{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:F5I3CYVCOC5HLTQLQN7EBCJA6H","short_pith_number":"pith:F5I3CYVC","canonical_record":{"source":{"id":"1708.07238","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-24T00:57:08Z","cross_cats_sorted":[],"title_canon_sha256":"a71b3820561345fdd049ee26d5d7cbd153b954e2d079883b536fae6afffd975c","abstract_canon_sha256":"ca9b2914366b2eb6ea8235a894ab2ef8185a158c6ffe2ae87309b7dc0d873e01"},"schema_version":"1.0"},"canonical_sha256":"2f51b162a270ba75ce0b837e408920f1fdf2a77e492c74f7d15006e9188be268","source":{"kind":"arxiv","id":"1708.07238","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1708.07238","created_at":"2026-05-18T00:36:46Z"},{"alias_kind":"arxiv_version","alias_value":"1708.07238v1","created_at":"2026-05-18T00:36:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1708.07238","created_at":"2026-05-18T00:36:46Z"},{"alias_kind":"pith_short_12","alias_value":"F5I3CYVCOC5H","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_16","alias_value":"F5I3CYVCOC5HLTQL","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_8","alias_value":"F5I3CYVC","created_at":"2026-05-18T12:31:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:F5I3CYVCOC5HLTQLQN7EBCJA6H","target":"record","payload":{"canonical_record":{"source":{"id":"1708.07238","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-24T00:57:08Z","cross_cats_sorted":[],"title_canon_sha256":"a71b3820561345fdd049ee26d5d7cbd153b954e2d079883b536fae6afffd975c","abstract_canon_sha256":"ca9b2914366b2eb6ea8235a894ab2ef8185a158c6ffe2ae87309b7dc0d873e01"},"schema_version":"1.0"},"canonical_sha256":"2f51b162a270ba75ce0b837e408920f1fdf2a77e492c74f7d15006e9188be268","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:36:46.802354Z","signature_b64":"8vVhGI17gy6XmWhZ+gBNqxO01dqnuUoemZOLwzMeU1DgWVoDo0mNwBbmLxbHV/WtfxAapPskBTERFj6SuBoFBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2f51b162a270ba75ce0b837e408920f1fdf2a77e492c74f7d15006e9188be268","last_reissued_at":"2026-05-18T00:36:46.801650Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:36:46.801650Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1708.07238","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:36:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p5XMWewq22LhvmUCMmiTGV2j669rHMTtA1i67+8fy+ngTypSngQ23EmDEiNa6bugfeM6e1EVikfY/lqmje+lDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T13:24:04.615540Z"},"content_sha256":"4ce90132026d1c097dc60d39b4bcef86413526901f9ba1b75c9e47428c665f88","schema_version":"1.0","event_id":"sha256:4ce90132026d1c097dc60d39b4bcef86413526901f9ba1b75c9e47428c665f88"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:F5I3CYVCOC5HLTQLQN7EBCJA6H","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Inaudible Voice Commands","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Liwei Song, Prateek Mittal","submitted_at":"2017-08-24T00:57:08Z","abstract_excerpt":"Voice assistants like Siri enable us to control IoT devices conveniently with voice commands, however, they also provide new attack opportunities for adversaries. Previous papers attack voice assistants with obfuscated voice commands by leveraging the gap between speech recognition system and human voice perception. The limitation is that these obfuscated commands are audible and thus conspicuous to device owners. In this paper, we propose a novel mechanism to directly attack the microphone used for sensing voice data with inaudible voice commands. We show that the adversary can exploit the mi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1708.07238","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:36:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1mS8zqGlRQoa8ZxuLyqs2h/U+sx4P13KeHevPJCJmndsoIuODvBo/SzUePeU5ZOHXRZw+0oYUH8RcHVe6KLRBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T13:24:04.616156Z"},"content_sha256":"fc6dccf27738a7b811d401f7d2116554b6273d499b07d772d06b1d70afdcd742","schema_version":"1.0","event_id":"sha256:fc6dccf27738a7b811d401f7d2116554b6273d499b07d772d06b1d70afdcd742"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/F5I3CYVCOC5HLTQLQN7EBCJA6H/bundle.json","state_url":"https://pith.science/pith/F5I3CYVCOC5HLTQLQN7EBCJA6H/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/F5I3CYVCOC5HLTQLQN7EBCJA6H/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T13:24:04Z","links":{"resolver":"https://pith.science/pith/F5I3CYVCOC5HLTQLQN7EBCJA6H","bundle":"https://pith.science/pith/F5I3CYVCOC5HLTQLQN7EBCJA6H/bundle.json","state":"https://pith.science/pith/F5I3CYVCOC5HLTQLQN7EBCJA6H/state.json","well_known_bundle":"https://pith.science/.well-known/pith/F5I3CYVCOC5HLTQLQN7EBCJA6H/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:F5I3CYVCOC5HLTQLQN7EBCJA6H","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ca9b2914366b2eb6ea8235a894ab2ef8185a158c6ffe2ae87309b7dc0d873e01","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-24T00:57:08Z","title_canon_sha256":"a71b3820561345fdd049ee26d5d7cbd153b954e2d079883b536fae6afffd975c"},"schema_version":"1.0","source":{"id":"1708.07238","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1708.07238","created_at":"2026-05-18T00:36:46Z"},{"alias_kind":"arxiv_version","alias_value":"1708.07238v1","created_at":"2026-05-18T00:36:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1708.07238","created_at":"2026-05-18T00:36:46Z"},{"alias_kind":"pith_short_12","alias_value":"F5I3CYVCOC5H","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_16","alias_value":"F5I3CYVCOC5HLTQL","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_8","alias_value":"F5I3CYVC","created_at":"2026-05-18T12:31:15Z"}],"graph_snapshots":[{"event_id":"sha256:fc6dccf27738a7b811d401f7d2116554b6273d499b07d772d06b1d70afdcd742","target":"graph","created_at":"2026-05-18T00:36:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Voice assistants like Siri enable us to control IoT devices conveniently with voice commands, however, they also provide new attack opportunities for adversaries. Previous papers attack voice assistants with obfuscated voice commands by leveraging the gap between speech recognition system and human voice perception. The limitation is that these obfuscated commands are audible and thus conspicuous to device owners. In this paper, we propose a novel mechanism to directly attack the microphone used for sensing voice data with inaudible voice commands. We show that the adversary can exploit the mi","authors_text":"Liwei Song, Prateek Mittal","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-24T00:57:08Z","title":"Inaudible Voice Commands"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1708.07238","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4ce90132026d1c097dc60d39b4bcef86413526901f9ba1b75c9e47428c665f88","target":"record","created_at":"2026-05-18T00:36:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ca9b2914366b2eb6ea8235a894ab2ef8185a158c6ffe2ae87309b7dc0d873e01","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-24T00:57:08Z","title_canon_sha256":"a71b3820561345fdd049ee26d5d7cbd153b954e2d079883b536fae6afffd975c"},"schema_version":"1.0","source":{"id":"1708.07238","kind":"arxiv","version":1}},"canonical_sha256":"2f51b162a270ba75ce0b837e408920f1fdf2a77e492c74f7d15006e9188be268","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2f51b162a270ba75ce0b837e408920f1fdf2a77e492c74f7d15006e9188be268","first_computed_at":"2026-05-18T00:36:46.801650Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:36:46.801650Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8vVhGI17gy6XmWhZ+gBNqxO01dqnuUoemZOLwzMeU1DgWVoDo0mNwBbmLxbHV/WtfxAapPskBTERFj6SuBoFBQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:36:46.802354Z","signed_message":"canonical_sha256_bytes"},"source_id":"1708.07238","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4ce90132026d1c097dc60d39b4bcef86413526901f9ba1b75c9e47428c665f88","sha256:fc6dccf27738a7b811d401f7d2116554b6273d499b07d772d06b1d70afdcd742"],"state_sha256":"8dbbb8f8eb6da420f2e21d0d0bc4625657b8ed8de43d928d3bc222aaf128ceff"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w1rthaB/AR1os85rqmY3//65gsUl0vAyviYSXRRExBUWzn08tOwyZiEdxfWI4f4OG9trxHk6d9QzSiKtMRWOCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T13:24:04.620102Z","bundle_sha256":"c00406be988010dee042a6781adb83aa65b2c7276587a8a4d1c117cf8d36b5e1"}}