{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:SX3HOKCR3XUQQPOLHPXYK7APCK","short_pith_number":"pith:SX3HOKCR","canonical_record":{"source":{"id":"2304.10088","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"eess.AS","submitted_at":"2023-04-20T04:50:02Z","cross_cats_sorted":["cs.CR","cs.SD"],"title_canon_sha256":"cd52769131f1d18555803e68eae956b85bb2828caa952994e2e1173ed80cfb5b","abstract_canon_sha256":"0e3525cf8eb7c48ad25f7e2efc429407f8e8f44df005324822e85797e59b717d"},"schema_version":"1.0"},"canonical_sha256":"95f6772851dde9083dcb3bef857c0f12bb11039c6a7304586e270af1ac671e15","source":{"kind":"arxiv","id":"2304.10088","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.10088","created_at":"2026-07-05T06:02:53Z"},{"alias_kind":"arxiv_version","alias_value":"2304.10088v1","created_at":"2026-07-05T06:02:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.10088","created_at":"2026-07-05T06:02:53Z"},{"alias_kind":"pith_short_12","alias_value":"SX3HOKCR3XUQ","created_at":"2026-07-05T06:02:53Z"},{"alias_kind":"pith_short_16","alias_value":"SX3HOKCR3XUQQPOL","created_at":"2026-07-05T06:02:53Z"},{"alias_kind":"pith_short_8","alias_value":"SX3HOKCR","created_at":"2026-07-05T06:02:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:SX3HOKCR3XUQQPOLHPXYK7APCK","target":"record","payload":{"canonical_record":{"source":{"id":"2304.10088","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"eess.AS","submitted_at":"2023-04-20T04:50:02Z","cross_cats_sorted":["cs.CR","cs.SD"],"title_canon_sha256":"cd52769131f1d18555803e68eae956b85bb2828caa952994e2e1173ed80cfb5b","abstract_canon_sha256":"0e3525cf8eb7c48ad25f7e2efc429407f8e8f44df005324822e85797e59b717d"},"schema_version":"1.0"},"canonical_sha256":"95f6772851dde9083dcb3bef857c0f12bb11039c6a7304586e270af1ac671e15","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:02:53.870532Z","signature_b64":"2O8ESHS6LiorsUC672pu+jC277QdQBTk18MyU7fMcq53xibzM/zoWma28Dhe6mug7OZ9p72Y0/zsIX3TLU51Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"95f6772851dde9083dcb3bef857c0f12bb11039c6a7304586e270af1ac671e15","last_reissued_at":"2026-07-05T06:02:53.870123Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:02:53.870123Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.10088","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:02:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qOrlz8H1Gb2kSPIkJvbcPPOoIW+DV67YPZ8umdNk4ZlLwwVlE3leSrC9esKdYrUxtvK0qQrW8ClXPkKrL04GDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:32:52.712946Z"},"content_sha256":"42e8efe53d481c32dceef2a6fa9c3c6ddf97180b09c54f038253edc4bcdd26bf","schema_version":"1.0","event_id":"sha256:42e8efe53d481c32dceef2a6fa9c3c6ddf97180b09c54f038253edc4bcdd26bf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:SX3HOKCR3XUQQPOLHPXYK7APCK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards the Universal Defense for Query-Based Audio Adversarial Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.SD"],"primary_cat":"eess.AS","authors_text":"Feng Guo, Lei Ju, Yuxuan Chen, Zheng Sun","submitted_at":"2023-04-20T04:50:02Z","abstract_excerpt":"Recently, studies show that deep learning-based automatic speech recognition (ASR) systems are vulnerable to adversarial examples (AEs), which add a small amount of noise to the original audio examples. These AE attacks pose new challenges to deep learning security and have raised significant concerns about deploying ASR systems and devices. The existing defense methods are either limited in application or only defend on results, but not on process. In this work, we propose a novel method to infer the adversary intent and discover audio adversarial examples based on the AEs generation process."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.10088","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.10088/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:02:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I/ttkJwC2iosQsgXKQsQzlv6umErFbfEGzf5SIJm3Qh86R0i2P7JLZoUsw/wVFD/pC5tSEd2aFLWjvDULjk4Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:32:52.713594Z"},"content_sha256":"10dfbca3e321d316eeb5b800a9c280144aad436f3a1d9936b54a4396238f8d6d","schema_version":"1.0","event_id":"sha256:10dfbca3e321d316eeb5b800a9c280144aad436f3a1d9936b54a4396238f8d6d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SX3HOKCR3XUQQPOLHPXYK7APCK/bundle.json","state_url":"https://pith.science/pith/SX3HOKCR3