{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:EEVYN7YJEIKRQURFLO3PVL2NGQ","short_pith_number":"pith:EEVYN7YJ","canonical_record":{"source":{"id":"2203.13497","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2022-03-25T08:14:37Z","cross_cats_sorted":["cs.CR","eess.AS"],"title_canon_sha256":"51e1029218e348cbaf030db6dc5d6ecf81999e765cb3401627c928b22ed30751","abstract_canon_sha256":"e9e1998e3f3d9be41ffacb64c1ddd5d7d004d6d1561f40e5c7c1d9a5d6abf70e"},"schema_version":"1.0"},"canonical_sha256":"212b86ff0922151852255bb6faaf4d3415a1356c0cd779c00d9564378a251757","source":{"kind":"arxiv","id":"2203.13497","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.13497","created_at":"2026-07-05T04:08:32Z"},{"alias_kind":"arxiv_version","alias_value":"2203.13497v1","created_at":"2026-07-05T04:08:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.13497","created_at":"2026-07-05T04:08:32Z"},{"alias_kind":"pith_short_12","alias_value":"EEVYN7YJEIKR","created_at":"2026-07-05T04:08:32Z"},{"alias_kind":"pith_short_16","alias_value":"EEVYN7YJEIKRQURF","created_at":"2026-07-05T04:08:32Z"},{"alias_kind":"pith_short_8","alias_value":"EEVYN7YJ","created_at":"2026-07-05T04:08:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:EEVYN7YJEIKRQURFLO3PVL2NGQ","target":"record","payload":{"canonical_record":{"source":{"id":"2203.13497","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2022-03-25T08:14:37Z","cross_cats_sorted":["cs.CR","eess.AS"],"title_canon_sha256":"51e1029218e348cbaf030db6dc5d6ecf81999e765cb3401627c928b22ed30751","abstract_canon_sha256":"e9e1998e3f3d9be41ffacb64c1ddd5d7d004d6d1561f40e5c7c1d9a5d6abf70e"},"schema_version":"1.0"},"canonical_sha256":"212b86ff0922151852255bb6faaf4d3415a1356c0cd779c00d9564378a251757","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:08:32.709843Z","signature_b64":"pulblJGnXp6P04VaRICg55O2GAqvA8+DuGAhz39cgaBvNeTbFTe01MvPnakboT0LDAuJ4ZzXjHu+kItNRocdBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"212b86ff0922151852255bb6faaf4d3415a1356c0cd779c00d9564378a251757","last_reissued_at":"2026-07-05T04:08:32.709439Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:08:32.709439Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2203.13497","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:08:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AF3KiM52+Fvn8LAXqfNb+Vvdnp3X6xmZtuBFQlp0UAe7iR7rYF91Kg0IqXgE6jDvuSO2y7Ymr4viHmESjuaHBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T03:05:39.777966Z"},"content_sha256":"6518f75939bda784ebb1bea57781bf0fdede8de047db6d820f68d05109304c41","schema_version":"1.0","event_id":"sha256:6518f75939bda784ebb1bea57781bf0fdede8de047db6d820f68d05109304c41"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:EEVYN7YJEIKRQURFLO3PVL2NGQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"WaveFuzz: A Clean-Label Poisoning Attack to Protect Your Voice","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","eess.AS"],"primary_cat":"cs.SD","authors_text":"Chao Shen, Jingfeng Zhang, Juntao Zhou, Qian Wang, Yunjie Ge, Yunzhu Zhang","submitted_at":"2022-03-25T08:14:37Z","abstract_excerpt":"People are not always receptive to their voice data being collected and misused. Training the audio intelligence systems needs these data to build useful features, but the cost for getting permissions or purchasing data is very high, which inevitably encourages hackers to collect these voice data without people's awareness. To discourage the hackers from proactively collecting people's voice data, we are the first to propose a clean-label poisoning attack, called WaveFuzz, which can prevent intelligence audio models from building useful features from protected (poisoned) voice data but still p"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.13497","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2203.13497/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:08:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6ESKLZOrsL/xP/dO8byVV3zbve+nJsnjs5tpAq4LvIQ5uqL8/+TFgQxzD4BdRRnH65FLjWN8JnVFhQ8slQssCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T03:05:39.778883Z"},"content_sha256":"0d013c9df501f51bce8806d908a659d8e52a4fe46d5811f697e4d97547232ae1","schema_version":"1.0","event_id":"sha256:0d013c9df501f51bce8806d908a659d8e52a4fe46d5811f697e4d97547232ae1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EEVYN7YJEIKRQURFLO3PVL2NGQ/bundle.json","state_url":"https://pith.science/pith/EEVYN7