{"id":"https://openalex.org/W3176325251","doi":"https://doi.org/10.1109/tifs.2021.3116438","title":"Study of Pre-Processing Defenses Against Adversarial Attacks on State-of-the-Art Speaker Recognition Systems","display_name":"Study of Pre-Processing Defenses Against Adversarial Attacks on State-of-the-Art Speaker Recognition Systems","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3176325251","doi":"https://doi.org/10.1109/tifs.2021.3116438","mag":"3176325251"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2021.3116438","doi":"https://doi.org/10.1109/tifs.2021.3116438","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2021.3116438","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2101.08909","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052564654","display_name":"Sonal Joshi","orcid":"https://orcid.org/0000-0001-8020-7551","observed_orcids":["https://orcid.org/0000-0001-8020-7551"]},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sonal Joshi","raw_affiliation_strings":["Department of Electrical and Computer Engineering, and the Center for Language and Speech Processing (CLSP), Johns Hopkins University, Baltimore, MD, 21218 USA. (e-mail: sjoshi12@jhu.edu)"],"raw_orcid":"https://orcid.org/0000-0001-8020-7551","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, and the Center for Language and Speech Processing (CLSP), Johns Hopkins University, Baltimore, MD, 21218 USA. (e-mail: sjoshi12@jhu.edu)","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057010207","display_name":"Jes\u00fas Villalba","orcid":"https://orcid.org/0000-0001-9459-8426","observed_orcids":["https://orcid.org/0000-0001-9459-8426"]},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jesus Villalba","raw_affiliation_strings":["Department of Electrical and Computer Engineering, and the Center for Language and Speech Processing (CLSP), Johns Hopkins University, Baltimore, MD, 21218 USA and Human Language Technology Center of Excellence, Johns Hopkins University, Baltimore, MD, 21218, USA"],"raw_orcid":"https://orcid.org/0000-0001-9459-8426","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, and the Center for Language and Speech Processing (CLSP), Johns Hopkins University, Baltimore, MD, 21218 USA and Human Language Technology Center of Excellence, Johns Hopkins University, Baltimore, MD, 21218, USA","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027217976","display_name":"Piotr \u017belasko","orcid":"https://orcid.org/0000-0002-8245-0413","observed_orcids":["https://orcid.org/0000-0002-8245-0413"]},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Piotr Zelasko","raw_affiliation_strings":["Department of Electrical and Computer Engineering, and the Center for Language and Speech Processing (CLSP), Johns Hopkins University, Baltimore, MD, 21218 USA and Human Language Technology Center of Excellence, Johns Hopkins University, Baltimore, MD, 21218, USA"],"raw_orcid":"https://orcid.org/0000-0002-8245-0413","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, and the Center for Language and Speech Processing (CLSP), Johns Hopkins University, Baltimore, MD, 21218 USA and Human Language Technology Center of Excellence, Johns Hopkins University, Baltimore, MD, 21218, USA","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069488212","display_name":"Laureano Moro-Vel\u00e1zquez","orcid":"https://orcid.org/0000-0002-3033-7005","observed_orcids":["https://orcid.org/0000-0002-3033-7005"]},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Laureano Moro-Velazquez","raw_affiliation_strings":["Department of Electrical and Computer Engineering, and the Center for Language and Speech Processing (CLSP), Johns Hopkins University, Baltimore, MD, 21218 USA"],"raw_orcid":"https://orcid.org/0000-0002-3033-7005","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, and the Center for Language and Speech Processing (CLSP), Johns Hopkins University, Baltimore, MD, 21218 USA","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050632169","display_name":"Najim Dehak","orcid":"https://orcid.org/0000-0002-4489-5753","observed_orcids":["https://orcid.org/0000-0002-4489-5753"]},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Najim Dehak","raw_affiliation_strings":["Department of Electrical and Computer Engineering, and the Center for Language and Speech Processing (CLSP), Johns Hopkins University, Baltimore, MD, 21218 USA and Human Language Technology Center of Excellence, Johns Hopkins University, Baltimore, MD, 21218, USA"],"raw_orcid":"https://orcid.org/0000-0002-4489-5753","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, and the Center for Language and Speech Processing (CLSP), Johns Hopkins University, Baltimore, MD, 21218 USA and Human Language Technology Center of Excellence, Johns Hopkins University, Baltimore, MD, 21218, USA","institution_ids":["https://openalex.org/I145311948"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I145311948"],"apc_list":{"value":2045,"currency":"USD","value_usd":2045},"apc_paid":null,"fwci":3.5778,"has_fulltext":true,"cited_by_count":67,"citation_normalized_percentile":{"value":0.94217668,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"16","issue":null,"first_page":"4811","last_page":"4826"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.8500000238418579},{"id":"https://openalex.org/keywords/speaker-recognition","display_name":"speaker