{"id":"https://openalex.org/W4372346622","doi":"https://doi.org/10.1109/icassp49357.2023.10094675","title":"Backdoor Attack Against Automatic Speaker Verification Models in Federated Learning","display_name":"Backdoor Attack Against Automatic Speaker Verification Models in Federated Learning","publication_year":2023,"publication_date":"2023-05-05","ids":{"openalex":"https://openalex.org/W4372346622","doi":"https://doi.org/10.1109/icassp49357.2023.10094675"},"language":"en","primary_location":{"id":"doi:10.1109/icassp49357.2023.10094675","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49357.2023.10094675","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101525319","display_name":"Dan Meng","orcid":"https://orcid.org/0000-0003-1980-9283"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dan Meng","raw_affiliation_strings":["OPPO Research Institure"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"OPPO Research Institure","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115602598","display_name":"Xue Wang","orcid":"https://orcid.org/0000-0002-9366-8960"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xue Wang","raw_affiliation_strings":["Wuhan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054789987","display_name":"Jun Wang","orcid":"https://orcid.org/0000-0002-3392-1020"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jun Wang","raw_affiliation_strings":["OPPO Research Institure"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"OPPO Research Institure","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11609","display_name":"Geophysical Methods and Applications","score":0.975600004196167,"subfield":{"id":"https://openalex.org/subfields/2212","display_name":"Ocean Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.9646999835968018,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9519091248512268},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8528627157211304},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5553292632102966},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4994993209838867},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.48589199781417847},{"id":"https://openalex.org/keywords/data-verification","display_name":"Data verification","score":0.4627087116241455},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3248121738433838},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3075619041919708}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9519091248512268},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8528627157211304},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5553292632102966},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4994993209838867},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.48589199781417847},{"id":"https://openalex.org/C49895821","wikidata":"https://www.wikidata.org/wiki/Q5227368","display_name":"Data verification","level":2,"score":0.4627087116241455},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3248121738433838},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3075619041919708},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icassp49357.2023.10094675","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp49357.2023.10094675","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.49000000953674316}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W2045956438","https://openalex.org/W2062826588","https://openalex.org/W2114925438","https://openalex.org/W2132914434","https://openalex.org/W2283463896","https://openalex.org/W2748488820","https://openalex.org/W2810065831","https://openalex.org/W2903356604","https://openalex.org/W2916301830","https://openalex.org/W2962788625","https://openalex.org/W2972892026","https://openalex.org/W3016143998","https://openalex.org/W3091870957","https://openalex.org/W3138153888","https://openalex.org/W3158424777","https://openalex.org/W3163083600","https://openalex.org/W3213348952","https://openalex.org/W4226255887","https://openalex.org/W4318619660","https://openalex.org/W6695838908","https://openalex.org/W6728757088","https://openalex.org/W6752600739","https://openalex.org/W6756840679","https://openalex.org/W6811023314"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W3015678314","https://openalex.org/W4281902577","https://openalex.org/W4200629851","https://openalex.org/W3009072493","https://openalex.org/W4386185023","https://openalex.org/W4317672133","https://openalex.org/W3140988292","https://openalex.org/W4386080799","https://openalex.org/W2187154034"],"abstract_inverted_index":{"Speaker":[0],"verification":[1,27,88,108,149],"has":[2],"been":[3],"widely":[4],"and":[5,33,74,172,204],"successfully":[6],"adopted":[7],"in":[8,151,220,229],"many":[9],"mission-critical":[10],"fields":[11],"for":[12,104,153],"user":[13],"identification.":[14],"Similar":[15],"to":[16,53,66,123,187,216],"other":[17,49,221],"classical":[18],"machine":[19],"learning":[20,98],"tasks,":[21],"the":[22,31,46,57,83,86,106,140,145,154,158,168,196,199,224,234],"training":[23,58,105,159,177],"performance":[24],"of":[25,35,85,137,139,147,161,167,170,226],"speaker":[26,87,107,148],"relies":[28],"heavily":[29],"on":[30,233],"number":[32],"diversity":[34],"data.":[36,208],"Therefore":[37],"third-party":[38,79],"data":[39,41,69,72,80,112],"(e.g.":[40],"from":[42,113],"public":[43],"dataset":[44,236],"benchmarks,":[45],"Internet":[47],"or":[48],"cooperating":[50],"companies)":[51],"need":[52],"be":[54],"included":[55],"during":[56],"process.":[59],"This":[60],"raises":[61],"two":[62,175],"major":[63],"questions:":[64],"How":[65],"use":[67,166],"multi-party":[68],"while":[70],"ensuring":[71],"security":[73,84,146],"privacy?":[75],"Whether":[76],"adopting":[77],"entrusted":[78],"can":[81,201,242],"threaten":[82],"model?":[89],"In":[90],"this":[91],"paper,":[92],"we":[93,143,163,180],"first":[94,155],"demonstrate":[95],"that":[96,119,198,238],"federated":[97],"(FL)":[99],"provides":[100],"an":[101,252],"alternative":[102],"way":[103],"model":[109],"without":[110],"collecting":[111],"multi-parties":[114],"together.":[115],"We":[116,209],"then":[117],"validate":[118],"it":[120],"is":[121],"possible":[122],"perform":[124],"backdoor":[125,227],"attack":[126,228,247],"under":[127],"a":[128,174],"looser":[129],"threat":[130],"assumption,":[131],"namely":[132],"poisoning":[133],"partial":[134],"speakers":[135],"instead":[136],"all":[138],"speakers.":[141],"Specifically,":[142],"study":[144],"models":[150],"FL":[152],"time.":[156],"During":[157],"process":[160],"FL,":[162,171],"make":[164],"full":[165],"advantages":[169],"design":[173],"stage":[176],"strategy.":[178],"Besides,":[179],"propose":[181],"Global":[182],"Spectral":[183],"Cluster":[184],"(GSC)":[185],"method":[186],"alleviate":[188],"insufficient":[189],"trigger":[190],"generalization":[191],"problem,":[192],"which":[193],"cased":[194],"by":[195],"constrain":[197],"attacker":[200],"only":[202,244],"reach":[203],"poison":[205],"its":[206],"own":[207],"also":[210,250],"adopt":[211],"Personalized":[212],"Federated":[213],"Aggregation":[214],"(PFAgg)":[215],"avoid":[217],"modeling":[218],"pollution":[219],"parties,":[222],"enhancing":[223],"invisibility":[225],"FL.":[230],"Experimental":[231],"results":[232],"TIMIT":[235],"show":[237],"our":[239],"proposed":[240],"framework":[241],"not":[243],"achieve":[245],"satisfying":[246],"results,":[248],"but":[249],"have":[251],"acceptable":[253],"error":[254],"rate.":[255]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
