{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:AZUNTJ7Y5WO2XBRPC3MGFJVLDZ","short_pith_number":"pith:AZUNTJ7Y","canonical_record":{"source":{"id":"2203.09849","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2022-03-18T10:37:20Z","cross_cats_sorted":["cs.AI","cs.LG","eess.AS"],"title_canon_sha256":"a063ff653d9f19a83e95f599ee462f89b84a2549f60e2c777becb07aeae518aa","abstract_canon_sha256":"974279024b79e664d360ce833ab5e61bd32b82d9ad8e47851293eb7c90c225a1"},"schema_version":"1.0"},"canonical_sha256":"0668d9a7f8ed9dab862f16d862a6ab1e5033f20f4451a416ba7b112b0ae85ccb","source":{"kind":"arxiv","id":"2203.09849","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.09849","created_at":"2026-07-05T04:06:24Z"},{"alias_kind":"arxiv_version","alias_value":"2203.09849v1","created_at":"2026-07-05T04:06:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.09849","created_at":"2026-07-05T04:06:24Z"},{"alias_kind":"pith_short_12","alias_value":"AZUNTJ7Y5WO2","created_at":"2026-07-05T04:06:24Z"},{"alias_kind":"pith_short_16","alias_value":"AZUNTJ7Y5WO2XBRP","created_at":"2026-07-05T04:06:24Z"},{"alias_kind":"pith_short_8","alias_value":"AZUNTJ7Y","created_at":"2026-07-05T04:06:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:AZUNTJ7Y5WO2XBRPC3MGFJVLDZ","target":"record","payload":{"canonical_record":{"source":{"id":"2203.09849","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2022-03-18T10:37:20Z","cross_cats_sorted":["cs.AI","cs.LG","eess.AS"],"title_canon_sha256":"a063ff653d9f19a83e95f599ee462f89b84a2549f60e2c777becb07aeae518aa","abstract_canon_sha256":"974279024b79e664d360ce833ab5e61bd32b82d9ad8e47851293eb7c90c225a1"},"schema_version":"1.0"},"canonical_sha256":"0668d9a7f8ed9dab862f16d862a6ab1e5033f20f4451a416ba7b112b0ae85ccb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:06:24.732648Z","signature_b64":"qP0qcQN9t8nXVE2V+lntAOmTMIMDkjddlR7NSEeE5kHAKoDEBxbQoacNl1pNJKCFPYybE95l+zHNqTJZvoONDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0668d9a7f8ed9dab862f16d862a6ab1e5033f20f4451a416ba7b112b0ae85ccb","last_reissued_at":"2026-07-05T04:06:24.732196Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:06:24.732196Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2203.09849","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:06:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O8juaAPTk2gbWDhN6QfOoINQGSkkd7RPibI3au87OV5C6fEQ98bAqesXyR5/ekY2+IRPcoM3F7p+s8nk1LU1Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T23:21:56.738081Z"},"content_sha256":"9598fdfad0d66d5a26d7b7cc0b5dfc7f72332ef527eb00b8c4c4020d364daa64","schema_version":"1.0","event_id":"sha256:9598fdfad0d66d5a26d7b7cc0b5dfc7f72332ef527eb00b8c4c4020d364daa64"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:AZUNTJ7Y5WO2XBRPC3MGFJVLDZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Neural Predictor for Black-Box Adversarial Attacks on Speech Recognition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG","eess.AS"],"primary_cat":"cs.SD","authors_text":"Bac Nguyen, Marie Biolkov\\'a","submitted_at":"2022-03-18T10:37:20Z","abstract_excerpt":"Recent works have revealed the vulnerability of automatic speech recognition (ASR) models to adversarial examples (AEs), i.e., small perturbations that cause an error in the transcription of the audio signal. Studying audio adversarial attacks is therefore the first step towards robust ASR. Despite the significant progress made in attacking audio examples, the black-box attack remains challenging because only the hard-label information of transcriptions is provided. Due to this limited information, existing black-box methods often require an excessive number of queries to attack a single audio"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.09849","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2203.09849/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:06:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MA76TrEyjIyFID6Ea5U5wBA0IgsHJ2rRrOb8+Br+wizTGIU87ihD6JiLqQpxa/uOEDcrEkrzcJWuIX4hIkkpDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T23:21:56.739048Z"},"content_sha256":"7ca777370de0385e65e26d8b8504c7a94d784f831a004ddc86f1e972a85e15e1","schema_version":"1.0","event_id":"sha256:7ca777370de0385e65e26d8b8504c7a94d784f831a004ddc86f1e972a85e15e1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AZUNTJ7Y5WO2XBRPC3MGFJVLDZ/bundle.json","state_url":"https://pith.science/pith/AZUNTJ7Y5WO2XBRPC3MGFJVLDZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AZUNTJ7Y5WO2XBRPC3MGFJVLDZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T23:21:56Z","links":{"resolver":"https://pith.science/pith/AZUNTJ7Y5WO2XBRPC3MGFJVLDZ","bundle":"https://pith.science/pith/AZUNTJ7Y5WO2XBRPC3MGFJVLDZ/bundle.json","state":"https://pith.science/pith/AZUNTJ7Y5WO2XBRPC3MGFJVLDZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AZUNTJ7Y5WO2XBRPC3MGFJVLDZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:AZUNTJ7Y5WO2XBRPC3MGFJVLDZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"974279024b79e664d360ce833ab5e61bd32b82d9ad8e47851293eb7c90c225a1","cross_cats_sorted":["cs.AI","cs.LG","eess.AS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2022-03-18T10:37:20Z","title_canon_sha256":"a063ff653d9f19a83e95f599ee462f89b84a2549f60e2c777becb07aeae518aa"},"schema_version":"1.0","source":{"id":"2203.09849","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.09849","created_at":"2026-07-05T04:06:24Z"},{"alias_kind":"arxiv_version","alias_value":"2203.09849v1","created_at":"2026-07-05T04:06:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.09849","created_at":"2026-07-05T04:06:24Z"},{"alias_kind":"pith_short_12","alias_value":"AZUNTJ7Y5WO2","created_at":"2026-07-05T04:06:24Z"},{"alias_kind":"pith_short_16","alias_value":"AZUNTJ7Y5WO2XBRP","created_at":"2026-07-05T04:06:24Z"},{"alias_kind":"pith_short_8","alias_value":"AZUNTJ7Y","created_at":"2026-07-05T04:06:24Z"}],"graph_snapshots":[{"event_id":"sha256:7ca777370de0385e65e26d8b8504c7a94d784f831a004ddc86f1e972a85e15e1","target":"graph","created_at":"2026-07-05T04:06:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2203.09849/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent works have revealed the vulnerability of automatic speech recognition (ASR) models to adversarial examples (AEs), i.e., small perturbations that cause an error in the transcription of the audio signal. Studying audio adversarial attacks is therefore the first step towards robust ASR. Despite the significant progress made in attacking audio examples, the black-box attack remains challenging because only the hard-label information of transcriptions is provided. Due to this limited information, existing black-box methods often require an excessive number of queries to attack a single audio","authors_text":"Bac Nguyen, Marie Biolkov\\'a","cross_cats":["cs.AI","cs.LG","eess.AS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2022-03-18T10:37:20Z","title":"Neural Predictor for Black-Box Adversarial Attacks on Speech Recognition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.09849","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9598fdfad0d66d5a26d7b7cc0b5dfc7f72332ef527eb00b8c4c4020d364daa64","target":"record","created_at":"2026-07-05T04:06:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"974279024b79e664d360ce833ab5e61bd32b82d9ad8e47851293eb7c90c225a1","cross_cats_sorted":["cs.AI","cs.LG","eess.AS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2022-03-18T10:37:20Z","title_canon_sha256":"a063ff653d9f19a83e95f599ee462f89b84a2549f60e2c777becb07aeae518aa"},"schema_version":"1.0","source":{"id":"2203.09849","kind":"arxiv","version":1}},"canonical_sha256":"0668d9a7f8ed9dab862f16d862a6ab1e5033f20f4451a416ba7b112b0ae85ccb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0668d9a7f8ed9dab862f16d862a6ab1e5033f20f4451a416ba7b112b0ae85ccb","first_computed_at":"2026-07-05T04:06:24.732196Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:06:24.732196Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qP0qcQN9t8nXVE2V+lntAOmTMIMDkjddlR7NSEeE5kHAKoDEBxbQoacNl1pNJKCFPYybE95l+zHNqTJZvoONDA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:06:24.732648Z","signed_message":"canonical_sha256_bytes"},"source_id":"2203.09849","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9598fdfad0d66d5a26d7b7cc0b5dfc7f72332ef527eb00b8c4c4020d364daa64","sha256:7ca777370de0385e65e26d8b8504c7a94d784f831a004ddc86f1e972a85e15e1"],"state_sha256":"0255c1b75014664bb9b654be996bf2383ee6a30912daf12a628eb41e85f2c749"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yNXQkwIqxpM0YY2/aQwfIZYj+1WMAUk3RvXZLYkmAi/V+fuki5un5yY8tofQ1b1VL1UQwygswC7MjnEqGaDODg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T23:21:56.745469Z","bundle_sha256":"e25c4aba84c789181a3d4ac71f753b40b77e94151002f59ebc765480d93bb47f"}}