{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:XUQ6YDD6PS76IN3GRHHEBNVVH5","short_pith_number":"pith:XUQ6YDD6","canonical_record":{"source":{"id":"2104.02757","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2021-04-06T19:39:05Z","cross_cats_sorted":["cs.LG","cs.SD"],"title_canon_sha256":"dcfca87b0e740fc5afa0f77019f54cb7ddca59bce2a882fa3c336140b02e1aeb","abstract_canon_sha256":"5ec596bc2a69961f7956c62dfbe16ac2b39a2cf72d4a56b52fa6e5d55f2cc941"},"schema_version":"1.0"},"canonical_sha256":"bd21ec0c7e7cbfe4376689ce40b6b53f44afb0f2f0f9dcde866e99ce1ad84b11","source":{"kind":"arxiv","id":"2104.02757","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.02757","created_at":"2026-07-05T02:29:59Z"},{"alias_kind":"arxiv_version","alias_value":"2104.02757v1","created_at":"2026-07-05T02:29:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.02757","created_at":"2026-07-05T02:29:59Z"},{"alias_kind":"pith_short_12","alias_value":"XUQ6YDD6PS76","created_at":"2026-07-05T02:29:59Z"},{"alias_kind":"pith_short_16","alias_value":"XUQ6YDD6PS76IN3G","created_at":"2026-07-05T02:29:59Z"},{"alias_kind":"pith_short_8","alias_value":"XUQ6YDD6","created_at":"2026-07-05T02:29:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:XUQ6YDD6PS76IN3GRHHEBNVVH5","target":"record","payload":{"canonical_record":{"source":{"id":"2104.02757","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2021-04-06T19:39:05Z","cross_cats_sorted":["cs.LG","cs.SD"],"title_canon_sha256":"dcfca87b0e740fc5afa0f77019f54cb7ddca59bce2a882fa3c336140b02e1aeb","abstract_canon_sha256":"5ec596bc2a69961f7956c62dfbe16ac2b39a2cf72d4a56b52fa6e5d55f2cc941"},"schema_version":"1.0"},"canonical_sha256":"bd21ec0c7e7cbfe4376689ce40b6b53f44afb0f2f0f9dcde866e99ce1ad84b11","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:29:59.134240Z","signature_b64":"fnf38NwMveXGReMyU1lzPUM0xMBF+iPmBBo2+UMQklHiySnngQahinVAPIfZTiXDlRAapZ5N4xKkCB70HMH7CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bd21ec0c7e7cbfe4376689ce40b6b53f44afb0f2f0f9dcde866e99ce1ad84b11","last_reissued_at":"2026-07-05T02:29:59.133809Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:29:59.133809Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2104.02757","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:29:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HieW8EUev83+3pdUPrPtK5Q+qwnSYN5o9W/y6jm1qzNDwmCVqGRxlmCBHb1Wms/puRVF0EbcK0srZ8E+s79WAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T08:36:32.889506Z"},"content_sha256":"4090f38931fe7e314031b7f3496ec897ca848abdbbf8084ab807274fd88d2091","schema_version":"1.0","event_id":"sha256:4090f38931fe7e314031b7f3496ec897ca848abdbbf8084ab807274fd88d2091"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:XUQ6YDD6PS76IN3GRHHEBNVVH5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploring Targeted Universal Adversarial Perturbations to End-to-end ASR Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","cs.SD"],"primary_cat":"eess.AS","authors_text":"Liangliang Cao, Wei Han, Yu Zhang, Zhiyun Lu","submitted_at":"2021-04-06T19:39:05Z","abstract_excerpt":"Although end-to-end automatic speech recognition (e2e ASR) models are widely deployed in many applications, there have been very few studies to understand models' robustness against adversarial perturbations. In this paper, we explore whether a targeted universal perturbation vector exists for e2e ASR models. Our goal is to find perturbations that can mislead the models to predict the given targeted transcript such as \"thank you\" or empty string on any input utterance. We study two different attacks, namely additive and prepending perturbations, and their performances on the state-of-the-art L"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.02757","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2104.02757/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:29:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UbGlGQBglwo/eWl6n3zKy54QCjssbRE9IApDGq2WF2eKijMUYWAuJSowsSaBRZpAGczDA24nJbEV4HAqX5pLDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T08:36:32.889876Z"},"content_sha256":"9c34e551fd09360813bbe2ecd2bdb68f6a3e658b0b42d13260a3c34efb6ea8e5","schema_version":"1.0","event_id":"sha256:9c34e551fd09360813bbe2ecd2bdb68f6a3e658b0b42d13260a3c34efb6ea8e5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XUQ6YDD6PS76IN3GRHHEBNVVH5/bundle.json","state_url":"https://pith.science/pith/XUQ6YDD6PS76IN3GRHHEBNVVH5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XUQ6YDD6PS76IN3GRHHEBNVVH5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T08:36:32Z","links":{"resolver":"https://pith.science/pith/XUQ6YDD6PS76IN3GRHHEBNVVH5","bundle":"https://pith.science/pith/XUQ6YDD6PS76IN3GRHHEBNVVH5/bundle.json","state":"https://pith.science/pith/XUQ6YDD6PS76IN3GRHHEBNVVH5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XUQ6YDD6PS76IN3GRHHEBNVVH5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:XUQ6YDD6PS76IN3GRHHEBNVVH5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5ec596bc2a69961f7956c62dfbe16ac2b39a2cf72d4a56b52fa6e5d55f2cc941","cross_cats_sorted":["cs.LG","cs.SD"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2021-04-06T19:39:05Z","title_canon_sha256":"dcfca87b0e740fc5afa0f77019f54cb7ddca59bce2a882fa3c336140b02e1aeb"},"schema_version":"1.0","source":{"id":"2104.02757","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.02757","created_at":"2026-07-05T02:29:59Z"},{"alias_kind":"arxiv_version","alias_value":"2104.02757v1","created_at":"2026-07-05T02:29:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.02757","created_at":"2026-07-05T02:29:59Z"},{"alias_kind":"pith_short_12","alias_value":"XUQ6YDD6PS76","created_at":"2026-07-05T02:29:59Z"},{"alias_kind":"pith_short_16","alias_value":"XUQ6YDD6PS76IN3G","created_at":"2026-07-05T02:29:59Z"},{"alias_kind":"pith_short_8","alias_value":"XUQ6YDD6","created_at":"2026-07-05T02:29:59Z"}],"graph_snapshots":[{"event_id":"sha256:9c34e551fd09360813bbe2ecd2bdb68f6a3e658b0b42d13260a3c34efb6ea8e5","target":"graph","created_at":"2026-07-05T02:29:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.02757/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Although end-to-end automatic speech recognition (e2e ASR) models are widely deployed in many applications, there have been very few studies to understand models' robustness against adversarial perturbations. In this paper, we explore whether a targeted universal perturbation vector exists for e2e ASR models. Our goal is to find perturbations that can mislead the models to predict the given targeted transcript such as \"thank you\" or empty string on any input utterance. We study two different attacks, namely additive and prepending perturbations, and their performances on the state-of-the-art L","authors_text":"Liangliang Cao, Wei Han, Yu Zhang, Zhiyun Lu","cross_cats":["cs.LG","cs.SD"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2021-04-06T19:39:05Z","title":"Exploring Targeted Universal Adversarial Perturbations to End-to-end ASR Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.02757","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4090f38931fe7e314031b7f3496ec897ca848abdbbf8084ab807274fd88d2091","target":"record","created_at":"2026-07-05T02:29:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5ec596bc2a69961f7956c62dfbe16ac2b39a2cf72d4a56b52fa6e5d55f2cc941","cross_cats_sorted":["cs.LG","cs.SD"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.AS","submitted_at":"2021-04-06T19:39:05Z","title_canon_sha256":"dcfca87b0e740fc5afa0f77019f54cb7ddca59bce2a882fa3c336140b02e1aeb"},"schema_version":"1.0","source":{"id":"2104.02757","kind":"arxiv","version":1}},"canonical_sha256":"bd21ec0c7e7cbfe4376689ce40b6b53f44afb0f2f0f9dcde866e99ce1ad84b11","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bd21ec0c7e7cbfe4376689ce40b6b53f44afb0f2f0f9dcde866e99ce1ad84b11","first_computed_at":"2026-07-05T02:29:59.133809Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:29:59.133809Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fnf38NwMveXGReMyU1lzPUM0xMBF+iPmBBo2+UMQklHiySnngQahinVAPIfZTiXDlRAapZ5N4xKkCB70HMH7CA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:29:59.134240Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.02757","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4090f38931fe7e314031b7f3496ec897ca848abdbbf8084ab807274fd88d2091","sha256:9c34e551fd09360813bbe2ecd2bdb68f6a3e658b0b42d13260a3c34efb6ea8e5"],"state_sha256":"dbacefaf348714f8a4196d16400bcd63981d92ea331d54320d8300178009a01c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IjiuACsdHkrDnGM3Za8bxqTGcizbH6s2Ekpiq98G/lXP3tasyag2JphjjH0qWXw73/JPTJJTKbE5RhBI+HQnCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T08:36:32.892355Z","bundle_sha256":"4be7486ce629b3aae3d8476bf512f8b85bc3f9fbd337060f4d4201cb5ec69d81"}}