Adversarial Attack And Defense Strategies For Deep Speaker Recognition Systems

Abstract

Robust speaker recognition, including in the presence of malicious attacks, is becoming increasingly important and essential, especially due to the proliferation of several smart speakers and personal agents that interact with an individual's voice commands to perform diverse, and even sensitive tasks. Adversarial attack is a recently revived domain which is shown to be effective in breaking deep neural network-based classifiers, specifically, by forcing them to change their posterior distribution by only perturbing the input samples by a very small amount. Although, significant progress in this realm has been made in the computer vision domain, advances within speaker recognition is still limited. The present expository paper considers several state-of-the-art adversarial attacks to a deep speaker recognition system, employing strong defense methods as countermeasures, and reporting on several ablation studies to obtain a comprehensive understanding of the problem. The experiments sho

Stats

• citations60
• S2 citations—
• github stars0
• HF likes0
• heat score13.39
• arxiv keyjati2020adversarial

Related papers

• Adversarial Defense For Deep Speaker Recognition Using Hybrid Adversarial Training (2020)9.59
• Inaudible Adversarial Perturbations For Targeted Attack In Speaker Recognition (2020)12.33
• Towards Understanding And Mitigating Audio Adversarial Examples For Speaker Recognition (2022)11.67
• Speaker De-identification System Using Autoencoders And Adversarial Training (2020)0.00
• Who Is Real Bob? Adversarial Attacks On Speaker Recognition Systems (2019)16.28
• Targeted Adversarial Examples For Black Box Audio Systems (2018)15.75
• Adversarial Training For Multi-domain Speaker Recognition (2020)6.77
• Impact Of Phonetics On Speaker Identity In Adversarial Voice Attack (2025)0.00