{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:V4FLJJ3MKIGLRAEH3LTXRY2MJH","short_pith_number":"pith:V4FLJJ3M","canonical_record":{"source":{"id":"2304.08811","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-18T08:21:49Z","cross_cats_sorted":["cs.LG","cs.SD","eess.AS"],"title_canon_sha256":"d0bd55b6285b2b6e07383dab66f24f42f14f00196ffd0364a76c48760c37d446","abstract_canon_sha256":"9ff5fd43a4466941d7c4d75cd7451ff08f13fa52595292a73a452cb502fcb24b"},"schema_version":"1.0"},"canonical_sha256":"af0ab4a76c520cb88087dae778e34c49eb46e7d8b7bd48ae546d39cda898d27d","source":{"kind":"arxiv","id":"2304.08811","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.08811","created_at":"2026-07-05T06:02:13Z"},{"alias_kind":"arxiv_version","alias_value":"2304.08811v1","created_at":"2026-07-05T06:02:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.08811","created_at":"2026-07-05T06:02:13Z"},{"alias_kind":"pith_short_12","alias_value":"V4FLJJ3MKIGL","created_at":"2026-07-05T06:02:13Z"},{"alias_kind":"pith_short_16","alias_value":"V4FLJJ3MKIGLRAEH","created_at":"2026-07-05T06:02:13Z"},{"alias_kind":"pith_short_8","alias_value":"V4FLJJ3M","created_at":"2026-07-05T06:02:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:V4FLJJ3MKIGLRAEH3LTXRY2MJH","target":"record","payload":{"canonical_record":{"source":{"id":"2304.08811","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-18T08:21:49Z","cross_cats_sorted":["cs.LG","cs.SD","eess.AS"],"title_canon_sha256":"d0bd55b6285b2b6e07383dab66f24f42f14f00196ffd0364a76c48760c37d446","abstract_canon_sha256":"9ff5fd43a4466941d7c4d75cd7451ff08f13fa52595292a73a452cb502fcb24b"},"schema_version":"1.0"},"canonical_sha256":"af0ab4a76c520cb88087dae778e34c49eb46e7d8b7bd48ae546d39cda898d27d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:02:13.975969Z","signature_b64":"N771ExLi5cRPKwCdQoDSjoyPLEhLNOzyLgsH+stAdw0WIvxn0xzt7PolphiNFvxyTSkAyI+BvNnCvcsTzga0CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"af0ab4a76c520cb88087dae778e34c49eb46e7d8b7bd48ae546d39cda898d27d","last_reissued_at":"2026-07-05T06:02:13.975569Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:02:13.975569Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.08811","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:02:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8DcpF/Xx5lpI3Y3w2S7jJjim5fmzSFWLODN8J3UCuRfRJ/nTzhKwOgPqT0ztrZ6ngdcB5C3HNRxvk724tIcXCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:36:02.192828Z"},"content_sha256":"2fc74c25fc80e8639423de26ffb930ff90e2cecf1b37a2c540732a9846981a36","schema_version":"1.0","event_id":"sha256:2fc74c25fc80e8639423de26ffb930ff90e2cecf1b37a2c540732a9846981a36"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:V4FLJJ3MKIGLRAEH3LTXRY2MJH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards the Transferable Audio Adversarial Attack via Ensemble Methods","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG","cs.SD","eess.AS"],"primary_cat":"cs.CR","authors_text":"Feng Guo, Lei Ju, Yuxuan Chen, Zheng Sun","submitted_at":"2023-04-18T08:21:49Z","abstract_excerpt":"In recent years, deep learning (DL) models have achieved significant progress in many domains, such as autonomous driving, facial recognition, and speech recognition. However, the vulnerability of deep learning models to adversarial attacks has raised serious concerns in the community because of their insufficient robustness and generalization. Also, transferable attacks have become a prominent method for black-box attacks. In this work, we explore the potential factors that impact adversarial examples (AEs) transferability in DL-based speech recognition. We also discuss the vulnerability of d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.08811","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.08811/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:02:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XtaGdnTRgHJfHuFEQ6xdKBbBl3JBmNRzVs2WV1TuhjBi0i8OtmMUJ73W0V9SKqbSPQULy4DwL6xzhGciaA0cAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:36:02.193224Z"},"content_sha256":"caf0de3bc6d5615320512f94e33fb273eb57a2b264ec952f3784f5b82a0ee723","schema_version":"1.0","event_id":"sha256:caf0de3bc6d5615320512f94e33fb273eb57a2b264ec952f3784f5b82a0ee723"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/V4FLJJ3MKIGLRAEH3LTXRY2MJH/bundle.json","state_url":"https://pith.science/