arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1906.06355eess.AScs.SD
收藏

基于感知的对抗性音频攻击

Perceptual Based Adversarial Audio Attacks

Bosch Center for Artificial Intelligence(博世人工智能中心);Carnegie-Mellon University(卡内基梅隆大学)

Joseph Szurley, J. Zico Kolter

摘要:

最近的研究表明,自动语音识别(ASR)系统可能会受到对抗性攻击。然而,在这一领域的绝大多数工作中,攻击只在数字空间中执行,或者涉及简短的短语和静态的房间设置。在本文中,我们演示了一个物理上可实现的音频对抗攻击。我们的方法特别基于心理声学特性的损失函数,并自动生成房间脉冲响应,以创建在多个环境中通过扬声器播放时鲁棒的对抗性攻击。我们表明,这种攻击是可能的,即使是几乎察觉不到的听众。

英文摘要:

Recent work has shown the possibility of adversarial attacks on automatic speechrecognition (ASR) systems. However, in the vast majority of work in this area, theattacks have been executed only in the digital space, or have involved short phrasesand static room settings. In this paper, we demonstrate a physically realizableaudio adversarial attack. We base our approach specifically on a psychoacoustic-property-based loss function, and automated generation of room impulse responses, to create adversarial attacks that are robust when played over a speaker in multiple environments. We show that such attacks are possible even while being virtually imperceptible to listeners.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