{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:HTP3VQCME3HD56CCFSCHJCCYGF","short_pith_number":"pith:HTP3VQCM","canonical_record":{"source":{"id":"2103.17122","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2021-03-31T14:44:58Z","cross_cats_sorted":["cs.CR","cs.SD"],"title_canon_sha256":"50d9504ffe523ba2715b444473ad63f776190c5d69f14b2deb85a51092acb11d","abstract_canon_sha256":"f5c23778f0f18bbb4ddd132b09840900b38531704406bf26e078190ea1d20a15"},"schema_version":"1.0"},"canonical_sha256":"3cdfbac04c26ce3ef8422c84748858316286e0ceca75323237acb9873333523e","source":{"kind":"arxiv","id":"2103.17122","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.17122","created_at":"2026-07-05T09:26:07Z"},{"alias_kind":"arxiv_version","alias_value":"2103.17122v1","created_at":"2026-07-05T09:26:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.17122","created_at":"2026-07-05T09:26:07Z"},{"alias_kind":"pith_short_12","alias_value":"HTP3VQCME3HD","created_at":"2026-07-05T09:26:07Z"},{"alias_kind":"pith_short_16","alias_value":"HTP3VQCME3HD56CC","created_at":"2026-07-05T09:26:07Z"},{"alias_kind":"pith_short_8","alias_value":"HTP3VQCM","created_at":"2026-07-05T09:26:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:HTP3VQCME3HD56CCFSCHJCCYGF","target":"record","payload":{"canonical_record":{"source":{"id":"2103.17122","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2021-03-31T14:44:58Z","cross_cats_sorted":["cs.CR","cs.SD"],"title_canon_sha256":"50d9504ffe523ba2715b444473ad63f776190c5d69f14b2deb85a51092acb11d","abstract_canon_sha256":"f5c23778f0f18bbb4ddd132b09840900b38531704406bf26e078190ea1d20a15"},"schema_version":"1.0"},"canonical_sha256":"3cdfbac04c26ce3ef8422c84748858316286e0ceca75323237acb9873333523e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:26:07.291867Z","signature_b64":"PsoUlf+bgYDmn1pfQU0kDl1FoKbpxu4SubupiSMfBol4kiWOBAWoaopHQLrBN+AGgWHfacrJ75Yx5zN29bZTAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3cdfbac04c26ce3ef8422c84748858316286e0ceca75323237acb9873333523e","last_reissued_at":"2026-07-05T09:26:07.291285Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:26:07.291285Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2103.17122","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:26:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rISuRTTBxGZkz5D2aOohEp4v/wbjCKP5CrDMAFbOXGryPGxtwVf6D3BuoQNLmXFc/oKbPdpXzpDM5MYZe/aIDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T04:05:26.440205Z"},"content_sha256":"c624bde1c5d5d60dc6214da77f6feb852d775d618fcade07a26941f333372584","schema_version":"1.0","event_id":"sha256:c624bde1c5d5d60dc6214da77f6feb852d775d618fcade07a26941f333372584"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:HTP3VQCME3HD56CCFSCHJCCYGF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Attacks and Defenses for Speech Recognition Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.SD"],"primary_cat":"eess.AS","authors_text":"Jan Trmal, Jesus Villalba, Najim Dehak, Piotr \\.Zelasko, Sanjeev Khudanpur, Sonal Joshi, Yiwen Shao","submitted_at":"2021-03-31T14:44:58Z","abstract_excerpt":"The ubiquitous presence of machine learning systems in our lives necessitates research into their vulnerabilities and appropriate countermeasures. In particular, we investigate the effectiveness of adversarial attacks and defenses against automatic speech recognition (ASR) systems. We select two ASR models - a thoroughly studied DeepSpeech model and a more recent Espresso framework Transformer encoder-decoder model. We investigate two threat models: a denial-of-service scenario where fast gradient-sign method (FGSM) or weak projected gradient descent (PGD) attacks are used to degrade the model"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.17122","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.17122/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:26:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8qXh6kFuNn7GA3gfwdS4JvyTb2+aTIPBJ2+OUR57B4P3QJPkXfeIZomYcoBboez8wXdhaSEZK2+FfPKo8nVCAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T04:05:26.440624Z"},"content_sha256":"871b5864b12d70da3bb63b03620f230504503339685bcdfeb8b3ad68f8941403","schema_version":"1.0","event_id":"sha256:871b5864b12d70da3bb63b03620f230504503339685bcdfeb8b3ad68f8941403"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HTP3VQCME3HD56CCFSCHJCCYGF/bundle.json","state_url":"https://pith.science/pith/HTP3