{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:Y3NTJKE25PU2Y474F4A2J3Y26E","short_pith_number":"pith:Y3NTJKE2","canonical_record":{"source":{"id":"2607.15724","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T07:59:49Z","cross_cats_sorted":["cs.LG","cs.SD"],"title_canon_sha256":"0dde42f0e60f59363a8beccefefd5863a75dd3f7156f43c0a3b8f00c1222f3ec","abstract_canon_sha256":"67da9f2ea8de7d84732f23440349e8ae893c5a38022ba4e4ce067268d268b66d"},"schema_version":"1.0"},"canonical_sha256":"c6db34a89aebe9ac73fc2f01a4ef1af126cb90c0d2b3e568f2b80615ae521d34","source":{"kind":"arxiv","id":"2607.15724","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.15724","created_at":"2026-07-20T01:19:06Z"},{"alias_kind":"arxiv_version","alias_value":"2607.15724v1","created_at":"2026-07-20T01:19:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.15724","created_at":"2026-07-20T01:19:06Z"},{"alias_kind":"pith_short_12","alias_value":"Y3NTJKE25PU2","created_at":"2026-07-20T01:19:06Z"},{"alias_kind":"pith_short_16","alias_value":"Y3NTJKE25PU2Y474","created_at":"2026-07-20T01:19:06Z"},{"alias_kind":"pith_short_8","alias_value":"Y3NTJKE2","created_at":"2026-07-20T01:19:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:Y3NTJKE25PU2Y474F4A2J3Y26E","target":"record","payload":{"canonical_record":{"source":{"id":"2607.15724","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T07:59:49Z","cross_cats_sorted":["cs.LG","cs.SD"],"title_canon_sha256":"0dde42f0e60f59363a8beccefefd5863a75dd3f7156f43c0a3b8f00c1222f3ec","abstract_canon_sha256":"67da9f2ea8de7d84732f23440349e8ae893c5a38022ba4e4ce067268d268b66d"},"schema_version":"1.0"},"canonical_sha256":"c6db34a89aebe9ac73fc2f01a4ef1af126cb90c0d2b3e568f2b80615ae521d34","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-20T01:19:06.254751Z","signature_b64":"RCguiD+hkBwjriAjg1BrQm8CWP71Vblalxu1DmAVvOpci1EKjDpTCwE0beJOF3tj3xGBub1kHpFoHu62OEbYCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c6db34a89aebe9ac73fc2f01a4ef1af126cb90c0d2b3e568f2b80615ae521d34","last_reissued_at":"2026-07-20T01:19:06.253934Z","signature_status":"signed_v1","first_computed_at":"2026-07-20T01:19:06.253934Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.15724","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-20T01:19:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5ELD2SDXyQHwV9y4jRGxokmeUdotgaeiRy/oZcWlg8K/HYTNEiTnjKEYVJ7a4TBiYcvxda+ypUefUsMM0Qv9Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T19:04:02.397418Z"},"content_sha256":"df15e45413ac4b2b2873cb9c529567da6630f67961ea25b7bd2bd2138b2fe5f6","schema_version":"1.0","event_id":"sha256:df15e45413ac4b2b2873cb9c529567da6630f67961ea25b7bd2bd2138b2fe5f6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:Y3NTJKE25PU2Y474F4A2J3Y26E","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Natural Backdoor Attacks on Speech Recognition Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","cs.SD"],"primary_cat":"cs.CR","authors_text":"Jing Ma, Jinwen Xin, Xixiang Lyu","submitted_at":"2026-07-17T07:59:49Z","abstract_excerpt":"With the rapid development of deep learning, its vulnerability has gradually emerged in recent years. This work focuses on backdoor attacks on speech recognition systems. We adopt sounds that are ordinary in nature or in our daily life as triggers for natural backdoor attacks. We conduct experiments on two datasets and three models to validate the performance of natural backdoor attacks and explore the effects of poisoning rate, trigger duration and blend ratio on the performance of natural backdoor attacks. Our results show that natural backdoor attacks have a high attack success rate without"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.15724","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.15724/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-20T01:19:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+c1fb+itZDRl+X/zuOupc5r/LSGFpkmC2+5CCLDsBUPP3/tBkz5Dk36/NXQCSXG2ikB1N4PpqgeICmlAwes6DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T19:04:02.397930Z"},"content_sha256":"9d2e1de0a114d1034c1fddeb7f8252bb3befcc0ae288e1b02f9eb26baa973338","schema_version":"1.0","event_id":"sha256:9d2e1de0a114d1034c1fddeb7f8252bb3befcc0ae288e1b02f9eb26baa973338"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Y3NTJKE25PU2Y474F4A2J3Y26E/bundle.json","state_url":"https://pith.science/pith/Y3NTJKE25PU2Y474F4A2J3Y26E/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Y3NTJKE25PU2Y474F4A2J3Y26E/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T19:04:02Z","links":{"resolver":"https://pith.science/pith/Y3NTJKE25PU2Y474F4A2J3Y26E","bundle":"https://pith.science/pith/Y3NTJKE25PU2Y474F4A2J3Y26E/bundle.json","state":"https://pith.science/pith/Y3NTJKE25PU2Y474F4A2J3Y26E/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Y3NTJKE25PU2Y474F4A2J3Y26E/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:Y3NTJKE25PU2Y474F4A2J3Y26E","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"67da9f2ea8de7d84732f23440349e8ae893c5a38022ba4e4ce067268d268b66d","cross_cats_sorted":["cs.LG","cs.SD"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T07:59:49Z","title_canon_sha256":"0dde42f0e60f59363a8beccefefd5863a75dd3f7156f43c0a3b8f00c1222f3ec"},"schema_version":"1.0","source":{"id":"2607.15724","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.15724","created_at":"2026-07-20T01:19:06Z"},{"alias_kind":"arxiv_version","alias_value":"2607.15724v1","created_at":"2026-07-20T01:19:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.15724","created_at":"2026-07-20T01:19:06Z"},{"alias_kind":"pith_short_12","alias_value":"Y3NTJKE25PU2","created_at":"2026-07-20T01:19:06Z"},{"alias_kind":"pith_short_16","alias_value":"Y3NTJKE25PU2Y474","created_at":"2026-07-20T01:19:06Z"},{"alias_kind":"pith_short_8","alias_value":"Y3NTJKE2","created_at":"2026-07-20T01:19:06Z"}],"graph_snapshots":[{"event_id":"sha256:9d2e1de0a114d1034c1fddeb7f8252bb3befcc0ae288e1b02f9eb26baa973338","target":"graph","created_at":"2026-07-20T01:19:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.15724/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the rapid development of deep learning, its vulnerability has gradually emerged in recent years. This work focuses on backdoor attacks on speech recognition systems. We adopt sounds that are ordinary in nature or in our daily life as triggers for natural backdoor attacks. We conduct experiments on two datasets and three models to validate the performance of natural backdoor attacks and explore the effects of poisoning rate, trigger duration and blend ratio on the performance of natural backdoor attacks. Our results show that natural backdoor attacks have a high attack success rate without","authors_text":"Jing Ma, Jinwen Xin, Xixiang Lyu","cross_cats":["cs.LG","cs.SD"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T07:59:49Z","title":"Natural Backdoor Attacks on Speech Recognition Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.15724","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:df15e45413ac4b2b2873cb9c529567da6630f67961ea25b7bd2bd2138b2fe5f6","target":"record","created_at":"2026-07-20T01:19:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"67da9f2ea8de7d84732f23440349e8ae893c5a38022ba4e4ce067268d268b66d","cross_cats_sorted":["cs.LG","cs.SD"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T07:59:49Z","title_canon_sha256":"0dde42f0e60f59363a8beccefefd5863a75dd3f7156f43c0a3b8f00c1222f3ec"},"schema_version":"1.0","source":{"id":"2607.15724","kind":"arxiv","version":1}},"canonical_sha256":"c6db34a89aebe9ac73fc2f01a4ef1af126cb90c0d2b3e568f2b80615ae521d34","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c6db34a89aebe9ac73fc2f01a4ef1af126cb90c0d2b3e568f2b80615ae521d34","first_computed_at":"2026-07-20T01:19:06.253934Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-20T01:19:06.253934Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RCguiD+hkBwjriAjg1BrQm8CWP71Vblalxu1DmAVvOpci1EKjDpTCwE0beJOF3tj3xGBub1kHpFoHu62OEbYCw==","signature_status":"signed_v1","signed_at":"2026-07-20T01:19:06.254751Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.15724","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:df15e45413ac4b2b2873cb9c529567da6630f67961ea25b7bd2bd2138b2fe5f6","sha256:9d2e1de0a114d1034c1fddeb7f8252bb3befcc0ae288e1b02f9eb26baa973338"],"state_sha256":"225ff1e9cbfbd43cc54ee1c3471d63635bfb0b100bd5ad01960aac874c6cd28c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AhHVoRcLAGC3MQhYSzlXbCx0qKzogtSffF0a+jWCV9oXeSGyEQq6f+I6YNtZKuZ99ccfqcDPQOPvL3rurA4OCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T19:04:02.404749Z","bundle_sha256":"1eeed0e559f06d7dfa245fbc723be7e72c6a0a7b287401cc42d20412264c290b"}}