QFA2SR: Query-Free Adversarial Transfer Attacks on Speaker Recognition
Date: 2023-05
Affected: Microsoft Azure, iFlytek speaker recognition APIs
Attack vector: adversarial-input
Category: research
Severity: High

Chen et al. craft transferable adversarial audio for speaker-recognition systems without target queries, attacking commercial speaker-ID APIs in physical and over-the-air conditions. USENIX Security 2023.


Mitigations:

Architectural layers (MAESTRO):