YJEIKRQURFLO3PVL2NGQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EEVYN7YJEIKRQURFLO3PVL2NGQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T03:05:39Z","links":{"resolver":"https://pith.science/pith/EEVYN7YJEIKRQURFLO3PVL2NGQ","bundle":"https://pith.science/pith/EEVYN7YJEIKRQURFLO3PVL2NGQ/bundle.json","state":"https://pith.science/pith/EEVYN7YJEIKRQURFLO3PVL2NGQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EEVYN7YJEIKRQURFLO3PVL2NGQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:EEVYN7YJEIKRQURFLO3PVL2NGQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e9e1998e3f3d9be41ffacb64c1ddd5d7d004d6d1561f40e5c7c1d9a5d6abf70e","cross_cats_sorted":["cs.CR","eess.AS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2022-03-25T08:14:37Z","title_canon_sha256":"51e1029218e348cbaf030db6dc5d6ecf81999e765cb3401627c928b22ed30751"},"schema_version":"1.0","source":{"id":"2203.13497","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.13497","created_at":"2026-07-05T04:08:32Z"},{"alias_kind":"arxiv_version","alias_value":"2203.13497v1","created_at":"2026-07-05T04:08:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.13497","created_at":"2026-07-05T04:08:32Z"},{"alias_kind":"pith_short_12","alias_value":"EEVYN7YJEIKR","created_at":"2026-07-05T04:08:32Z"},{"alias_kind":"pith_short_16","alias_value":"EEVYN7YJEIKRQURF","created_at":"2026-07-05T04:08:32Z"},{"alias_kind":"pith_short_8","alias_value":"EEVYN7YJ","created_at":"2026-07-05T04:08:32Z"}],"graph_snapshots":[{"event_id":"sha256:0d013c9df501f51bce8806d908a659d8e52a4fe46d5811f697e4d97547232ae1","target":"graph","created_at":"2026-07-05T04:08:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2203.13497/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"People are not always receptive to their voice data being collected and misused. Training the audio intelligence systems needs these data to build useful features, but the cost for getting permissions or purchasing data is very high, which inevitably encourages hackers to collect these voice data without people's awareness. To discourage the hackers from proactively collecting people's voice data, we are the first to propose a clean-label poisoning attack, called WaveFuzz, which can prevent intelligence audio models from building useful features from protected (poisoned) voice data but still p","authors_text":"Chao Shen, Jingfeng Zhang, Juntao Zhou, Qian Wang, Yunjie Ge, Yunzhu Zhang","cross_cats":["cs.CR","eess.AS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2022-03-25T08:14:37Z","title":"WaveFuzz: A Clean-Label Poisoning Attack to Protect Your Voice"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.13497","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6518f75939bda784ebb1bea57781bf0fdede8de047db6d820f68d05109304c41","target":"record","created_at":"2026-07-05T04:08:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e9e1998e3f3d9be41ffacb64c1ddd5d7d004d6d1561f40e5c7c1d9a5d6abf70e","cross_cats_sorted":["cs.CR","eess.AS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SD","submitted_at":"2022-03-25T08:14:37Z","title_canon_sha256":"51e1029218e348cbaf030db6dc5d6ecf81999e765cb3401627c928b22ed30751"},"schema_version":"1.0","source":{"id":"2203.13497","kind":"arxiv","version":1}},"canonical_sha256":"212b86ff0922151852255bb6faaf4d3415a1356c0cd779c00d9564378a251757","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"212b86ff0922151852255bb6faaf4d3415a1356c0cd779c00d9564378a251757","first_computed_at":"2026-07-05T04:08:32.709439Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:08:32.709439Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pulblJGnXp6P04VaRICg55O2GAqvA8+DuGAhz39cgaBvNeTbFTe01MvPnakboT0LDAuJ4ZzXjHu+kItNRocdBw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:08:32.709843Z","signed_message":"canonical_sha256_bytes"},"source_id":"2203.13497","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6518f75939bda784ebb1bea57781bf0fdede8de047db6d820f68d05109304c41","sha256:0d013c9df501f51bce8806d908a659d8e52a4fe46d5811f697e4d97547232ae1"],"state_sha256":"aa5b696082611d1fd669d8083e5a7c45e98024cefdf7d35990dc050e64bd26ed"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HCnbUpzb806JJi2j0jUQC1ihC8wzPcR4WOSRDNkw3d5G7OBLCpHvYlEHXq1bCkTU4r+QxHPHYdpU2K5sZvCcAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T03:05:39.784609Z","bundle_sha256":"0dfaabd439cbcbbc66f15ff315eadde1bf44585377e6ed3167e8ff3c281dd799"}}