{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:OFOP3N2NGBCKH77CGYIXJBRB4T","short_pith_number":"pith:OFOP3N2N","canonical_record":{"source":{"id":"2405.08317","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-05-14T04:51:23Z","cross_cats_sorted":["cs.SD","eess.AS"],"title_canon_sha256":"b3baa2d5eec9bb9fd93a4bfe8cff94c35331c22206cf2ca68eeb61f0cfad1cb7","abstract_canon_sha256":"d0e064a1913dd5ea754f04f2f6a4581e6e180d3fedfa8daab7222201083f48e6"},"schema_version":"1.0"},"canonical_sha256":"715cfdb74d3044a3ffe23611748621e4c29c29b5deed328b4bc7a7223e11bc41","source":{"kind":"arxiv","id":"2405.08317","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.08317","created_at":"2026-07-05T08:18:58Z"},{"alias_kind":"arxiv_version","alias_value":"2405.08317v1","created_at":"2026-07-05T08:18:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.08317","created_at":"2026-07-05T08:18:58Z"},{"alias_kind":"pith_short_12","alias_value":"OFOP3N2NGBCK","created_at":"2026-07-05T08:18:58Z"},{"alias_kind":"pith_short_16","alias_value":"OFOP3N2NGBCKH77C","created_at":"2026-07-05T08:18:58Z"},{"alias_kind":"pith_short_8","alias_value":"OFOP3N2N","created_at":"2026-07-05T08:18:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:OFOP3N2NGBCKH77CGYIXJBRB4T","target":"record","payload":{"canonical_record":{"source":{"id":"2405.08317","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-05-14T04:51:23Z","cross_cats_sorted":["cs.SD","eess.AS"],"title_canon_sha256":"b3baa2d5eec9bb9fd93a4bfe8cff94c35331c22206cf2ca68eeb61f0cfad1cb7","abstract_canon_sha256":"d0e064a1913dd5ea754f04f2f6a4581e6e180d3fedfa8daab7222201083f48e6"},"schema_version":"1.0"},"canonical_sha256":"715cfdb74d3044a3ffe23611748621e4c29c29b5deed328b4bc7a7223e11bc41","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:18:58.736290Z","signature_b64":"TmfArJlH8hThjmSDsbSPKuXi9mwed5IcrVrroxjVXebnbUYY8/obPgr1JXcbAE6JZ2D6PDBnwBlCOrIn1uVLBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"715cfdb74d3044a3ffe23611748621e4c29c29b5deed328b4bc7a7223e11bc41","last_reissued_at":"2026-07-05T08:18:58.735795Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:18:58.735795Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.08317","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:18:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WsImcfBmRpKwTXUXBd2cMzew9bqMF1PX69LbgTdH5PS/ZuOL8A03VOiktnDLPJsOdSvp8oGUJf4x4Dg9efPaCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T11:48:42.916536Z"},"content_sha256":"9162d7f4ead996eb4db099fcf9da4a08cf3499e8202410f2fb2800731bbc4acb","schema_version":"1.0","event_id":"sha256:9162d7f4ead996eb4db099fcf9da4a08cf3499e8202410f2fb2800731bbc4acb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:OFOP3N2NGBCKH77CGYIXJBRB4T","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SpeechGuard: Exploring the Adversarial Robustness of Multimodal Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SD","eess.AS"],"primary_cat":"cs.CL","authors_text":"Anshu Bhatia, Daniel Garcia-Romero, Goeric Huybrechts, Karel Mundnich, Katrin Kirchhoff, Kyu J Han, Nilaksh Das, Raghuveer Peri, Sai Muralidhar Jayanthi, Saket Dingliwal, Srikanth Ronanki, Srikanth Vishnubhotla, Sundararajan Srinivasan, Zejiang Hou","submitted_at":"2024-05-14T04:51:23Z","abstract_excerpt":"Integrated Speech and Large Language Models (SLMs) that can follow speech instructions and generate relevant text responses have gained popularity lately. However, the safety and robustness of these models remains largely unclear. In this work, we investigate the potential vulnerabilities of such instruction-following speech-language models to adversarial attacks and jailbreaking. Specifically, we design algorithms that can generate adversarial examples to jailbreak SLMs in both white-box and black-box attack settings without human involvement. Additionally, we propose countermeasures to thwar"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.08317","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.08317/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:18:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gF4n8r7BrFzUPzHJJR3tWzoNojhRA+Gak1sFEAJayUDPmOF4Q/8cLChnLOdRKHuLtXGWF4K2EQvIBrw6jaADDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T11:48:42.916908Z"},"content_sha256":"001b8641b1016f50b7899e45d25d25c5ba731b1756dcf1d6270fca8c0cce166e","schema_version":"1.0","event_id":"sha256:001b8641b1016f50b7899e45d25d25c5ba731b1756dcf1d6270fca8c0cce166e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OFOP3N2NGBCKH77CGYIXJBRB4T/bundle.json","state_url":"https://pith.science/pith