{"id":"https://openalex.org/W3163083600","doi":"https://doi.org/10.1109/icassp39728.2021.9413468","title":"Backdoor Attack Against Speaker Verification","display_name":"Backdoor Attack Against Speaker Verification","publication_year":2021,"publication_date":"2021-05-13","ids":{"openalex":"https://openalex.org/W3163083600","doi":"https://doi.org/10.1109/icassp39728.2021.9413468","mag":"3163083600"},"language":"en","primary_location":{"id":"doi:10.1109/icassp39728.2021.9413468","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp39728.2021.9413468","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2021 - 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007660859","display_name":"Tongqing Zhai","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tongqing Zhai","raw_affiliation_strings":["Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100346332","display_name":"Yiming Li","orcid":"https://orcid.org/0000-0002-2258-265X"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yiming Li","raw_affiliation_strings":["Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048558058","display_name":"Ziqi Zhang","orcid":"https://orcid.org/0000-0001-7000-3539"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziqi Zhang","raw_affiliation_strings":["Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068027800","display_name":"Baoyuan Wu","orcid":"https://orcid.org/0000-0003-2183-5990"},"institutions":[{"id":"https://openalex.org/I4210099586","display_name":"Shenzhen Research Institute of Big Data","ror":"https://ror.org/00z1gwf89","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210099586"]},{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Baoyuan Wu","raw_affiliation_strings":["The Chinese University of Hong Kong,School of Data Science,Shenzhen,China","School of Data Science, The Chinese University of Hong Kong, Shenzhen, China","Secure Computing Lab of Big Data, Shenzhen Research Institute of Big Data, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Chinese University of Hong Kong,School of Data Science,Shenzhen,China","institution_ids":["https://openalex.org/I4210116924"]},{"raw_affiliation_string":"School of Data Science, The Chinese University of Hong Kong, Shenzhen, China","institution_ids":["https://openalex.org/I4210116924"]},{"raw_affiliation_string":"Secure Computing Lab of Big Data, Shenzhen Research Institute of Big Data, Shenzhen, China","institution_ids":["https://openalex.org/I4210099586"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101626204","display_name":"Yong Jiang","orcid":"https://orcid.org/0000-0002-4260-1395"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Jiang","raw_affiliation_strings":["Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","PCL Research Center of Networks and Communications, Peng Cheng Laboratory, Shenzhen, China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"PCL Research Center of Networks and Communications, Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034104790","display_name":"Shu\u2010Tao Xia","orcid":"https://orcid.org/0000-0002-8639-982X"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shu-Tao Xia","raw_affiliation_strings":["Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","PCL Research Center of Networks and Communications, Peng Cheng Laboratory, Shenzhen, China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Tsinghua Shenzhen International Graduate School,Shenzhen,China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]},{"raw_affiliation_string":"PCL Research Center of Networks and Communications, Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":10.55,"has_fulltext":false,"cited_by_count":93,"citation_normalized_percentile":{"value":0.98843272,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"2560","last_page":"2564"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9865000247955322,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9779999852180481,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9429793357849121},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.844203531742096},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7320167422294617},{"id":"https://openalex.org/keywords/speaker-verification","display_name":"Speaker verification","score":0.714325487613678},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5020146369934082},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.4448961317539215},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.44433894753456116},{"id":"https://openalex.org/keywords/speaker-recognition","display_name":"Speaker recognition","score":0.35603398084640503},{"id":"https://openalex.org/keywords/speech-recognition","display_name":"Speech recognition","score":0.3034166693687439},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.180271178483963},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.16276952624320984}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9429793357849121},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.844203531742096},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7320167422294617},{"id":"https://openalex.org/C2982762665","wikidata":"https://www.wikidata.org/wiki/Q1145189","display_name":"Speaker verification","level":3,"score":0.714325487613678},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5020146369934082},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.4448961317539215},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.44433894753456116},{"id":"https://openalex.org/C133892786","wikidata":"https://www.wikidata.org/wiki/Q1145189","display_name":"Speaker recognition","level":2,"score":0.35603398084640503},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.3034166693687439},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.180271178483963},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.16276952624320984},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp39728.2021.9413468","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp39728.2021.9413468","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2021 - 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.41999998688697815,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W2045956438","https://openalex.org/W2062826588","https://openalex.org/W2064675550","https://openalex.org/W2114925438","https://openalex.org/W2748488820","https://openalex.org/W2890964092","https://openalex.org/W2916301830","https://openalex.org/W2938358845","https://openalex.org/W2942091739","https://openalex.org/W2962788625","https://openalex.org/W2973048981","https://openalex.org/W2981087920","https://openalex.org/W2985525390","https://openalex.org/W2993846550","https://openalex.org/W3008402854","https://openalex.org/W3015678314","https://openalex.org/W3016143998","https://openalex.org/W3041840141","https://openalex.org/W3042368254","https://openalex.org/W3093239278","https://openalex.org/W3102670879","https://openalex.org/W3111857723","https://openalex.org/W4287998266","https://openalex.org/W4300250944","https://openalex.org/W6742911084","https://openalex.org/W6769861357","https://openalex.org/W6770897281","https://openalex.org/W6775678023","https://openalex.org/W6780292011","https://openalex.org/W6784558051","https://openalex.org/W6787766505"],"related_works":["https://openalex.org/W66821593","https://openalex.org/W1521299571","https://openalex.org/W204267554","https://openalex.org/W2134501921","https://openalex.org/W4252590334","https://openalex.org/W2543777506","https://openalex.org/W2407001684","https://openalex.org/W3096066489","https://openalex.org/W3119184205","https://openalex.org/W2150532155"],"abstract_inverted_index":{"Speaker":[0],"verification":[1,19,75,107,125,176],"has":[2,130],"been":[3],"widely":[4],"and":[5],"successfully":[6,122],"adopted":[7,147],"in":[8,148],"many":[9],"mission-critical":[10],"areas":[11],"for":[12,72,160,171,180],"user":[13],"identification.":[14],"The":[15,109,178],"training":[16,80],"of":[17,24,47,106,175],"speaker":[18,74,150],"requires":[20],"a":[21,55,85,157,168],"large":[22],"amount":[23],"data,":[25],"therefore":[26],"users":[27],"usually":[28],"need":[29],"to":[30,67],"adopt":[31],"third-party":[32,40,51],"data":[33,35,41,52],"(e.g.,":[34],"from":[36,92],"the":[37,45,69,79,124,128,134,173],"Internet":[38],"or":[39],"company).":[42],"This":[43],"raises":[44],"question":[46],"whether":[48],"adopting":[49],"untrusted":[50],"can":[53],"pose":[54],"security":[56],"threat.":[57],"In":[58],"this":[59],"paper,":[60],"we":[61,83],"demonstrate":[62,139],"that":[63,140],"it":[64],"is":[65,184],"possible":[66],"inject":[68],"hidden":[70],"backdoor":[71],"infecting":[73],"models":[76,111],"by":[77],"poisoning":[78],"data.":[81],"Specifically,":[82],"design":[84],"clustering-based":[86],"attack":[87],"scheme":[88],"where":[89],"poisoned":[90],"samples":[91],"different":[93,97],"clusters":[94],"will":[95,121],"contain":[96],"triggers":[98,120],"(i.e.,":[99],"pre-defined":[100],"utterances),":[101],"based":[102],"on":[103,114],"our":[104],"understanding":[105],"tasks.":[108],"infected":[110],"behave":[112],"normally":[113],"benign":[115],"samples,":[116],"while":[117],"attacker-specified":[118],"unenrolled":[119],"pass":[123],"even":[126],"if":[127],"attacker":[129],"no":[131],"information":[132],"about":[133],"enrolled":[135],"speaker.":[136],"We":[137],"also":[138,165],"existing":[141],"back-door":[142],"attacks":[143],"cannot":[144],"be":[145],"directly":[146],"attacking":[149],"verification.":[151],"Our":[152],"approach":[153],"not":[154],"only":[155],"provides":[156],"new":[158],"perspective":[159],"designing":[161],"novel":[162],"attacks,":[163],"but":[164],"serves":[166],"as":[167],"strong":[169],"baseline":[170],"improving":[172],"robustness":[174],"methods.":[177],"code":[179],"reproducing":[181],"main":[182],"results":[183],"available":[185],"at":[186],"https://github.com/zhaitongqing233/Backdoor-attack-against-speaker-verification.":[187]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":18},{"year":2024,"cited_by_count":23},{"year":2023,"cited_by_count":25},{"year":2022,"cited_by_count":13},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}