{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:LYF54WMEB3C5R7TKWPHYOU4CFQ","short_pith_number":"pith:LYF54WME","canonical_record":{"source":{"id":"1908.03173","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-08T17:07:30Z","cross_cats_sorted":["cs.SD","eess.AS","stat.ML"],"title_canon_sha256":"05940eba6a05686fc1a95f1be46622a9fd5972118e63a7cd78a92acfab387435","abstract_canon_sha256":"8d89c3496181f1b4b49b3296957ab6caa5c96a8c82c0f394fcc81343633397f8"},"schema_version":"1.0"},"canonical_sha256":"5e0bde59840ec5d8fe6ab3cf8753822c2799b3e5f3acda1fe720b3c7b4947228","source":{"kind":"arxiv","id":"1908.03173","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.03173","created_at":"2026-07-05T01:51:59Z"},{"alias_kind":"arxiv_version","alias_value":"1908.03173v5","created_at":"2026-07-05T01:51:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.03173","created_at":"2026-07-05T01:51:59Z"},{"alias_kind":"pith_short_12","alias_value":"LYF54WMEB3C5","created_at":"2026-07-05T01:51:59Z"},{"alias_kind":"pith_short_16","alias_value":"LYF54WMEB3C5R7TK","created_at":"2026-07-05T01:51:59Z"},{"alias_kind":"pith_short_8","alias_value":"LYF54WME","created_at":"2026-07-05T01:51:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:LYF54WMEB3C5R7TKWPHYOU4CFQ","target":"record","payload":{"canonical_record":{"source":{"id":"1908.03173","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-08T17:07:30Z","cross_cats_sorted":["cs.SD","eess.AS","stat.ML"],"title_canon_sha256":"05940eba6a05686fc1a95f1be46622a9fd5972118e63a7cd78a92acfab387435","abstract_canon_sha256":"8d89c3496181f1b4b49b3296957ab6caa5c96a8c82c0f394fcc81343633397f8"},"schema_version":"1.0"},"canonical_sha256":"5e0bde59840ec5d8fe6ab3cf8753822c2799b3e5f3acda1fe720b3c7b4947228","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:51:59.027190Z","signature_b64":"SJI1UPqAmNJeqq4USKTfF/wwjXg8LEqNlQGQ8iqhAEjoH1X2ekY//ACfFmANGVNe0SDd4Ywfc8frCuByRDhvAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5e0bde59840ec5d8fe6ab3cf8753822c2799b3e5f3acda1fe720b3c7b4947228","last_reissued_at":"2026-07-05T01:51:59.026764Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:51:59.026764Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.03173","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:51:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5ghw/X3WMLZxJUBKA8xLcNDt+5X5QEvzoJDnkYBx68S0EOdfarQIURq0EksJ1YlyUCIEJkYLYLhwQq/eKb/iCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T15:50:20.924352Z"},"content_sha256":"e14ad081a34588bdb802169e3190a62014c88c82649f3de996165390d9e02ffc","schema_version":"1.0","event_id":"sha256:e14ad081a34588bdb802169e3190a62014c88c82649f3de996165390d9e02ffc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:LYF54WMEB3C5R7TKWPHYOU4CFQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Universal Adversarial Audio Perturbations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SD","eess.AS","stat.ML"],"primary_cat":"cs.LG","authors_text":"Alessandro L. Koerich, Ismail Ben Ayed, Jerome Rony, Luiz G. Hafemann, Patrick Cardinal, Sajjad Abdoli","submitted_at":"2019-08-08T17:07:30Z","abstract_excerpt":"We demonstrate the existence of universal adversarial perturbations, which can fool a family of audio classification architectures, for both targeted and untargeted attack scenarios. We propose two methods for finding such perturbations. The first method is based on an iterative, greedy approach that is well-known in computer vision: it aggregates small perturbations to the input so as to push it to the decision boundary. The second method, which is the main contribution of this work, is a novel penalty formulation, which finds targeted and untargeted universal adversarial perturbations. Diffe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.03173","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.03173/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:51:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"omFtMO1IckSscGCtavXw7JqYF8LexegW/bP0CfyfIA/BERXi5BAu4/E0FIF0z0srVN5HhhQdweQsoXWBnf/FCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T15:50:20.924851Z"},"content_sha256":"9b99e99797b84e498827e02da32f50afc6afdc0e04af495b462551d0e4906e6d","schema_version":"1.0","event_id":"sha256:9b99e99797b84e498827e02da32f50afc6afdc0e04af495b462551d0e4906e6d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LYF54WMEB3C5R7TKWPHYOU4CFQ/bundle.json","state_url":"https://