{"id":"https://openalex.org/W3091539257","doi":"https://doi.org/10.1109/ijcnn48605.2020.9206986","title":"Detecting Adversarial Audio via Activation Quantization Error","display_name":"Detecting Adversarial Audio via Activation Quantization Error","publication_year":2020,"publication_date":"2020-07-01","ids":{"openalex":"https://openalex.org/W3091539257","doi":"https://doi.org/10.1109/ijcnn48605.2020.9206986","mag":"3091539257"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn48605.2020.9206986","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn48605.2020.9206986","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100392542","display_name":"Heng Liu","orcid":"https://orcid.org/0000-0003-3923-7526"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Heng Liu","raw_affiliation_strings":["Department of Electrical Engineering, The University of Arizona, Tucson, AZ, USA"],"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering, The University of Arizona, Tucson, AZ, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079638101","display_name":"Gregory Ditzler","orcid":"https://orcid.org/0000-0001-6890-0935"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gregory Ditzler","raw_affiliation_strings":["Department of Electrical Engineering, The University of Arizona, Tucson, AZ, USA"],"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering, The University of Arizona, Tucson, AZ, USA","institution_ids":["https://openalex.org/I138006243"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5100392542"],"corresponding_institution_ids":["https://openalex.org/I138006243"],"apc_list":null,"apc_paid":null,"fwci":0.5302,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.73184818,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"18","issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9837999939918518,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9553999900817871,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7753939032554626},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7320870757102966},{"id":"https://openalex.org/keywords/quantization","display_name":"Quantization (signal processing)","score":0.6757710576057434},{"id":"https://openalex.org/keywords/speech-recognition","display_name":"Speech recognition","score":0.6118504405021667},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5384860038757324},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.518210232257843},{"id":"https://openalex.org/keywords/word-error-rate","display_name":"Word error rate","score":0.48780301213264465},{"id":"https://openalex.org/keywords/vector-quantization","display_name":"Vector quantization","score":0.4315229058265686},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.38782232999801636},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.32515695691108704},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.21419724822044373}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7753939032554626},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7320870757102966},{"id":"https://openalex.org/C28855332","wikidata":"https://www.wikidata.org/wiki/Q198099","display_name":"Quantization (signal processing)","level":2,"score":0.6757710576057434},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.6118504405021667},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5384860038757324},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.518210232257843},{"id":"https://openalex.org/C40969351","wikidata":"https://www.wikidata.org/wiki/Q3516228","display_name":"Word error rate","level":2,"score":0.48780301213264465},{"id":"https://openalex.org/C199833920","wikidata":"https://www.wikidata.org/wiki/Q612536","display_name":"Vector quantization","level":2,"score":0.4315229058265686},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.38782232999801636},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32515695691108704},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.21419724822044373},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn48605.2020.9206986","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn48605.2020.9206986","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities","score":0.6100000143051147}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1901129140","https://openalex.org/W1922655562","https://openalex.org/W1945616565","https://openalex.org/W2013305145","https://openalex.org/W2119112357","https://openalex.org/W2160815625","https://openalex.org/W2163605009","https://openalex.org/W2184045248","https://openalex.org/W2194775991","https://openalex.org/W2217248474","https://openalex.org/W2503523779","https://openalex.org/W2524428287","https://openalex.org/W2560017826","https://openalex.org/W2586654419","https://openalex.org/W2594717275","https://openalex.org/W2766839578","https://openalex.org/W2782403400","https://openalex.org/W2892852825","https://openalex.org/W2898435086","https://openalex.org/W2906211136","https://openalex.org/W2936538270","https://openalex.org/W2963207607","https://openalex.org/W2963424132","https://openalex.org/W2963969878","https://openalex.org/W2964097310","https://openalex.org/W2964153729","https://openalex.org/W2964301649","https://openalex.org/W2964311653","https://openalex.org/W2973252307","https://openalex.org/W4251100635","https://openalex.org/W4300725094","https://openalex.org/W6637162671","https://openalex.org/W6639824700","https://openalex.org/W6640090968","https://openalex.org/W6640425456","https://openalex.org/W6684191040","https://openalex.org/W6688549366","https://openalex.org/W6725195833","https://openalex.org/W6727208969","https://openalex.org/W6730047919","https://openalex.org/W6745499037","https://openalex.org/W6746882984","https://openalex.org/W6754602573"],"related_works":["https://openalex.org/W4311734044","https://openalex.org/W4304891817","https://openalex.org/W3035729345","https://openalex.org/W3193857078","https://openalex.org/W3208304128","https://openalex.org/W4306177400","https://openalex.org/W4287549955","https://openalex.org/W2952919291","https://openalex.org/W4292267426","https://openalex.org/W3091539257"],"abstract_inverted_index":{"The":[0,155],"robustness":[1],"and":[2,29,112],"vulnerability":[3,40],"of":[4,15,56],"Deep":[5],"Neural":[6],"Networks":[7],"(DNN)":[8],"are":[9,20],"quickly":[10],"becoming":[11],"a":[12,110,135,147],"critical":[13],"area":[14],"interest":[16],"since":[17],"these":[18],"models":[19,76],"in":[21,168],"widespread":[22],"use":[23,165],"across":[24],"real-world":[25],"applications":[26],"(i.e.,":[27],"image":[28,63],"audio":[30,70,74,84,103,132,144,178],"analysis,":[31,36],"recommendation":[32],"system,":[33],"natural":[34],"language":[35],"etc.).":[37,93],"A":[38],"DNN's":[39,136],"is":[41,99,158],"exploited":[42],"by":[43,133],"an":[44,127],"adversary":[45],"to":[46,49,79,82,100,117,129,170],"generate":[47],"data":[48,58],"attack":[50,179],"the":[51,54,166,182,193],"model;":[52],"however,":[53],"majority":[55],"adversarial":[57,83,102,119,131,143,172],"generators":[59],"have":[60],"focused":[61],"on":[62,69,192],"domains":[64],"with":[65,175],"far":[66],"fewer":[67],"work":[68],"domains.":[71],"More":[72],"recently,":[73],"analysis":[75],"were":[77],"shown":[78],"be":[80],"vulnerable":[81],"examples":[85],"(e.g.,":[86],"speech":[87,91],"command":[88],"classification,":[89],"automatic":[90],"recognition,":[92],"Thus,":[94],"one":[95],"urgent":[96],"open":[97],"problem":[98],"detect":[101,118,130],"reliably.":[104],"In":[105],"this":[106],"contribution,":[107],"we":[108,125,140],"incorporate":[109],"separate":[111],"yet":[113],"related":[114],"DNN":[115],"technique":[116],"audio,":[120],"namely":[121],"model":[122,184],"quantization.":[123],"Then":[124],"propose":[126],"algorithm":[128,188],"using":[134,160],"quantization":[137,150,156],"error.":[138],"Specifically,":[139],"demonstrate":[141],"that":[142],"typically":[145],"exhibits":[146],"larger":[148],"activation":[149],"error":[151,157,162],"than":[152],"benign":[153],"audio.":[154,173],"measured":[159],"character":[161],"rates.":[163],"We":[164],"difference":[167],"errors":[169],"discriminate":[171],"Experiments":[174],"three":[176],"the-state-of-the-art":[177],"algorithms":[180],"against":[181],"DeepSpeech":[183],"show":[185],"our":[186],"detection":[187],"achieved":[189],"high":[190],"accuracy":[191],"Mozilla":[194],"dataset.":[195]},"counts_by_year":[{"year":2023,"cited_by_count":3},{"year":2021,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}