XUQQPOLHPXYK7APCK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SX3HOKCR3XUQQPOLHPXYK7APCK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T18:32:52Z","links":{"resolver":"https://pith.science/pith/SX3HOKCR3XUQQPOLHPXYK7APCK","bundle":"https://pith.science/pith/SX3HOKCR3XUQQPOLHPXYK7APCK/bundle.json","state":"https://pith.science/pith/SX3HOKCR3XUQQPOLHPXYK7APCK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SX3HOKCR3XUQQPOLHPXYK7APCK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:SX3HOKCR3XUQQPOLHPXYK7APCK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0e3525cf8eb7c48ad25f7e2efc429407f8e8f44df005324822e85797e59b717d","cross_cats_sorted":["cs.CR","cs.SD"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"eess.AS","submitted_at":"2023-04-20T04:50:02Z","title_canon_sha256":"cd52769131f1d18555803e68eae956b85bb2828caa952994e2e1173ed80cfb5b"},"schema_version":"1.0","source":{"id":"2304.10088","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.10088","created_at":"2026-07-05T06:02:53Z"},{"alias_kind":"arxiv_version","alias_value":"2304.10088v1","created_at":"2026-07-05T06:02:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.10088","created_at":"2026-07-05T06:02:53Z"},{"alias_kind":"pith_short_12","alias_value":"SX3HOKCR3XUQ","created_at":"2026-07-05T06:02:53Z"},{"alias_kind":"pith_short_16","alias_value":"SX3HOKCR3XUQQPOL","created_at":"2026-07-05T06:02:53Z"},{"alias_kind":"pith_short_8","alias_value":"SX3HOKCR","created_at":"2026-07-05T06:02:53Z"}],"graph_snapshots":[{"event_id":"sha256:10dfbca3e321d316eeb5b800a9c280144aad436f3a1d9936b54a4396238f8d6d","target":"graph","created_at":"2026-07-05T06:02:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.10088/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently, studies show that deep learning-based automatic speech recognition (ASR) systems are vulnerable to adversarial examples (AEs), which add a small amount of noise to the original audio examples. These AE attacks pose new challenges to deep learning security and have raised significant concerns about deploying ASR systems and devices. The existing defense methods are either limited in application or only defend on results, but not on process. In this work, we propose a novel method to infer the adversary intent and discover audio adversarial examples based on the AEs generation process.","authors_text":"Feng Guo, Lei Ju, Yuxuan Chen, Zheng Sun","cross_cats":["cs.CR","cs.SD"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"eess.AS","submitted_at":"2023-04-20T04:50:02Z","title":"Towards the Universal Defense for Query-Based Audio Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.10088","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:42e8efe53d481c32dceef2a6fa9c3c6ddf97180b09c54f038253edc4bcdd26bf","target":"record","created_at":"2026-07-05T06:02:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0e3525cf8eb7c48ad25f7e2efc429407f8e8f44df005324822e85797e59b717d","cross_cats_sorted":["cs.CR","cs.SD"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"eess.AS","submitted_at":"2023-04-20T04:50:02Z","title_canon_sha256":"cd52769131f1d18555803e68eae956b85bb2828caa952994e2e1173ed80cfb5b"},"schema_version":"1.0","source":{"id":"2304.10088","kind":"arxiv","version":1}},"canonical_sha256":"95f6772851dde9083dcb3bef857c0f12bb11039c6a7304586e270af1ac671e15","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"95f6772851dde9083dcb3bef857c0f12bb11039c6a7304586e270af1ac671e15","first_computed_at":"2026-07-05T06:02:53.870123Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:02:53.870123Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2O8ESHS6LiorsUC672pu+jC277QdQBTk18MyU7fMcq53xibzM/zoWma28Dhe6mug7OZ9p72Y0/zsIX3TLU51Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:02:53.870532Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.10088","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:42e8efe53d481c32dceef2a6fa9c3c6ddf97180b09c54f038253edc4bcdd26bf","sha256:10dfbca3e321d316eeb5b800a9c280144aad436f3a1d9936b54a4396238f8d6d"],"state_sha256":"02006b07a9548c57541706d62e16a95c48d719b50d50a95fd94d012fd8d5b982"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xXzBIFy//RhpK17d9oceXrGIeIKgfIhc36303nTKshOAt+xfvb9wfwsacxsLoW6QMjdVwk/LdF36POZyL62EDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T18:32:52.720448Z","bundle_sha256":"3d69b9b8e044f04af464d8e4a37ec6a661547842b6364438daf76f3fac6721c6"}}