Skip to main content
Erschienen in: Artificial Life and Robotics 2/2021

06.01.2021 | Original Article

Adjust-free adversarial example generation in speech recognition using evolutionary multi-objective optimization under black-box condition

verfasst von: Shoma Ishida, Satoshi Ono

Erschienen in: Artificial Life and Robotics | Ausgabe 2/2021

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config
loading …

Abstract

This paper proposes a black-box adversarial attack method to automatic speech recognition systems. Some studies have attempted to attack neural networks for speech recognition; however, these methods did not consider the robustness of generated adversarial examples against timing lag with a target speech. The proposed method in this paper adopts Evolutionary Multi-objective Optimization (EMO) that allows it generating robust adversarial examples under black-box scenario. Experimental results showed that the proposed method successfully generated adjust-free adversarial examples, which are sufficiently robust against timing lag so that an attacker does not need to take the timing of playing it against the target speech.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Fußnoten
1
Tested 60 adversarial examples can be available at https://​mediaeng.​ics.​kagoshima-u.​ac.​jp/​adjustFreeAE.​html.
 
2
Pairred t test with 95% confidence level was performed for each comparison.
 
Literatur
1.
Zurück zum Zitat Alzantot M, Balaji B, Srivastava M (2018) Did you hear that? adversarial examples against automatic speech recognition. arXiv preprint arXiv:1801.00554 Alzantot M, Balaji B, Srivastava M (2018) Did you hear that? adversarial examples against automatic speech recognition. arXiv preprint arXiv:​1801.​00554
3.
Zurück zum Zitat Carlini N, Wagner D (2018) Audio adversarial examples: targeted attacks on speech-to-text. In: 2018 IEEE security and privacy workshops (SPW), pp 1–7. IEEE Carlini N, Wagner D (2018) Audio adversarial examples: targeted attacks on speech-to-text. In: 2018 IEEE security and privacy workshops (SPW), pp 1–7. IEEE
4.
5.
Zurück zum Zitat Ittichaichareon C, Suksri S, Yingthawornsuk T (2012) Speech recognition using mfcc. In: International conference on computer graphics, simulation and modeling, pp 135–138 Ittichaichareon C, Suksri S, Yingthawornsuk T (2012) Speech recognition using mfcc. In: International conference on computer graphics, simulation and modeling, pp 135–138
6.
Zurück zum Zitat Khare S, Aralikatte R, Mani S (2018) Adversarial black-box attacks on automatic speech recognition systems using multi-objective evolutionary optimization. arXiv preprint arXiv:1811.01312 Khare S, Aralikatte R, Mani S (2018) Adversarial black-box attacks on automatic speech recognition systems using multi-objective evolutionary optimization. arXiv preprint arXiv:​1811.​01312
7.
Zurück zum Zitat Ono S, Hirotani Y, Nakayama S (2009) A memetic algorithm for robust optimal solution search-hybridization of multi-objective genetic algorithm and quasi-newton method. Int J Innov Comput Inf Control 5(12):5011–5019 Ono S, Hirotani Y, Nakayama S (2009) A memetic algorithm for robust optimal solution search-hybridization of multi-objective genetic algorithm and quasi-newton method. Int J Innov Comput Inf Control 5(12):5011–5019
8.
Zurück zum Zitat Qin Y, Carlini N, Goodfellow IA (2019) Imperceptible, robust, and targeted adversarial examples for automatic speech recognition. arXiv preprint arXiv:1903.10346 Qin Y, Carlini N, Goodfellow IA (2019) Imperceptible, robust, and targeted adversarial examples for automatic speech recognition. arXiv preprint arXiv:​1903.​10346
9.
Zurück zum Zitat Sainath TN, Parada C (2015) Convolutional neural networks forsmall-footprint keyword spotting. In: Proceedings of the sixteenth annual conference of the international speech communication association Sainath TN, Parada C (2015) Convolutional neural networks forsmall-footprint keyword spotting. In: Proceedings of the sixteenth annual conference of the international speech communication association
10.
Zurück zum Zitat Storn R, Price K (1997) Differential evolution-a simple and efficient heuristic for global optimization over continuous spaces. J Global Optim 11(4):341–359MathSciNetCrossRef Storn R, Price K (1997) Differential evolution-a simple and efficient heuristic for global optimization over continuous spaces. J Global Optim 11(4):341–359MathSciNetCrossRef
11.
Zurück zum Zitat Su J, Vargas DV, Sakurai K (2019) One pixel attack for fooling deep neural networks. IEEE Trans Evol Comput 23:828–41CrossRef Su J, Vargas DV, Sakurai K (2019) One pixel attack for fooling deep neural networks. IEEE Trans Evol Comput 23:828–41CrossRef
12.
Zurück zum Zitat Suzuki T, Takeshita S, Ono S (2019) Adversarial example generation using evolutionary multi-objective optimization. In: 2019 IEEE Congress on evolutionary computation (CEC), pp 2136–2144. IEEE Suzuki T, Takeshita S, Ono S (2019) Adversarial example generation using evolutionary multi-objective optimization. In: 2019 IEEE Congress on evolutionary computation (CEC), pp 2136–2144. IEEE
13.
Zurück zum Zitat Taori R, Kamsetty A, Chu B (2019) Targeted adversarial examples for black box audio systems. In: 2019 IEEE security and privacy workshops (SPW), pp 15–20. IEEE Taori R, Kamsetty A, Chu B (2019) Targeted adversarial examples for black box audio systems. In: 2019 IEEE security and privacy workshops (SPW), pp 15–20. IEEE
15.
Zurück zum Zitat Zhang Q, Liu W, Li H (2009) The performance of a new version of moea/d on cec09 unconstrained mop test instances. In: 2009 IEEE congress on evolutionary computation, pp 203–208. IEEE Zhang Q, Liu W, Li H (2009) The performance of a new version of moea/d on cec09 unconstrained mop test instances. In: 2009 IEEE congress on evolutionary computation, pp 203–208. IEEE
Metadaten
Titel
Adjust-free adversarial example generation in speech recognition using evolutionary multi-objective optimization under black-box condition
verfasst von
Shoma Ishida
Satoshi Ono
Publikationsdatum
06.01.2021
Verlag
Springer Japan
Erschienen in
Artificial Life and Robotics / Ausgabe 2/2021
Print ISSN: 1433-5298
Elektronische ISSN: 1614-7456
DOI
https://doi.org/10.1007/s10015-020-00671-x

Weitere Artikel der Ausgabe 2/2021

Artificial Life and Robotics 2/2021 Zur Ausgabe

Neuer Inhalt