Scholarlink

<p>In this paper, we propose a novel approach for creating audio adversarial examples that specifically target speech recognition systems. The proposed method involves adding optimized noise to a particular region of an audio sample that corresponds to a specified word or phrase. By doing so, the generated adversarial example is designed to deceive the targeted model into interpreting it as a modified sentence, where the specified phrase has been altered. This method offers advantages compared to existing techniques, including reduced distortion since noise is only added to the targeted area, and the ability for the attacker to selectively modify or add specific words as desired. The experimental evaluation utilized the Mozilla Common Voice dataset. The results demonstrate that the adversarial examples generated using the proposed method, which only transform the specified word or phrase by adding noise to that specific region, can successfully fool the speech recognition system into misclassifying them as the intended target sentence.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Selective Audio Perturbations for Targeting Specific Phrases in Speech Recognition Systems

  • 期刊论文

  • 出版模式：

    开放获取

  • 发表日期：

    2025年5月5日

查看全文
  • Kyoungmin Ko,
  • SungHwan Kim,
  • Hyun Kwon

摘要

In this paper, we propose a novel approach for creating audio adversarial examples that specifically target speech recognition systems. The proposed method involves adding optimized noise to a particular region of an audio sample that corresponds to a specified word or phrase. By doing so, the generated adversarial example is designed to deceive the targeted model into interpreting it as a modified sentence, where the specified phrase has been altered. This method offers advantages compared to existing techniques, including reduced distortion since noise is only added to the targeted area, and the ability for the attacker to selectively modify or add specific words as desired. The experimental evaluation utilized the Mozilla Common Voice dataset. The results demonstrate that the adversarial examples generated using the proposed method, which only transform the specified word or phrase by adding noise to that specific region, can successfully fool the speech recognition system into misclassifying them as the intended target sentence.