recognition","score":0.9409999847412109},{"id":"https://openalex.org/keywords/x-vector","display_name":"x-vector","score":0.7250000238418579},{"id":"https://openalex.org/keywords/randomized-smoothing","display_name":"randomized smoothing","score":0.6949999928474426},{"id":"https://openalex.org/keywords/variational-autoencoder","display_name":"variational autoencoder","score":0.9819999933242798},{"id":"https://openalex.org/keywords/adversarial-training","display_name":"adversarial training","score":0.8709999918937683},{"id":"https://openalex.org/keywords/fgsm","display_name":"FGSM","score":0.828000009059906},{"id":"https://openalex.org/keywords/projected-gradient-descent","display_name":"projected gradient descent","score":0.9150000214576721},{"id":"https://openalex.org/keywords/carlini-wagner-attack","display_name":"Carlini-Wagner attack","score":0.9929999709129333},{"id":"https://openalex.org/keywords/adaptive-attacks","display_name":"adaptive attacks","score":0.5189999938011169}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8713504076004028},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7279841303825378},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.666168749332428},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5405759811401367},{"id":"https://openalex.org/C3770464","wikidata":"https://www.wikidata.org/wiki/Q775963","display_name":"Smoothing","level":2,"score":0.5393396019935608},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4583967626094818},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.4287717342376709},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4147782325744629},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.22880977392196655},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.19063055515289307}],"mesh":[],"locations_count":6,"locations":[{"id":"doi:10.1109/tifs.2021.3116438","doi":"https://doi.org/10.1109/tifs.2021.3116438","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2021.3116438","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-a","cwts-core","dongbi-a","jufo-2","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2101.08909","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2101.08909","pdf_url":"https://arxiv.org/pdf/2101.08909","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:3123630726","doi":null,"is_oa":true,"landing_page_url":"http://export.arxiv.org/pdf/2101.08909","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"mag:3176325251","doi":null,"is_oa":true,"landing_page_url":"http://export.arxiv.org/pdf/2101.08909","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2101.08909","doi":"https://doi.org/10.48550/arxiv.2101.08909","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2101.08909","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.17023/p8ax-9z15","doi":"https://doi.org/10.17023/p8ax-9z15","is_oa":true,"landing_page_url":"https://doi.org/10.17023/p8ax-9z15","pdf_url":null,"source":{"id":"https://openalex.org/S7407051697","display_name":"IEEE RESOURCE CENTERS","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Audiovisual"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2101.08909","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2101.08909","pdf_url":"https://arxiv.org/pdf/2101.08909","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G8647456620","display_name":null,"funder_award_id":"HR001119S0026-GARD-FP-052","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"}],"funders":[{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3176325251.pdf","grobid_xml":"https://content.openalex.org/works/W3176325251.grobid-xml"},"referenced_works_count":102,"referenced_works":["https://openalex.org/W95152782","https://openalex.org/W1434018057","https://openalex.org/W1494198834","https://openalex.org/W1524333225","https://openalex.org/W1673923490","https://openalex.org/W1710476689","https://openalex.org/W1945616565","https://openalex.org/W1959608418","https://openalex.org/W2099471712","https://openalex.org/W2123299109","https://openalex.org/W2150769028","https://openalex.org/W2167768673","https://openalex.org/W2174868984","https://openalex.org/W2177899970","https://openalex.org/W2193413348","https://openalex.org/W2219249508","https://openalex.org/W2460937040","https://openalex.org/W2476548250","https://openalex.org/W2486441166","https://openalex.org/W2516574342","https://openalex.org/W2519091744","https://openalex.org/W2543927648","https://openalex.org/W2552767274","https://openalex.org/W2557579533","https://openalex.org/W2605135824","https://openalex.org/W2626778328","https://openalex.org/W2640329709","https://openalex.org/W2696967604","https://openalex.org/W2738841453","https://openalex.org/W2739748921","https://openalex.org/W2748488820","https://openalex.org/W2765233338","https://openalex.org/W2765384636","https://openalex.org/W2767951891","https://openalex.org/W2783047542","https://openalex.org/W2783113218","https://openalex.org/W2784500886","https://openalex.org/W2784874046","https://openalex.org/W2786118190","https://openalex.org/W2786163515","https://openalex.org/W2787496614","https://openalex.org/W2787708942","https://openalex.org/W2808631503","https://openalex.org/W2885407017","https://openalex.org/W