VQCME3HD56CCFSCHJCCYGF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HTP3VQCME3HD56CCFSCHJCCYGF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-09T04:05:26Z","links":{"resolver":"https://pith.science/pith/HTP3VQCME3HD56CCFSCHJCCYGF","bundle":"https://pith.science/pith/HTP3VQCME3HD56CCFSCHJCCYGF/bundle.json","state":"https://pith.science/pith/HTP3VQCME3HD56CCFSCHJCCYGF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HTP3VQCME3HD56CCFSCHJCCYGF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:HTP3VQCME3HD56CCFSCHJCCYGF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f5c23778f0f18bbb4ddd132b09840900b38531704406bf26e078190ea1d20a15","cross_cats_sorted":["cs.CR","cs.SD"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2021-03-31T14:44:58Z","title_canon_sha256":"50d9504ffe523ba2715b444473ad63f776190c5d69f14b2deb85a51092acb11d"},"schema_version":"1.0","source":{"id":"2103.17122","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.17122","created_at":"2026-07-05T09:26:07Z"},{"alias_kind":"arxiv_version","alias_value":"2103.17122v1","created_at":"2026-07-05T09:26:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.17122","created_at":"2026-07-05T09:26:07Z"},{"alias_kind":"pith_short_12","alias_value":"HTP3VQCME3HD","created_at":"2026-07-05T09:26:07Z"},{"alias_kind":"pith_short_16","alias_value":"HTP3VQCME3HD56CC","created_at":"2026-07-05T09:26:07Z"},{"alias_kind":"pith_short_8","alias_value":"HTP3VQCM","created_at":"2026-07-05T09:26:07Z"}],"graph_snapshots":[{"event_id":"sha256:871b5864b12d70da3bb63b03620f230504503339685bcdfeb8b3ad68f8941403","target":"graph","created_at":"2026-07-05T09:26:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.17122/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The ubiquitous presence of machine learning systems in our lives necessitates research into their vulnerabilities and appropriate countermeasures. In particular, we investigate the effectiveness of adversarial attacks and defenses against automatic speech recognition (ASR) systems. We select two ASR models - a thoroughly studied DeepSpeech model and a more recent Espresso framework Transformer encoder-decoder model. We investigate two threat models: a denial-of-service scenario where fast gradient-sign method (FGSM) or weak projected gradient descent (PGD) attacks are used to degrade the model","authors_text":"Jan Trmal, Jesus Villalba, Najim Dehak, Piotr \\.Zelasko, Sanjeev Khudanpur, Sonal Joshi, Yiwen Shao","cross_cats":["cs.CR","cs.SD"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2021-03-31T14:44:58Z","title":"Adversarial Attacks and Defenses for Speech Recognition Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.17122","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c624bde1c5d5d60dc6214da77f6feb852d775d618fcade07a26941f333372584","target":"record","created_at":"2026-07-05T09:26:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f5c23778f0f18bbb4ddd132b09840900b38531704406bf26e078190ea1d20a15","cross_cats_sorted":["cs.CR","cs.SD"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2021-03-31T14:44:58Z","title_canon_sha256":"50d9504ffe523ba2715b444473ad63f776190c5d69f14b2deb85a51092acb11d"},"schema_version":"1.0","source":{"id":"2103.17122","kind":"arxiv","version":1}},"canonical_sha256":"3cdfbac04c26ce3ef8422c84748858316286e0ceca75323237acb9873333523e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3cdfbac04c26ce3ef8422c84748858316286e0ceca75323237acb9873333523e","first_computed_at":"2026-07-05T09:26:07.291285Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:26:07.291285Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PsoUlf+bgYDmn1pfQU0kDl1FoKbpxu4SubupiSMfBol4kiWOBAWoaopHQLrBN+AGgWHfacrJ75Yx5zN29bZTAg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:26:07.291867Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.17122","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c624bde1c5d5d60dc6214da77f6feb852d775d618fcade07a26941f333372584","sha256:871b5864b12d70da3bb63b03620f230504503339685bcdfeb8b3ad68f8941403"],"state_sha256":"c81b5a921d7edcd1f43cff09138f0a36e3ca84dbf0b00ea27b2314e9d70c0158"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WBtdn0jJ12kipBcTlLFlt7igEcQLIhGD30mu2cSaYNx815EA0YE6Ye7joiJ8kq+6UeXpiIgq9c65dOl+qn6JAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-09T04:05:26.443631Z","bundle_sha256":"1bd66685269d2afad1f8e5ff4e8ed63b5c3dfbe879a168466c0a8ad237b57171"}}