Universal Adversarial Perturbations Generative Network for Speaker Recognition
Attacking deep learning based biometric systems has drawn more and more attention with the wide deployment of fingerprint/face/speaker recognition systems, given the fact that the neural networks are vulnerable to the adversarial examples, which have been intentionally perturbed to remain almost imperceptible for human. In this paper, we demonstrated the existence of the universal adversarial perturbations~(UAPs) for the speaker recognition systems. We proposed a generative network to learn the mapping from the low-dimensional normal distribution to the UAPs subspace, then synthesize the UAPs to perturbe any input signals to spoof the well-trained speaker recognition model with high probability. Experimental results on TIMIT and LibriSpeech datasets demonstrate the effectiveness of our model.
Code (1)
Tasks
Speaker RecognitionSimilar Papers 제목 키워드 기반
Attack on practical speaker verification system using universal adversarial perturbations
In authentication scenarios, applications of practical speaker verification systems usually require a person to read a dynamic authentication text. Previous studies played an audio adversarial example as a digital signal…
Real-World Adversarial AttackRoom Impulse Response (RIR)Speaker Verificationspeech-recognition+1Adversarial defense for deep speaker recognition using hybrid adversarial training
Deep neural network based speaker recognition systems can easily be deceived by an adversary using minuscule imperceptible perturbations to the input speech samples. These adversarial attacks pose serious security threat…
Adversarial DefenseSpeaker RecognitionReal-time, Universal, and Robust Adversarial Attacks Against Speaker Recognition Systems
As the popularity of voice user interface (VUI) exploded in recent years, speaker recognition system has emerged as an important medium of identifying a speaker in many security-required applications and services. In thi…
Adversarial AttackRoom Impulse Response (RIR)Speaker RecognitionImpact of Phonetics on Speaker Identity in Adversarial Voice Attack
Adversarial perturbations in speech pose a serious threat to automatic speech recognition (ASR) and speaker verification by introducing subtle waveform modifications that remain imperceptible to humans but can significan…
Speaker VerificationSpeaker RecognitionSpeech RecognitionLearning Universal Adversarial Perturbations with Generative Models
Neural networks are known to be vulnerable to adversarial examples, inputs that have been intentionally perturbed to remain visually similar to the source input, but cause a misclassification. It was recently shown that …
Graph Classification