2887814324","https://openalex.org/W2890964092","https://openalex.org/W2892852825","https://openalex.org/W2894295011","https://openalex.org/W2898435086","https://openalex.org/W2900939497","https://openalex.org/W2906211136","https://openalex.org/W2909303050","https://openalex.org/W2911634294","https://openalex.org/W2923292931","https://openalex.org/W2936802426","https://openalex.org/W2943984343","https://openalex.org/W2946498182","https://openalex.org/W2946948417","https://openalex.org/W2950299304","https://openalex.org/W2962879692","https://openalex.org/W2963207607","https://openalex.org/W2963501406","https://openalex.org/W2964153729","https://openalex.org/W2964160479","https://openalex.org/W2964253222","https://openalex.org/W2970971581","https://openalex.org/W2971741682","https://openalex.org/W2972908178","https://openalex.org/W2973181078","https://openalex.org/W2974581576","https://openalex.org/W2979593053","https://openalex.org/W2981087920","https://openalex.org/W2981461916","https://openalex.org/W2985489290","https://openalex.org/W2999174651","https://openalex.org/W3007305010","https://openalex.org/W3015338123","https://openalex.org/W3015811740","https://openalex.org/W3015958938","https://openalex.org/W3034214559","https://openalex.org/W3035795257","https://openalex.org/W3042776162","https://openalex.org/W3045156829","https://openalex.org/W3048796438","https://openalex.org/W3054852761","https://openalex.org/W3084424094","https://openalex.org/W3088377098","https://openalex.org/W3093904722","https://openalex.org/W3094464978","https://openalex.org/W3095259706","https://openalex.org/W3095413397","https://openalex.org/W3095570773","https://openalex.org/W3096023981","https://openalex.org/W3096614974","https://openalex.org/W3097794099","https://openalex.org/W3124238039","https://openalex.org/W3130052162","https://openalex.org/W3187541268","https://openalex.org/W4320013936","https://openalex.org/W6687566353","https://openalex.org/W6688816777","https://openalex.org/W6769178842"],"related_works":["https://openalex.org/W3123630726","https://openalex.org/W4312458120","https://openalex.org/W3198662695","https://openalex.org/W3150987417","https://openalex.org/W4360764551","https://openalex.org/W4285094241","https://openalex.org/W4225133925","https://openalex.org/W3054852761","https://openalex.org/W4390421837","https://openalex.org/W4400063123"],"abstract_inverted_index":{"Adversarial":[0],"examples":[1,133],"are":[2,69,89,151],"designed":[3],"to":[4,18,27,34,46,216],"fool":[5],"the":[6,19,52,77,83,97,154,168,174,177,195,205,209,219],"speaker":[7],"recognition":[8],"(SR)":[9],"system":[10,221],"by":[11,71],"adding":[12],"a":[13,23],"carefully":[14],"crafted":[15],"human-imperceptible":[16],"noise":[17],"speech":[20],"signals.":[21],"Posing":[22],"severe":[24],"security":[25],"threat":[26],"state-of-the-art":[28,64],"SR":[29,67,87,183],"systems,":[30],"it":[31,41],"becomes":[32],"vital":[33],"deep-dive":[35],"and":[36,114,146,191,222,235],"study":[37],"their":[38],"vulnerabilities.":[39],"Moreover,":[40],"is":[42],"of":[43,82,157,173],"greater":[44],"importance":[45],"propose":[47],"countermeasures":[48],"that":[49,182],"can":[50],"protect":[51],"systems":[53,68,88,184],"against":[54,91,120,153,208],"these":[55,58,121],"attacks.":[56,193],"Addressing":[57],"concerns,":[59],"we":[60,123],"first":[61],"investigated":[62,124],"how":[63],"x-vector":[65],"based":[66,86],"affected":[70],"white-box":[72,92,163],"adversarial":[73,93,132,158,164],"attacks,":[74,122,210],"i.e.,":[75],"when":[76,167],"adversary":[78,169],"has":[79,170],"full":[80,171],"knowledge":[81,172],"system.":[84],"x-Vector":[85],"evaluated":[90],"attacks":[94,230],"common":[95],"in":[96,218],"literature":[98],"like":[99],"fast":[100],"gradient":[101,111],"sign":[102],"method":[103,107],"(FGSM),":[104],"basic":[105],"iterative":[106],"(BIM)\u2013a.k.a.":[108],"iterative-FGSM\u2013,":[109],"projected":[110],"descent":[112],"(PGD),":[113],"Carlini-Wagner":[115],"(CW)":[116],"attack.":[117,237],"To":[118],"mitigate":[119],"four":[125,137],"pre-processing":[126,138,197],"defenses":[127],"which":[128],"do":[129],"not":[130],"need":[131],"during":[134],"training.":[135,159],"The":[136],"defenses\u2013viz.":[139],"randomized":[140,202],"smoothing,":[141],"DefenseGAN,":[142],"variational":[143],"autoencoder":[144],"(VAE),":[145],"Parallel":[147],"Wave-GAN":[148],"vocoder":[149],"(PWG)":[150],"compared":[152,215],"baseline":[155],"defense":[156],"Performing":[160],"powerful":[161],"adaptive":[162],"attack":[165],"(i.e.,":[166],"system,":[175],"including":[176],"defense),":[178],"our":[179],"conclusions":[180],"indicate":[181],"were":[185],"extremely":[186],"vulnerable":[187],"under":[188],"BIM,":[189],"PGD,":[190],"CW":[192,236],"Among":[194],"proposed":[196],"defenses,":[198],"PWG":[199],"combined":[200],"with":[201,211,231],"smoothing":[203],"offers":[204],"most":[206],"protection":[207],"accuracy":[212],"averaging":[213],"93%":[214],"52%":[217],"undefended":[220],"an":[223],"absolute":[224],"improvement":[225],">":[226,233],"90%":[227],"for":[228],"BIM":[229],"L\u221e":[232],"0.001":[234]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":18},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":7}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2021-07-05T00:00:00"}