Adversarial Attacks On GMM I-vector Based Speaker Verification Systems

Abstract

This work investigates the vulnerability of Gaussian Mixture Model (GMM) i-vector based speaker verification systems to adversarial attacks, and the transferability of adversarial samples crafted from GMM i-vector based systems to x-vector based systems. In detail, we formulate the GMM i-vector system as a scoring function of enrollment and testing utterance pairs. Then we leverage the fast gradient sign method (FGSM) to optimize testing utterances for adversarial samples generation. These adversarial samples are used to attack both GMM i-vector and x-vector systems. We measure the system vulnerability by the degradation of equal error rate and false acceptance rate. Experiment results show that GMM i-vector systems are seriously vulnerable to adversarial attacks, and the crafted adversarial samples prove to be transferable and pose threats to neuralnetwork speaker embedding based systems (e.g. x-vector systems).

Stats

• citations65
• S2 citations—
• github stars0
• HF likes0
• heat score13.65
• arxiv keyli2019adversarial

Related papers

• Generative X-vectors For Text-independent Speaker Verification (2018)7.16
• Adversarial Sample Detection For Speaker Verification By Neural Vocoders (2021)0.00
• Gaussian Speaker Embedding Learning For Text-independent Speaker Verification (2020)0.00
• Inaudible Adversarial Perturbations For Targeted Attack In Speaker Recognition (2020)12.33
• I-vector Transformation Using Conditional Generative Adversarial Networks For Short Utterance Speaker Verification (2018)8.35
• Generative Adversarial Speaker Embedding Networks For Domain Robust End-to-end Speaker Verification (2018)0.00
• Gaussian-constrained Training For Speaker Verification (2018)8.35
• Discriminatively Re-trained I-vector Extractor For Speaker Recognition (2018)5.84