Audio Adversarial Examples: Targeted Attacks on Speech-to-Text
Date: 2018-01
Affected: Mozilla DeepSpeech, end-to-end ASR
Attack vector: adversarial-input
Category: research
Severity: High

Carlini and Wagner construct end-to-end audio adversarial examples that transcribe to any target phrase against Mozilla DeepSpeech with 100 percent success on a 12-cm/s perturbation budget. DLS 2018.


Mitigations:

Architectural layers (MAESTRO):