{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:JEPV43OSJOKXBJVLHXES52VKAF","short_pith_number":"pith:JEPV43OS","canonical_record":{"source":{"id":"2408.01178","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-02T11:00:12Z","cross_cats_sorted":[],"title_canon_sha256":"4f4c32e66207885300ef6722f8b2770eaf33eafd54a42cdca8a8fe5c1f2ca198","abstract_canon_sha256":"f5f5bfb3080f16d47ddb315fd768c691e7f010a2fda048083f90accbb35cacb1"},"schema_version":"1.0"},"canonical_sha256":"491f5e6dd24b9570a6ab3dc92eeaaa0156b42b94d796a3ca5c77471acb625511","source":{"kind":"arxiv","id":"2408.01178","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.01178","created_at":"2026-07-05T09:08:28Z"},{"alias_kind":"arxiv_version","alias_value":"2408.01178v2","created_at":"2026-07-05T09:08:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.01178","created_at":"2026-07-05T09:08:28Z"},{"alias_kind":"pith_short_12","alias_value":"JEPV43OSJOKX","created_at":"2026-07-05T09:08:28Z"},{"alias_kind":"pith_short_16","alias_value":"JEPV43OSJOKXBJVL","created_at":"2026-07-05T09:08:28Z"},{"alias_kind":"pith_short_8","alias_value":"JEPV43OS","created_at":"2026-07-05T09:08:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:JEPV43OSJOKXBJVLHXES52VKAF","target":"record","payload":{"canonical_record":{"source":{"id":"2408.01178","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-02T11:00:12Z","cross_cats_sorted":[],"title_canon_sha256":"4f4c32e66207885300ef6722f8b2770eaf33eafd54a42cdca8a8fe5c1f2ca198","abstract_canon_sha256":"f5f5bfb3080f16d47ddb315fd768c691e7f010a2fda048083f90accbb35cacb1"},"schema_version":"1.0"},"canonical_sha256":"491f5e6dd24b9570a6ab3dc92eeaaa0156b42b94d796a3ca5c77471acb625511","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:08:28.005516Z","signature_b64":"zTZKC0OcrmUHShi1ZVkZ/tMpx+my/NrISv3hRUwliLaHBY/yq7t5j/zKIvItpb/UQgLx8laJtLG089p31SPFCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"491f5e6dd24b9570a6ab3dc92eeaaa0156b42b94d796a3ca5c77471acb625511","last_reissued_at":"2026-07-05T09:08:28.004963Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:08:28.004963Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.01178","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:08:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pwLLrl5f8O/ls8aemMIbQ9QYzrghm6KXXpZpq6VvpT/JJhknsPJVikamMNY6ZUEFZZi0ueBUej07ca7ptPhqBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T18:38:59.950189Z"},"content_sha256":"c49e3018f43afb792da1cb6c16d81b109bbc0be5f4c3260a9fd223bf9a0f0360","schema_version":"1.0","event_id":"sha256:c49e3018f43afb792da1cb6c16d81b109bbc0be5f4c3260a9fd223bf9a0f0360"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:JEPV43OSJOKXBJVLHXES52VKAF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"EmoBack: Backdoor Attacks Against Speaker Identification Using Emotional Prosody","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Coen Schoof, Mauro Conti, Stefanos Koffas, Stjepan Picek","submitted_at":"2024-08-02T11:00:12Z","abstract_excerpt":"Speaker identification (SI) determines a speaker's identity based on their spoken utterances. Previous work indicates that SI deep neural networks (DNNs) are vulnerable to backdoor attacks. Backdoor attacks involve embedding hidden triggers in DNNs' training data, causing the DNN to produce incorrect output when these triggers are present during inference. This is the first work that explores SI DNNs' vulnerability to backdoor attacks using speakers' emotional prosody, resulting in dynamic, inconspicuous triggers. We conducted a parameter study using three different datasets and DNN architectu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.01178","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.01178/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:08:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Jfs1MXUcj3/UDRBRQIhonqDu6hVZipa9JtqqiKJViSt2iR5YtLVMF7QCs4nZ8TJkbfXUtogHz8P158WuZcvGAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T18:38:59.950575Z"},"content_sha256":"0b9c54e3e6ef89735e89d1d2118931cbaffa206295252d263a1ca13bfc90f951","schema_version":"1.0","event_id":"sha256:0b9c54e3e6ef89735e89d1d2118931cbaffa206295252d263a1ca13bfc90f951"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JEPV43OSJOKXBJVLHXES52VKAF/bundle.json","state_url":"https