paper-with-me

홈 › Papers

Boosting the Transferability of Audio Adversarial Examples with Acoustic Representation Optimization

2025-03-25 · Weifei Jin, Junjie Su, Hejia Wang, Yulin Ye, Jie Hao

With the widespread application of automatic speech recognition (ASR) systems, their vulnerability to adversarial attacks has been extensively studied. However, most existing adversarial examples are generated on specific individual models, resulting in a lack of transferability. In real-world scenarios, attackers often cannot access detailed information about the target model, making query-based attacks unfeasible. To address this challenge, we propose a technique called Acoustic Representation Optimization that aligns adversarial perturbations with low-level acoustic characteristics derived from speech representation models. Rather than relying on model-specific, higher-layer abstractions, our approach leverages fundamental acoustic representations that remain consistent across diverse ASR architectures. By enforcing an acoustic representation loss to guide perturbations toward these robust, lower-level representations, we enhance the cross-model transferability of adversarial examples without degrading audio quality. Our method is plug-and-play and can be integrated with any existing attack methods. We evaluate our approach on three modern ASR models, and the experimental results demonstrate that our method significantly improves the transferability of adversarial examples generated by previous methods while preserving the audio quality.

📄 PDF Abstract BibTeX arXiv:2503.19591

Code (0)

등록된 구현이 없습니다.

Tasks

Automatic Speech RecognitionAutomatic Speech Recognition (ASR)speech-recognitionSpeech Recognition

Similar Papers 제목 키워드 기반

Boosting Adversarial Transferability across Model Genus by Deformation-Constrained Warping

2024-02-06 · Qinliang Lin, Cheng Luo, Zenghao Niu, Xilin He 외

Adversarial examples generated by a surrogate model typically exhibit limited transferability to unknown target systems. To address this problem, many transferability enhancement approaches (e.g., input transformation an…

Action Recognitionimage-classificationImage ClassificationTemporal Action Localization

StyLess: Boosting the Transferability of Adversarial Examples

2023-04-23 · CVPR 2023 1 · Kaisheng Liang, Bin Xiao

Adversarial attacks can mislead deep neural networks (DNNs) by adding imperceptible perturbations to benign examples. The attack transferability enables adversarial examples to attack black-box DNNs with unknown architec…

Boosting the Local Invariance for Better Adversarial Transferability

2025-03-08 · Bohan Liu, Xiaosen Wang

Transfer-based attacks pose a significant threat to real-world applications by directly targeting victim models with adversarial examples generated on surrogate models. While numerous approaches have been proposed to enh…

Boosting the Adversarial Transferability of Surrogate Models with Dark Knowledge

2022-06-16 · Dingcheng Yang, Zihao Xiao, Wenjian Yu

Deep neural networks (DNNs) are vulnerable to adversarial examples. And, the adversarial examples have transferability, which means that an adversarial example for a DNN model can fool another model with a non-trivial pr…

Adversarial AttackFace VerificationImage Classification

Cross-Representation Transferability of Adversarial Attacks: From Spectrograms to Audio Waveforms

2019-10-22 · Karl Michel Koerich, Mohammad Esmaeilpour, Sajjad Abdoli, Alceu de Souza Britto Jr. 외

This paper shows the susceptibility of spectrogram-based audio classifiers to adversarial attacks and the transferability of such attacks to audio waveforms. Some commonly used adversarial attacks to images have been app…