{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:ICQY4BKKR7LY2SH5MECVWDIG5O","short_pith_number":"pith:ICQY4BKK","canonical_record":{"source":{"id":"2106.07428","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SD","submitted_at":"2021-06-14T13:42:49Z","cross_cats_sorted":["cs.LG","eess.AS"],"title_canon_sha256":"2c01c125331540689cb70da72293022e7d2a1d4584fac7f1c9eed74aa4097bfb","abstract_canon_sha256":"8a088b0ee8f4142fd9c383af621137def47cc7560a57352b80f579aa6cd17563"},"schema_version":"1.0"},"canonical_sha256":"40a18e054a8fd78d48fd61055b0d06ebb39968200f59a28061e2e7e37377ec84","source":{"kind":"arxiv","id":"2106.07428","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.07428","created_at":"2026-07-05T03:30:39Z"},{"alias_kind":"arxiv_version","alias_value":"2106.07428v4","created_at":"2026-07-05T03:30:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.07428","created_at":"2026-07-05T03:30:39Z"},{"alias_kind":"pith_short_12","alias_value":"ICQY4BKKR7LY","created_at":"2026-07-05T03:30:39Z"},{"alias_kind":"pith_short_16","alias_value":"ICQY4BKKR7LY2SH5","created_at":"2026-07-05T03:30:39Z"},{"alias_kind":"pith_short_8","alias_value":"ICQY4BKK","created_at":"2026-07-05T03:30:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:ICQY4BKKR7LY2SH5MECVWDIG5O","target":"record","payload":{"canonical_record":{"source":{"id":"2106.07428","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SD","submitted_at":"2021-06-14T13:42:49Z","cross_cats_sorted":["cs.LG","eess.AS"],"title_canon_sha256":"2c01c125331540689cb70da72293022e7d2a1d4584fac7f1c9eed74aa4097bfb","abstract_canon_sha256":"8a088b0ee8f4142fd9c383af621137def47cc7560a57352b80f579aa6cd17563"},"schema_version":"1.0"},"canonical_sha256":"40a18e054a8fd78d48fd61055b0d06ebb39968200f59a28061e2e7e37377ec84","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:30:39.882275Z","signature_b64":"w7+RioXtv5yhyrPGa5Q+GUtJQDN0RnFXWpUo75Dl+6G/38+CjmHXT7X3F9i1sIjePNvMhDkEujC1u7MdpIlfDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"40a18e054a8fd78d48fd61055b0d06ebb39968200f59a28061e2e7e37377ec84","last_reissued_at":"2026-07-05T03:30:39.881884Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:30:39.881884Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.07428","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:30:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0OmbSs7Hmg2VxUUid6xNbUdTa0K4uA2JbssLLxPdi0cwC9ANICjJUBp4vQwJTj8NBll2h0bZbBLkJ7LBXcinBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:04:07.471285Z"},"content_sha256":"50b508fd8c831640f698b43c623728fd5a7f14ad15f1779271b5ebce6ab9da8f","schema_version":"1.0","event_id":"sha256:50b508fd8c831640f698b43c623728fd5a7f14ad15f1779271b5ebce6ab9da8f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:ICQY4BKKR7LY2SH5MECVWDIG5O","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Audio Attacks and Defenses against AED Systems -- A Practical Study","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.LG","eess.AS"],"primary_cat":"cs.SD","authors_text":"Rodrigo dos Santos, Shirin Nilizadeh","submitted_at":"2021-06-14T13:42:49Z","abstract_excerpt":"In this paper, we evaluate deep learning-enabled AED systems against evasion attacks based on adversarial examples. We test the robustness of multiple security critical AED tasks, implemented as CNNs classifiers, as well as existing third-party Nest devices, manufactured by Google, which run their own black-box deep learning models. Our adversarial examples use audio perturbations made of white and background noises. Such disturbances are easy to create, to perform and to reproduce, and can be accessible to a large number of potential attackers, even non-technically savvy ones.\n  We show that "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.07428","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.07428/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:30:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S9elD7s/letrF4mJkY2O51/wVONg1YIVtZKtJm1j4gOOzTK6Wf12Aw68w6DH0dG0STsN8Zz9pEJ4nc27zvFxAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:04:07.471804Z"},"content_sha256":"dcc7def0bd62a5e1e655eef4f4ed1682a92df541bf7094407f62299f67ea0d90","schema_version":"1.0","event_id":"sha256:dcc7def0bd62a5e1e655eef4f4ed1682a92df541bf7094407f62299f67ea0d90"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ICQY4BKKR7LY2SH5MECVWDIG5O/bundle.json","state_url":"https://pith.science/pith/ICQY4BKKR7LY2SH5MECVWDIG5O/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ICQY4BKKR7LY2SH5MECVWDIG5O/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T17:04:07Z","links":{"resolver":"https://pith.science/pith/ICQY4BKKR7LY2SH5MECVWDIG5O","bundle":"https://pith.science/pith/ICQY4BKKR7LY2SH5MECVWDIG5O/bundle.json","state":"https://pith.science/pith/ICQY4BKKR7LY2SH5MECVWDIG5O/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ICQY4BKKR7LY2SH5MECVWDIG5O/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:ICQY4BKKR7LY2SH5MECVWDIG5O","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8a088b0ee8f4142fd9c383af621137def47cc7560a57352b80f579aa6cd17563","cross_cats_sorted":["cs.LG","eess.AS"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SD","submitted_at":"2021-06-14T13:42:49Z","title_canon_sha256":"2c01c125331540689cb70da72293022e7d2a1d4584fac7f1c9eed74aa4097bfb"},"schema_version":"1.0","source":{"id":"2106.07428","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.07428","created_at":"2026-07-05T03:30:39Z"},{"alias_kind":"arxiv_version","alias_value":"2106.07428v4","created_at":"2026-07-05T03:30:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.07428","created_at":"2026-07-05T03:30:39Z"},{"alias_kind":"pith_short_12","alias_value":"ICQY4BKKR7LY","created_at":"2026-07-05T03:30:39Z"},{"alias_kind":"pith_short_16","alias_value":"ICQY4BKKR7LY2SH5","created_at":"2026-07-05T03:30:39Z"},{"alias_kind":"pith_short_8","alias_value":"ICQY4BKK","created_at":"2026-07-05T03:30:39Z"}],"graph_snapshots":[{"event_id":"sha256:dcc7def0bd62a5e1e655eef4f4ed1682a92df541bf7094407f62299f67ea0d90","target":"graph","created_at":"2026-07-05T03:30:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.07428/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we evaluate deep learning-enabled AED systems against evasion attacks based on adversarial examples. We test the robustness of multiple security critical AED tasks, implemented as CNNs classifiers, as well as existing third-party Nest devices, manufactured by Google, which run their own black-box deep learning models. Our adversarial examples use audio perturbations made of white and background noises. Such disturbances are easy to create, to perform and to reproduce, and can be accessible to a large number of potential attackers, even non-technically savvy ones.\n  We show that ","authors_text":"Rodrigo dos Santos, Shirin Nilizadeh","cross_cats":["cs.LG","eess.AS"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SD","submitted_at":"2021-06-14T13:42:49Z","title":"Audio Attacks and Defenses against AED Systems -- A Practical Study"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.07428","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:50b508fd8c831640f698b43c623728fd5a7f14ad15f1779271b5ebce6ab9da8f","target":"record","created_at":"2026-07-05T03:30:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8a088b0ee8f4142fd9c383af621137def47cc7560a57352b80f579aa6cd17563","cross_cats_sorted":["cs.LG","eess.AS"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.SD","submitted_at":"2021-06-14T13:42:49Z","title_canon_sha256":"2c01c125331540689cb70da72293022e7d2a1d4584fac7f1c9eed74aa4097bfb"},"schema_version":"1.0","source":{"id":"2106.07428","kind":"arxiv","version":4}},"canonical_sha256":"40a18e054a8fd78d48fd61055b0d06ebb39968200f59a28061e2e7e37377ec84","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"40a18e054a8fd78d48fd61055b0d06ebb39968200f59a28061e2e7e37377ec84","first_computed_at":"2026-07-05T03:30:39.881884Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:30:39.881884Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"w7+RioXtv5yhyrPGa5Q+GUtJQDN0RnFXWpUo75Dl+6G/38+CjmHXT7X3F9i1sIjePNvMhDkEujC1u7MdpIlfDw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:30:39.882275Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.07428","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:50b508fd8c831640f698b43c623728fd5a7f14ad15f1779271b5ebce6ab9da8f","sha256:dcc7def0bd62a5e1e655eef4f4ed1682a92df541bf7094407f62299f67ea0d90"],"state_sha256":"673cc21bd1c5a38a008b162223f476a022060d9b47c2283ad889a0861dd98b64"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ko5UBm4V738adqXSwtCmJ+tXuKDQKU+7EsX4/wunUQ+kgE/QZ1dlTSZ+rg8vbMPJGzyzA0jimTBEk7n2bfIsCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T17:04:07.477223Z","bundle_sha256":"484f442ca0b0728526577f1d7d4cf070729eb95a89d73c81c3f3e5f858b98d92"}}