://pith.science/pith/JEPV43OSJOKXBJVLHXES52VKAF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JEPV43OSJOKXBJVLHXES52VKAF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T18:38:59Z","links":{"resolver":"https://pith.science/pith/JEPV43OSJOKXBJVLHXES52VKAF","bundle":"https://pith.science/pith/JEPV43OSJOKXBJVLHXES52VKAF/bundle.json","state":"https://pith.science/pith/JEPV43OSJOKXBJVLHXES52VKAF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JEPV43OSJOKXBJVLHXES52VKAF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:JEPV43OSJOKXBJVLHXES52VKAF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f5f5bfb3080f16d47ddb315fd768c691e7f010a2fda048083f90accbb35cacb1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-02T11:00:12Z","title_canon_sha256":"4f4c32e66207885300ef6722f8b2770eaf33eafd54a42cdca8a8fe5c1f2ca198"},"schema_version":"1.0","source":{"id":"2408.01178","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.01178","created_at":"2026-07-05T09:08:28Z"},{"alias_kind":"arxiv_version","alias_value":"2408.01178v2","created_at":"2026-07-05T09:08:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.01178","created_at":"2026-07-05T09:08:28Z"},{"alias_kind":"pith_short_12","alias_value":"JEPV43OSJOKX","created_at":"2026-07-05T09:08:28Z"},{"alias_kind":"pith_short_16","alias_value":"JEPV43OSJOKXBJVL","created_at":"2026-07-05T09:08:28Z"},{"alias_kind":"pith_short_8","alias_value":"JEPV43OS","created_at":"2026-07-05T09:08:28Z"}],"graph_snapshots":[{"event_id":"sha256:0b9c54e3e6ef89735e89d1d2118931cbaffa206295252d263a1ca13bfc90f951","target":"graph","created_at":"2026-07-05T09:08:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.01178/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Speaker identification (SI) determines a speaker's identity based on their spoken utterances. Previous work indicates that SI deep neural networks (DNNs) are vulnerable to backdoor attacks. Backdoor attacks involve embedding hidden triggers in DNNs' training data, causing the DNN to produce incorrect output when these triggers are present during inference. This is the first work that explores SI DNNs' vulnerability to backdoor attacks using speakers' emotional prosody, resulting in dynamic, inconspicuous triggers. We conducted a parameter study using three different datasets and DNN architectu","authors_text":"Coen Schoof, Mauro Conti, Stefanos Koffas, Stjepan Picek","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-02T11:00:12Z","title":"EmoBack: Backdoor Attacks Against Speaker Identification Using Emotional Prosody"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.01178","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c49e3018f43afb792da1cb6c16d81b109bbc0be5f4c3260a9fd223bf9a0f0360","target":"record","created_at":"2026-07-05T09:08:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f5f5bfb3080f16d47ddb315fd768c691e7f010a2fda048083f90accbb35cacb1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-02T11:00:12Z","title_canon_sha256":"4f4c32e66207885300ef6722f8b2770eaf33eafd54a42cdca8a8fe5c1f2ca198"},"schema_version":"1.0","source":{"id":"2408.01178","kind":"arxiv","version":2}},"canonical_sha256":"491f5e6dd24b9570a6ab3dc92eeaaa0156b42b94d796a3ca5c77471acb625511","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"491f5e6dd24b9570a6ab3dc92eeaaa0156b42b94d796a3ca5c77471acb625511","first_computed_at":"2026-07-05T09:08:28.004963Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:08:28.004963Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zTZKC0OcrmUHShi1ZVkZ/tMpx+my/NrISv3hRUwliLaHBY/yq7t5j/zKIvItpb/UQgLx8laJtLG089p31SPFCg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:08:28.005516Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.01178","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c49e3018f43afb792da1cb6c16d81b109bbc0be5f4c3260a9fd223bf9a0f0360","sha256:0b9c54e3e6ef89735e89d1d2118931cbaffa206295252d263a1ca13bfc90f951"],"state_sha256":"518495e14e40108df2f5c82d38aee96615412493bca4beb330a4b2c098c9d9d8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m90hfNH6pxJuIfAITaFg6A5A+wYz21Hez78qsKLFG1ECpO5MAVZGVjiqZ92RyESjvcHp6wziireCqJsh2B89AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T18:38:59.952514Z","bundle_sha256":"b7a0541dee75190250215f0c76a5cb15cfab0fee1a2f5e27a8381428135b8ab1"}}