/OFOP3N2NGBCKH77CGYIXJBRB4T/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OFOP3N2NGBCKH77CGYIXJBRB4T/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-13T11:48:42Z","links":{"resolver":"https://pith.science/pith/OFOP3N2NGBCKH77CGYIXJBRB4T","bundle":"https://pith.science/pith/OFOP3N2NGBCKH77CGYIXJBRB4T/bundle.json","state":"https://pith.science/pith/OFOP3N2NGBCKH77CGYIXJBRB4T/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OFOP3N2NGBCKH77CGYIXJBRB4T/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:OFOP3N2NGBCKH77CGYIXJBRB4T","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d0e064a1913dd5ea754f04f2f6a4581e6e180d3fedfa8daab7222201083f48e6","cross_cats_sorted":["cs.SD","eess.AS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-05-14T04:51:23Z","title_canon_sha256":"b3baa2d5eec9bb9fd93a4bfe8cff94c35331c22206cf2ca68eeb61f0cfad1cb7"},"schema_version":"1.0","source":{"id":"2405.08317","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.08317","created_at":"2026-07-05T08:18:58Z"},{"alias_kind":"arxiv_version","alias_value":"2405.08317v1","created_at":"2026-07-05T08:18:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.08317","created_at":"2026-07-05T08:18:58Z"},{"alias_kind":"pith_short_12","alias_value":"OFOP3N2NGBCK","created_at":"2026-07-05T08:18:58Z"},{"alias_kind":"pith_short_16","alias_value":"OFOP3N2NGBCKH77C","created_at":"2026-07-05T08:18:58Z"},{"alias_kind":"pith_short_8","alias_value":"OFOP3N2N","created_at":"2026-07-05T08:18:58Z"}],"graph_snapshots":[{"event_id":"sha256:001b8641b1016f50b7899e45d25d25c5ba731b1756dcf1d6270fca8c0cce166e","target":"graph","created_at":"2026-07-05T08:18:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.08317/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Integrated Speech and Large Language Models (SLMs) that can follow speech instructions and generate relevant text responses have gained popularity lately. However, the safety and robustness of these models remains largely unclear. In this work, we investigate the potential vulnerabilities of such instruction-following speech-language models to adversarial attacks and jailbreaking. Specifically, we design algorithms that can generate adversarial examples to jailbreak SLMs in both white-box and black-box attack settings without human involvement. Additionally, we propose countermeasures to thwar","authors_text":"Anshu Bhatia, Daniel Garcia-Romero, Goeric Huybrechts, Karel Mundnich, Katrin Kirchhoff, Kyu J Han, Nilaksh Das, Raghuveer Peri, Sai Muralidhar Jayanthi, Saket Dingliwal, Srikanth Ronanki, Srikanth Vishnubhotla, Sundararajan Srinivasan, Zejiang Hou","cross_cats":["cs.SD","eess.AS"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-05-14T04:51:23Z","title":"SpeechGuard: Exploring the Adversarial Robustness of Multimodal Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.08317","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9162d7f4ead996eb4db099fcf9da4a08cf3499e8202410f2fb2800731bbc4acb","target":"record","created_at":"2026-07-05T08:18:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d0e064a1913dd5ea754f04f2f6a4581e6e180d3fedfa8daab7222201083f48e6","cross_cats_sorted":["cs.SD","eess.AS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-05-14T04:51:23Z","title_canon_sha256":"b3baa2d5eec9bb9fd93a4bfe8cff94c35331c22206cf2ca68eeb61f0cfad1cb7"},"schema_version":"1.0","source":{"id":"2405.08317","kind":"arxiv","version":1}},"canonical_sha256":"715cfdb74d3044a3ffe23611748621e4c29c29b5deed328b4bc7a7223e11bc41","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"715cfdb74d3044a3ffe23611748621e4c29c29b5deed328b4bc7a7223e11bc41","first_computed_at":"2026-07-05T08:18:58.735795Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:18:58.735795Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TmfArJlH8hThjmSDsbSPKuXi9mwed5IcrVrroxjVXebnbUYY8/obPgr1JXcbAE6JZ2D6PDBnwBlCOrIn1uVLBA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:18:58.736290Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.08317","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9162d7f4ead996eb4db099fcf9da4a08cf3499e8202410f2fb2800731bbc4acb","sha256:001b8641b1016f50b7899e45d25d25c5ba731b1756dcf1d6270fca8c0cce166e"],"state_sha256":"5099fb306a22a9498ed3d36e957eb1385ec815006238bdaeacfa023a5de94217"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4Bd2o7wzN0lP7bSWeiCBbZxmIkyC/ZBYS/hm2iYvz1m/J/J+QC3HEy/EXwub8iAmxaimErZpgpOuLes7heaGBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-13T11:48:42.919018Z","bundle_sha256":"3e66f60e6d5f0ebde28b8f7bbc928638fe2ddccca84723e9321169d57ab37e99"}}