{"id":"https://openalex.org/W4287636062","doi":"https://doi.org/10.48550/arxiv.2010.10682","title":"VenoMave: Targeted Poisoning Against Speech Recognition","display_name":"VenoMave: Targeted Poisoning Against Speech Recognition","publication_year":2020,"publication_date":"2020-10-21","ids":{"openalex":"https://openalex.org/W4287636062","doi":"https://doi.org/10.48550/arxiv.2010.10682"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2010.10682","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2010.10682","pdf_url":"https://arxiv.org/pdf/2010.10682","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2010.10682","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072290972","display_name":"Hojjat Aghakhani","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aghakhani, Hojjat","raw_affiliation_strings":["University of California , Santa Barbara"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California , Santa Barbara","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049219646","display_name":"Lea Sch\u00f6nherr","orcid":"https://orcid.org/0000-0003-3779-7781","observed_orcids":["https://orcid.org/0000-0003-3779-7781"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sch\u00f6nherr, Lea","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028099362","display_name":"Thorsten Eisenhofer","orcid":"https://orcid.org/0000-0002-4706-260X","observed_orcids":["https://orcid.org/0000-0002-4706-260X"]},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Eisenhofer, Thorsten","raw_affiliation_strings":["Ruhr University Bochum"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University Bochum","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007017640","display_name":"Dorothea Kolossa","orcid":"https://orcid.org/0000-0003-0678-3053","observed_orcids":["https://orcid.org/0000-0003-0678-3053"]},"institutions":[{"id":"https://openalex.org/I4577782","display_name":"Technische Universit\u00e4t Berlin","ror":"https://ror.org/03v4gjf40","country_code":"DE","type":"education","lineage":["https://openalex.org/I4577782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Kolossa, Dorothea","raw_affiliation_strings":["Technische Universit\u00e4t Berlin"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t Berlin","institution_ids":["https://openalex.org/I4577782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056790702","display_name":"Thorsten Holz","orcid":"https://orcid.org/0000-0002-2783-1264","observed_orcids":["https://orcid.org/0000-0002-2783-1264"]},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Holz, Thorsten","raw_affiliation_strings":["CISPA Helmholtz Center for Information Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISPA Helmholtz Center for Information Security","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414","observed_orcids":["https://orcid.org/0000-0001-5140-3414"]},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kruegel, Christopher","raw_affiliation_strings":["University of California , Santa Barbara"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California , Santa Barbara","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075685499","display_name":"Giovanni Vigna","orcid":"https://orcid.org/0000-0002-3422-5369","observed_orcids":["https://orcid.org/0000-0002-3422-5369"]},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vigna, Giovanni","raw_affiliation_strings":["University of California , Santa Barbara"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California , Santa Barbara","institution_ids":["https://openalex.org/I154570441"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/speech-recognition","display_name":"speech recognition","score":0.7099999785423279},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"adversarial learning","score":0.8360000252723694},{"id":"https://openalex.org/keywords/attack-transferability","display_name":"attack transferability","score":0.628000020980835},{"id":"https://openalex.org/keywords/acoustic-modeling","display_name":"acoustic modeling","score":0.32499998807907104},{"id":"https://openalex.org/keywords/tidigits","display_name":"TIDIGITS","score":0.6510000228881836},{"id":"https://openalex.org/keywords/audio-transcription","display_name":"audio transcription","score":0.33000001311302185},{"id":"https://openalex.org/keywords/evasion-attacks","display_name":"evasion attacks","score":0.3059999942779541}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8109259009361267},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.6973042488098145},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.6971085667610168},{"id":"https://openalex.org/C197424946","wikidata":"https://www.wikidata.org/wiki/Q1165717","display_name":"Waveform","level":3,"score":0.5962666869163513},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.5414062142372131},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.5356127023696899},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.5179423689842224},{"id":"https://openalex.org/C179926584","wikidata":"https://www.wikidata.org/wiki/Q207714","display_name":"Transcription (linguistics)","level":2,"score":0.4595580995082855},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35987454652786255},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3308243155479431},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0},{"id":"https://openalex.org/C140331021","wikidata":"https://www.wikidata.org/wiki/Q1868104","display_name":"Logit","level":2,"score":0.0},{"id":"https://openalex.org/C554190296","wikidata":"https://www.wikidata.org/wiki/Q47528","display_name":"Radar","level":2,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2010.10682","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2010.10682","pdf_url":"https://arxiv.org/pdf/2010.10682","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2010.10682","doi":"https://doi.org/10.48550/arxiv.2010.10682","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2010.10682","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2010.10682","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2010.10682","pdf_url":"https://arxiv.org/pdf/2010.10682","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, justice, and strong institutions","score":0.7200000286102295}],"study_designs":[],"awards":[{"id":"https://openalex.org/G18682879","display_name":"EXC 2092: CyberSicherheit im Zeitalter gro\u00dfskaliger Angreifer (CASA)","funder_award_id":"390781972","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G8982748108","display_name":"CNS Core: Medium: Detroit \u2013 A New End-to-end System for Practical and Accessible IoT","funder_award_id":"2107101","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4287636062.pdf","grobid_xml":"https://content.openalex.org/works/W4287636062.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2161221533","https://openalex.org/W2140186469","https://openalex.org/W4390421286","https://openalex.org/W4280563792","https://openalex.org/W4389724018","https://openalex.org/W4318719684","https://openalex.org/W4229699405","https://openalex.org/W3183136280","https://openalex.org/W4318559728","https://openalex.org/W4317626601"],"abstract_inverted_index":{"Despite":[0],"remarkable":[1],"improvements,":[2],"automatic":[3],"speech":[4,29,79],"recognition":[5,30],"is":[6,183],"susceptible":[7],"to":[8,12,27,62,82,96,109,166,198],"adversarial":[9],"perturbations.":[10],"Compared":[11],"standard":[13],"machine":[14],"learning":[15],"architectures,":[16],"these":[17],"attacks":[18],"are":[19,32],"significantly":[20],"more":[21,49,161,175],"challenging,":[22],"especially":[23],"since":[24],"the":[25,64,73,83,90,94,116,125,130,153,167,179,186],"inputs":[26],"a":[28,103,121,174,193],"system":[31,95],"time":[33],"series":[34],"that":[35,115],"contain":[36],"both":[37],"acoustic":[38],"and":[39,52,99,144],"linguistic":[40],"properties":[41],"of":[42,55,102,124,152,160,196,207],"speech.":[43],"Extracting":[44],"all":[45],"recognition-relevant":[46],"information":[47],"requires":[48],"complex":[50],"pipelines":[51],"an":[53,59,97,203],"ensemble":[54],"specialized":[56],"components.":[57],"Consequently,":[58],"attacker":[60,117],"needs":[61],"consider":[63],"entire":[65],"pipeline.":[66],"In":[67,107,173],"this":[68],"paper,":[69],"we":[70,88,113],"present":[71],"VENOMAVE,":[72],"first":[74],"training-time":[75],"poisoning":[76,148],"attack":[77,139,157,204],"against":[78],"recognition.":[80],"Similar":[81],"predominantly":[84],"studied":[85],"evasion":[86,110],"attacks,":[87,111],"pursue":[89],"same":[91],"goal:":[92],"leading":[93],"incorrect":[98],"attacker-chosen":[100],"transcription":[101],"target":[104,131,180],"audio":[105,132,181],"waveform.":[106],"contrast":[108],"however,":[112],"assume":[114],"can":[118],"only":[119],"manipulate":[120],"small":[122],"part":[123],"training":[126],"data":[127],"without":[128,164],"altering":[129],"waveform":[133,182],"at":[134],"runtime.":[135],"We":[136],"evaluate":[137],"our":[138],"on":[140],"two":[141,210],"datasets:":[142],"TIDIGITS":[143],"Speech":[145],"Commands.":[146],"When":[147],"less":[149],"than":[150,162],"0.17%":[151],"dataset,":[154],"VENOMAVE":[155,191,201],"achieves":[156,202],"success":[158,194],"rates":[159],"80.0%,":[163],"access":[165],"victim's":[168],"network":[169],"architecture":[170],"or":[171],"hyperparameters.":[172],"realistic":[176],"scenario,":[177],"when":[178],"played":[184],"over":[185],"air":[187],"in":[188],"different":[189,211],"rooms,":[190],"maintains":[192],"rate":[195,206],"up":[197],"73.3%.":[199],"Finally,":[200],"transferability":[205],"36.4%":[208],"between":[209],"model":[212],"architectures.":[213]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-09-30T09:27:27.532063","created_date":"2025-10-10T00:00:00"}