pith.science/pith/LYF54WMEB3C5R7TKWPHYOU4CFQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LYF54WMEB3C5R7TKWPHYOU4CFQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T15:50:20Z","links":{"resolver":"https://pith.science/pith/LYF54WMEB3C5R7TKWPHYOU4CFQ","bundle":"https://pith.science/pith/LYF54WMEB3C5R7TKWPHYOU4CFQ/bundle.json","state":"https://pith.science/pith/LYF54WMEB3C5R7TKWPHYOU4CFQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LYF54WMEB3C5R7TKWPHYOU4CFQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:LYF54WMEB3C5R7TKWPHYOU4CFQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8d89c3496181f1b4b49b3296957ab6caa5c96a8c82c0f394fcc81343633397f8","cross_cats_sorted":["cs.SD","eess.AS","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-08T17:07:30Z","title_canon_sha256":"05940eba6a05686fc1a95f1be46622a9fd5972118e63a7cd78a92acfab387435"},"schema_version":"1.0","source":{"id":"1908.03173","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.03173","created_at":"2026-07-05T01:51:59Z"},{"alias_kind":"arxiv_version","alias_value":"1908.03173v5","created_at":"2026-07-05T01:51:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.03173","created_at":"2026-07-05T01:51:59Z"},{"alias_kind":"pith_short_12","alias_value":"LYF54WMEB3C5","created_at":"2026-07-05T01:51:59Z"},{"alias_kind":"pith_short_16","alias_value":"LYF54WMEB3C5R7TK","created_at":"2026-07-05T01:51:59Z"},{"alias_kind":"pith_short_8","alias_value":"LYF54WME","created_at":"2026-07-05T01:51:59Z"}],"graph_snapshots":[{"event_id":"sha256:9b99e99797b84e498827e02da32f50afc6afdc0e04af495b462551d0e4906e6d","target":"graph","created_at":"2026-07-05T01:51:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.03173/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We demonstrate the existence of universal adversarial perturbations, which can fool a family of audio classification architectures, for both targeted and untargeted attack scenarios. We propose two methods for finding such perturbations. The first method is based on an iterative, greedy approach that is well-known in computer vision: it aggregates small perturbations to the input so as to push it to the decision boundary. The second method, which is the main contribution of this work, is a novel penalty formulation, which finds targeted and untargeted universal adversarial perturbations. Diffe","authors_text":"Alessandro L. Koerich, Ismail Ben Ayed, Jerome Rony, Luiz G. Hafemann, Patrick Cardinal, Sajjad Abdoli","cross_cats":["cs.SD","eess.AS","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-08T17:07:30Z","title":"Universal Adversarial Audio Perturbations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.03173","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e14ad081a34588bdb802169e3190a62014c88c82649f3de996165390d9e02ffc","target":"record","created_at":"2026-07-05T01:51:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8d89c3496181f1b4b49b3296957ab6caa5c96a8c82c0f394fcc81343633397f8","cross_cats_sorted":["cs.SD","eess.AS","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-08-08T17:07:30Z","title_canon_sha256":"05940eba6a05686fc1a95f1be46622a9fd5972118e63a7cd78a92acfab387435"},"schema_version":"1.0","source":{"id":"1908.03173","kind":"arxiv","version":5}},"canonical_sha256":"5e0bde59840ec5d8fe6ab3cf8753822c2799b3e5f3acda1fe720b3c7b4947228","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5e0bde59840ec5d8fe6ab3cf8753822c2799b3e5f3acda1fe720b3c7b4947228","first_computed_at":"2026-07-05T01:51:59.026764Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:51:59.026764Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SJI1UPqAmNJeqq4USKTfF/wwjXg8LEqNlQGQ8iqhAEjoH1X2ekY//ACfFmANGVNe0SDd4Ywfc8frCuByRDhvAw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:51:59.027190Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.03173","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e14ad081a34588bdb802169e3190a62014c88c82649f3de996165390d9e02ffc","sha256:9b99e99797b84e498827e02da32f50afc6afdc0e04af495b462551d0e4906e6d"],"state_sha256":"72465a47b7d0ee1eeb554b8930604b96c71fe7a0487bdaaf789ec6954dc0ae39"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4irDBi/4KQCiswa4k/7c+tC1w/4qk93ULDcEI3YM5RaWxHc+w6yiHcrYQPCoqRS1DCswhSUSQXMLl53KESgfAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T15:50:20.928662Z","bundle_sha256":"20ad720b791f1f85273eec15306b476b0ff98329d224856febf363c94e904ec9"}}