Transferable and Configurable Audio Adversarial Attack from Low-Level Features
Recent works revealed that state-of-the-art machine learning based Automatic Speech Recognition systems (ASR) have a considerable vulnerability to the crafted adversarial examples. However, limited by individual ASR system's specific machine learning models, the current audio adversarial attacks still lack certain model transferability as well as configurability for different deployment scenarios. In this work, we propose a novel untargeted adversarial example generation method to ASR systems, which shifts the adversarial example generation from the high-level machine learning models to the low-level feature extraction stage. By taking advantage of the fundamental impact and direct configuration of the low-level features, the proposed method can generate transferable and configurable adversarial examples for ASR system perturbation. During the evaluation, we use 6 commercial ASR models to test the proposed attack method. The results show that the proposed method can achieve strong transferability and good perturbation effectiveness. Also, it can configure the adversarial examples with desired audio attributes for better scenario adaptation capability.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial AttackAutomatic Speech RecognitionAutomatic Speech Recognition (ASR)BIG-bench Machine Learningspeech-recognitionSpeech RecognitionSimilar Papers 제목 키워드 기반
STAA-Net: A Sparse and Transferable Adversarial Attack for Speech Emotion Recognition
Speech contains rich information on the emotions of humans, and Speech Emotion Recognition (SER) has been an important topic in the area of human-computer interaction. The robustness of SER models is crucial, particularl…
Adversarial AttackEmotion RecognitionSpeech Emotion RecognitionGE-AdvGAN: Improving the transferability of adversarial samples by gradient editing-based adversarial generative model
Adversarial generative models, such as Generative Adversarial Networks (GANs), are widely applied for generating various types of data, i.e., images, text, and audio. Accordingly, its promising performance has led to the…
Adversarial AttackD-CAPTCHA++: A Study of Resilience of Deepfake CAPTCHA under Transferable Imperceptible Adversarial Attack
The advancements in generative AI have enabled the improvement of audio synthesis models, including text-to-speech and voice conversion. This raises concerns about its potential misuse in social manipulation and politica…
Adversarial AttackAudio SynthesisFace Swappingtext-to-speech+2Towards Transferable Adversarial Attack against Deep Face Recognition
Face recognition has achieved great success in the last five years due to the development of deep learning methods. However, deep convolutional neural networks (DCNNs) have been found to be vulnerable to adversarial exam…
Adversarial AttackFace RecognitionTowards the Transferable Audio Adversarial Attack via Ensemble Methods
In recent years, deep learning (DL) models have achieved significant progress in many domains, such as autonomous driving, facial recognition, and speech recognition. However, the vulnerability of deep learning models to…
Adversarial AttackAutonomous Drivingspeech-recognitionSpeech Recognition+1