Abstract:In recent years, artificial intelligence technology represented by deep learning has achieved remarkable results in image recognition, semantic analysis, natural language processing and other fields. In particular, deep neural networks have been widely used in different security-sensitive tasks. Fields, such as facial payment, smart medical and autonomous driving, which accelerate the construction of smart cities. Meanwhile, in order to fully unleash the potential of edge big data, there is an urgent need to push the AI frontier to the network edge. Edge AI, the combination of artificial intelligence and edge computing, supports the deployment of deep learning algorithms to edge devices that generate data, and has become a key driver of smart city development. However, the latest research shows that deep neural networks are vulnerable to attacks from adversarial example and output wrong results. This type of attack is called adversarial attack, which greatly limits the promotion of deep neural networks in tasks with extremely high security requirements. Due to the influence of adversarial attacks, researchers have also begun to pay attention to the research in the field of adversarial defense. In the game process of adversarial attacks and defense technologies, both attack and defense technologies have been developed rapidly. This article first introduces the principles and characteristics of adversarial attacks, and summarizes and analyzes the adversarial example generation methods in recent years. Then, it introduces the adversarial example defense technology in detail from the three directions of model, data, and additional network. Finally, combined with the current status of adversarial example generation and defense technology development, put forward challenges and prospects in this field.

Adversarial Attack and Defense on Deep Neural Network-Based Voice Processing Systems: An Overview

Echo: Reverberation-based Fast Black-Box Adversarial Attacks on Intelligent Audio Systems.

Defending Adversarial Attacks on Cloud-aided Automatic Speech Recognition Systems.

SoK: A Study of the Security on Voice Processing Systems

Adversarial Attack and Defense Strategies of Speaker Recognition Systems: A Survey

Adversarial Examples Attack and Countermeasure for Speech Recognition System: A Survey.

Privacy-preserving and Privacy-attacking Approaches for Speech and Audio -- A Survey

Backdoor Attacks against Voice Recognition Systems: A Survey

Adversarial Examples for Automatic Speech Recognition: Attacks and Countermeasures

A Practical Survey on Emerging Threats from AI-driven Voice Attacks: How Vulnerable are Commercial Voice Control Systems?

Adversarial attacks and defenses in Speaker Recognition Systems: A survey

Defending Against Adversarial Attacks in Speaker Verification Systems

Adversarial Attacks on ASR Systems: An Overview

Voice Presentation Attack Detection Using Convolutional Neural Networks

Adversarial Attack and Defense: A Survey

Adversarial Examples: Attacks and Defenses for Deep Learning

Defend Data Poisoning Attacks on Voice Authentication

Voice Adversarial Sample Generation Method for Ultrasonicization of Motion Noise

Hidden Voice Commands: Attacks and Defenses on the VCS of Autonomous Driving Cars.

DEFENDING YOUR VOICE: ADVERSARIAL ATTACK ON VOICE CONVERSION