CommanderSong: Practical Adversarial Voice Recognition
Date: 2018-01
Affected: Kaldi ASR, voice assistants
Attack vector: adversarial-input
Category: research
Severity: High

Yuan et al. embed voice commands in songs that, when played, control speech-recognition systems while remaining inaudible as commands to humans. Spreadable via YouTube or radio. USENIX Security 2018.


Mitigations:

Architectural layers (MAESTRO):