9rl4JvgH+eSdjj2DEWwvKpTIbLoCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T18:29:21.188613Z","bundle_sha256":"561e35be1a52e8875a5d3a529a7291280c52fdd373364021612f6609bd367b30"}}