arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2002.05463cs.LGcs.CRcs.SDeess.ASstat.ML

Identifying Audio Adversarial Examples via Anomalous Pattern Detection

IBM Research Africa(IBM 非洲研究院)

Victor Akinwande, Celia Cintas, Skyler Speakman, Srihari Sridharan

英文摘要:

Audio processing models based on deep neural networks are susceptible to adversarial attacks even when the adversarial audio waveform is 99.9% similar to a benign sample. Given the wide application of DNN-based audio recognition systems, detecting the presence of adversarial examples is of high practical relevance. By applying anomalous pattern detection techniques in the activation space of these models, we show that 2 of the recent and current state-of-the-art adversarial attacks on audio processing systems systematically lead to higher-than-expected activation at some subset of nodes and we can detect these with up to an AUC of 0.98 with no degradation in performance on benign samples.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