SirenAttack: Adversarial Audio for End-to-End Acoustic Systems
Date: 2019-01
Affected: DeepSpeech, speech command and speaker recognition systems
Attack vector: adversarial-input
Category: research
Severity: High

Du et al. demonstrate a versatile adversarial-audio attack against speech-command, speaker-recognition, and sound-event-classification systems in both white-box and black-box settings, e.g., 99.45 percent ASR against ResNet18 on IEMOCAP.


Mitigations:

Architectural layers (MAESTRO):