We gratefully acknowledge support from
the Simons Foundation and member institutions.
Full-text links:

Download:

Current browse context:

eess

Change to browse by:

References & Citations

Bookmark

(what is this?)
CiteULike logo BibSonomy logo Mendeley logo del.icio.us logo Digg logo Reddit logo ScienceWISE logo

Electrical Engineering and Systems Science > Audio and Speech Processing

Title: Representation Learning to Classify and Detect Adversarial Attacks against Speaker and Speech Recognition Systems

Abstract: Adversarial attacks have become a major threat for machine learning applications. There is a growing interest in studying these attacks in the audio domain, e.g, speech and speaker recognition; and find defenses against them. In this work, we focus on using representation learning to classify/detect attacks w.r.t. the attack algorithm, threat model or signal-to-adversarial-noise ratio. We found that common attacks in the literature can be classified with accuracies as high as 90%. Also, representations trained to classify attacks against speaker identification can be used also to classify attacks against speaker verification and speech recognition. We also tested an attack verification task, where we need to decide whether two speech utterances contain the same attack. We observed that our models did not generalize well to attack algorithms not included in the attack representation model training. Motivated by this, we evaluated an unknown attack detection task. We were able to detect unknown attacks with equal error rates of about 19%, which is promising.
Comments: Accepted at Interspeech 2021
Subjects: Audio and Speech Processing (eess.AS)
Cite as: arXiv:2107.04448 [eess.AS]
  (or arXiv:2107.04448v1 [eess.AS] for this version)

Submission history

From: Sonal Joshi [view email]
[v1] Fri, 9 Jul 2021 13:55:31 GMT (721kb,D)

Link back to: arXiv, form interface, contact.