Perceptual-based deep-learning denoiser as a defense against adversarial attacks on ASR systems
In this paper we investigate speech denoising as a defense against adversarial attacks on automatic speech recognition (ASR) systems. Adversarial attacks attempt to force misclassification by adding small perturbations to the original speech signal. We propose to counteract this by employing a neural-network based denoiser as a pre-processor in the ASR pipeline. The denoiser is independent of the downstream ASR model, and thus can be rapidly deployed in existing systems. We found that training the denoisier using a perceptually motivated loss function resulted in increased adversarial robustness without compromising ASR performance on benign samples. Our defense was evaluated (as a part of the DARPA GARD program) on the 'Kenansville' attack strategy across a range of attack strengths and speech samples. An average improvement in Word Error Rate (WER) of about 7.7% was observed over the undefended model at 20 dB signal-to-noise-ratio (SNR) attack strength.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial RobustnessAutomatic Speech RecognitionAutomatic Speech Recognition (ASR)DenoisingSpeech Denoisingspeech-recognitionSpeech RecognitionSimilar Papers 제목 키워드 기반
Defense against Adversarial Attacks on Hybrid Speech Recognition using Joint Adversarial Fine-tuning with Denoiser
Adversarial attacks are a threat to automatic speech recognition (ASR) systems, and it becomes imperative to propose defenses to protect them. In this paper, we perform experiments to show that K2 conformer hybrid ASR is…
Automatic Speech RecognitionAutomatic Speech Recognition (ASR)speech-recognitionSpeech RecognitionDefense against Adversarial Attacks Using High-Level Representation Guided Denoiser
Neural networks are vulnerable to adversarial examples, which poses a threat to their application in security sensitive systems. We propose high-level representation guided denoiser (HGD) as a defense for image classific…
Adversarial AttackAdversarial Defenseimage-classificationImage Classification+1Perceptual Adversarial Robustness: Defense Against Unseen Threat Models
A key challenge in adversarial robustness is the lack of a precise mathematical characterization of human perception, used in the very definition of adversarial attacks that are imperceptible to human eyes. Most current …
Adversarial DefenseAdversarial RobustnessPerceptual DistancePerceptual Adversarial Robustness: Generalizable Defenses Against Unforeseen Threat Models
A key challenge in adversarial robustness is the lack of a precise mathematical characterization of human perception, used in the definition of adversarial attacks that are imperceptible to human eyes. Most current attac…
Adversarial DefenseAdversarial RobustnessPerceptual DistanceDUP-Net: Denoiser and Upsampler Network for 3D Adversarial Point Clouds Defense
Neural networks are vulnerable to adversarial examples, which poses a threat to their application in security sensitive systems. We propose a Denoiser and UPsampler Network (DUP-Net) structure as defenses for 3D adversar…
DenoisingPoint Cloud Classification