arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1809.04397cs.SDcs.CLcs.CRcs.LGcs.NEeess.AS
收藏

自动语音识别中检测敌对样本的孤立和封闭音频预处理方法

Isolated and Ensemble Audio Preprocessing Methods for Detecting Adversarial Examples against Automatic Speech Recognition

University of Chicago(芝加哥大学);University of Florida(佛罗里达大学)

Krishan Rajaratnam, Kunal Shah, Jugal Kalita

摘要:

对抗攻击是一种利用过程,其中对自然输入进行微小的改变,导致输入被神经模型错误分类。在语音识别领域,这已经成为一个越来越重要的问题。虽然对抗攻击最初是在计算机视觉中引入的,但它们已经渗透到语音识别领域。2017年,基因攻击被证明对语音命令模型非常有效。有限词汇语音分类器,如语音命令模型,用于各种应用程序,特别是电话;因此,这种攻击产生的对抗性示例构成了重大的安全威胁。本文探讨了各种方法来检测这些敌对的例子与音频预处理的组合。一种结合了压缩、语音编码、过滤和音频平移的特定组合防御被证明对语音命令模型的攻击非常有效,检测音频对抗性示例的准确率为93.5%,召回率为91.2%。

英文摘要:

An adversarial attack is an exploitative process in which minute alterations are made to natural inputs, causing the inputs to be misclassified by neural models. In the field of speech recognition, this has become an issue of increasing significance. Although adversarial attacks were originally introduced in computer vision, they have since infiltrated the realm of speech recognition. In 2017, a genetic attack was shown to be quite potent against the Speech Commands Model. Limited-vocabulary speech classifiers, such as the Speech Commands Model, are used in a variety of applications, particularly in telephony; as such, adversarial examples produced by this attack pose as a major security threat. This paper explores various methods of detecting these adversarial examples with combinations of audio preprocessing. One particular combined defense incorporating compressions, speech coding, filtering, and audio panning was shown to be quite effective against the attack on the Speech Commands Model, detecting audio adversarial examples with 93.5% precision and 91.2% recall.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