Who is Real Bob? Adversarial Attacks on Speaker Recognition (FAKEBOB)
Date: 2019-11
Affected: ivector-PLDA, GMM-UBM, Talentedsoft, Microsoft Azure SR
Attack vector: adversarial-input
Category: research
Severity: High

Chen et al. construct FAKEBOB, the first practical adversarial attack against state-of-the-art speaker recognition systems with high transferability across models. IEEE S&P 2021.


Mitigations:

Architectural layers (MAESTRO):