pith/V4FLJJ3MKIGLRAEH3LTXRY2MJH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/V4FLJJ3MKIGLRAEH3LTXRY2MJH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T18:36:02Z","links":{"resolver":"https://pith.science/pith/V4FLJJ3MKIGLRAEH3LTXRY2MJH","bundle":"https://pith.science/pith/V4FLJJ3MKIGLRAEH3LTXRY2MJH/bundle.json","state":"https://pith.science/pith/V4FLJJ3MKIGLRAEH3LTXRY2MJH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/V4FLJJ3MKIGLRAEH3LTXRY2MJH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:V4FLJJ3MKIGLRAEH3LTXRY2MJH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9ff5fd43a4466941d7c4d75cd7451ff08f13fa52595292a73a452cb502fcb24b","cross_cats_sorted":["cs.LG","cs.SD","eess.AS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-18T08:21:49Z","title_canon_sha256":"d0bd55b6285b2b6e07383dab66f24f42f14f00196ffd0364a76c48760c37d446"},"schema_version":"1.0","source":{"id":"2304.08811","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.08811","created_at":"2026-07-05T06:02:13Z"},{"alias_kind":"arxiv_version","alias_value":"2304.08811v1","created_at":"2026-07-05T06:02:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.08811","created_at":"2026-07-05T06:02:13Z"},{"alias_kind":"pith_short_12","alias_value":"V4FLJJ3MKIGL","created_at":"2026-07-05T06:02:13Z"},{"alias_kind":"pith_short_16","alias_value":"V4FLJJ3MKIGLRAEH","created_at":"2026-07-05T06:02:13Z"},{"alias_kind":"pith_short_8","alias_value":"V4FLJJ3M","created_at":"2026-07-05T06:02:13Z"}],"graph_snapshots":[{"event_id":"sha256:caf0de3bc6d5615320512f94e33fb273eb57a2b264ec952f3784f5b82a0ee723","target":"graph","created_at":"2026-07-05T06:02:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.08811/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In recent years, deep learning (DL) models have achieved significant progress in many domains, such as autonomous driving, facial recognition, and speech recognition. However, the vulnerability of deep learning models to adversarial attacks has raised serious concerns in the community because of their insufficient robustness and generalization. Also, transferable attacks have become a prominent method for black-box attacks. In this work, we explore the potential factors that impact adversarial examples (AEs) transferability in DL-based speech recognition. We also discuss the vulnerability of d","authors_text":"Feng Guo, Lei Ju, Yuxuan Chen, Zheng Sun","cross_cats":["cs.LG","cs.SD","eess.AS"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-18T08:21:49Z","title":"Towards the Transferable Audio Adversarial Attack via Ensemble Methods"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.08811","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2fc74c25fc80e8639423de26ffb930ff90e2cecf1b37a2c540732a9846981a36","target":"record","created_at":"2026-07-05T06:02:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9ff5fd43a4466941d7c4d75cd7451ff08f13fa52595292a73a452cb502fcb24b","cross_cats_sorted":["cs.LG","cs.SD","eess.AS"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-18T08:21:49Z","title_canon_sha256":"d0bd55b6285b2b6e07383dab66f24f42f14f00196ffd0364a76c48760c37d446"},"schema_version":"1.0","source":{"id":"2304.08811","kind":"arxiv","version":1}},"canonical_sha256":"af0ab4a76c520cb88087dae778e34c49eb46e7d8b7bd48ae546d39cda898d27d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"af0ab4a76c520cb88087dae778e34c49eb46e7d8b7bd48ae546d39cda898d27d","first_computed_at":"2026-07-05T06:02:13.975569Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:02:13.975569Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"N771ExLi5cRPKwCdQoDSjoyPLEhLNOzyLgsH+stAdw0WIvxn0xzt7PolphiNFvxyTSkAyI+BvNnCvcsTzga0CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:02:13.975969Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.08811","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2fc74c25fc80e8639423de26ffb930ff90e2cecf1b37a2c540732a9846981a36","sha256:caf0de3bc6d5615320512f94e33fb273eb57a2b264ec952f3784f5b82a0ee723"],"state_sha256":"ad0f3f7ee69879f9842952b00bd8864114a18900fa5efd9390a687939fc71442"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qk07IEYCr/s8sTuufzU76I4gtXKoUzIQVeROp/GX4+AzG3e2KgGL2Ay/nTVBDgdOlvLqfswGeEVnlAgKBMxYCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T18:36:02.196947Z","bundle_sha256":"1877717d429b0041c26becdd0d44e16372027b8f178720d52b1fed26d2bd037b"}}