Abstract:Deep neural networks (DNNs) are widely used for image recognition, speech recognition, and other pattern analysis tasks. Despite the success of DNNs, these systems can be exploited by what is termed adversarial examples. An adversarial example, in which a small distortion is added to the input data, can be designed to be misclassified by the DNN while remaining undetected by humans or other systems. Such adversarial examples have been studied mainly in the image domain. Recently, however, studies on adversarial examples have been expanding into the voice domain. For example, when an adversarial example is applied to enemy wiretapping devices (victim classifiers) in a military environment, the enemy device will misinterpret the intended message. In such scenarios, it is necessary that friendly wiretapping devices (protected classifiers) should not be deceived. Therefore, the selective adversarial example concept can be useful in mixed situations, defined as situations in which there is both a classifier to be protected and a classifier to be attacked. In this paper, we propose a selective audio adversarial example with minimum distortion that will be misclassified as the target phrase by a victim classifier but correctly classified as the original phrase by a protected classifier. To generate such examples, a transformation is carried out to minimize the probability of incorrect classification by the protected classifier and that of correct classification by the victim classifier. We conducted experiments targeting the state-of-the-art DeepSpeech voice recognition model using Mozilla Common Voice datasets and the Tensorflow library. They showed that the proposed method can generate a selective audio adversarial example with a 91.67% attack success rate and 85.67% protected classifier accuracy.

Robust Audio Adversarial Example for a Physical Attack

Echo: Reverberation-based Fast Black-Box Adversarial Attacks on Intelligent Audio Systems.

Understanding and Benchmarking the Commonality of Adversarial Examples

Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognition

An Integrated Algorithm for Robust and Imperceptible Audio Adversarial Examples

UltraBD: Backdoor Attack against Automatic Speaker Verification Systems via Adversarial Ultrasound

Towards Resistant Audio Adversarial Examples

Audio Adversarial Examples: Targeted Attacks on Speech-to-Text

The Silent Manipulator: A Practical and Inaudible Backdoor Attack against Speech Recognition Systems

Push the Limit of Adversarial Example Attack on Speaker Recognition in Physical Domain

Adversarial Computer Vision Via Acoustic Manipulation of Camera Sensors

Toward Robust ASR System against Audio Adversarial Examples using Agitated Logit

Imperceptible Black-Box Waveform-Level Adversarial Attack Towards Automatic Speaker Recognition

Imperio: Robust Over-the-Air Adversarial Examples for Automatic Speech Recognition Systems

Adversarial Examples for Automatic Speech Recognition: Attacks and Countermeasures

Defending Adversarial Attacks on Cloud-aided Automatic Speech Recognition Systems.

Selective Audio Adversarial Example in Evasion Attack on Speech Recognition System

SirenAttack: Generating Adversarial Audio for End-to-End Acoustic Systems

AdvReverb: Rethinking the Stealthiness of Audio Adversarial Examples to Human Perception

TransAudio: Towards the Transferable Adversarial Audio Attack via Learning Contextualized Perturbations

Parrot-Trained Adversarial Examples: Pushing the Practicality of Black-Box Audio Attacks against Speaker Recognition Models