{"id":"https://openalex.org/W4313387422","doi":"https://doi.org/10.1109/tifs.2022.3222963","title":"Query-Efficient Adversarial Attack With Low Perturbation Against End-to-End Speech Recognition Systems","display_name":"Query-Efficient Adversarial Attack With Low Perturbation Against End-to-End Speech Recognition Systems","publication_year":2022,"publication_date":"2022-11-17","ids":{"openalex":"https://openalex.org/W4313387422","doi":"https://doi.org/10.1109/tifs.2022.3222963"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2022.3222963","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3222963","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100377071","display_name":"Shen Wang","orcid":"https://orcid.org/0000-0002-5748-5438"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shen Wang","raw_affiliation_strings":["School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China"],"raw_orcid":"https://orcid.org/0000-0002-5748-5438","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100751311","display_name":"Zhaoyang Zhang","orcid":"https://orcid.org/0000-0003-2346-6228"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaoyang Zhang","raw_affiliation_strings":["School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091556887","display_name":"Guopu Zhu","orcid":"https://orcid.org/0000-0001-7956-5343"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guopu Zhu","raw_affiliation_strings":["School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China"],"raw_orcid":"https://orcid.org/0000-0001-7956-5343","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101889358","display_name":"Xinpeng Zhang","orcid":"https://orcid.org/0000-0002-0212-3501"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinpeng Zhang","raw_affiliation_strings":["School of Computer Science, Fudan University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-0212-3501","affiliations":[{"raw_affiliation_string":"School of Computer Science, Fudan University, Shanghai, China","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009595085","display_name":"Yicong Zhou","orcid":"https://orcid.org/0000-0002-4487-6384"},"institutions":[{"id":"https://openalex.org/I204512498","display_name":"University of Macau","ror":"https://ror.org/01r4q9n85","country_code":"MO","type":"education","lineage":["https://openalex.org/I204512498"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Yicong Zhou","raw_affiliation_strings":["Department of Computer and Information Science, University of Macau, Taipa, Macau"],"raw_orcid":"https://orcid.org/0000-0002-4487-6384","affiliations":[{"raw_affiliation_string":"Department of Computer and Information Science, University of Macau, Taipa, Macau","institution_ids":["https://openalex.org/I204512498"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047964483","display_name":"Jiwu Huang","orcid":"https://orcid.org/0000-0002-7625-5689"},"institutions":[{"id":"https://openalex.org/I180726961","display_name":"Shenzhen University","ror":"https://ror.org/01vy4gh70","country_code":"CN","type":"education","lineage":["https://openalex.org/I180726961"]},{"id":"https://openalex.org/I4210104064","display_name":"Shenzhen Academy of Robotics","ror":"https://ror.org/01h027j09","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210104064"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiwu Huang","raw_affiliation_strings":["Guangdong Key Laboratory of Intelligent Information Processing, Shenzhen Key Laboratory of Media Security, Shenzhen University, Shenzhen, China","Shenzhen Institute of Artificial Intelligence and Robotics for Society, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0002-7625-5689","affiliations":[{"raw_affiliation_string":"Guangdong Key Laboratory of Intelligent Information Processing, Shenzhen Key Laboratory of Media Security, Shenzhen University, Shenzhen, China","institution_ids":["https://openalex.org/I180726961"]},{"raw_affiliation_string":"Shenzhen Institute of Artificial Intelligence and Robotics for Society, Shenzhen, China","institution_ids":["https://openalex.org/I4210104064"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.2516,"has_fulltext":false,"cited_by_count":31,"citation_normalized_percentile":{"value":0.92903285,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"18","issue":null,"first_page":"351","last_page":"364"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9929999709129333,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9853000044822693,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8490685224533081},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5343626737594604},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.52220219373703},{"id":"https://openalex.org/keywords/speech-recognition","display_name":"Speech recognition","score":0.47676926851272583},{"id":"https://openalex.org/keywords/monte-carlo-method","display_name":"Monte Carlo method","score":0.4355732500553131},{"id":"https://openalex.org/keywords/inefficiency","display_name":"Inefficiency","score":0.4137040674686432},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3321838974952698},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.30361950397491455}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8490685224533081},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5343626737594604},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.52220219373703},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.47676926851272583},{"id":"https://openalex.org/C19499675","wikidata":"https://www.wikidata.org/wiki/Q232207","display_name":"Monte Carlo method","level":2,"score":0.4355732500553131},{"id":"https://openalex.org/C2778869765","wikidata":"https://www.wikidata.org/wiki/Q6028363","display_name":"Inefficiency","level":2,"score":0.4137040674686432},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3321838974952698},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30361950397491455},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2022.3222963","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2022.3222963","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.8199999928474426,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1638665907","display_name":null,"funder_award_id":"MYRG2022-00072-FST","funder_id":"https://openalex.org/F4320322841","funder_display_name":"Universidade de Macau"},{"id":"https://openalex.org/G1961232708","display_name":null,"funder_award_id":"U22B2047","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2060695898","display_name":null,"funder_award_id":"62172402","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2429589907","display_name":null,"funder_award_id":"U1936214","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3171208677","display_name":null,"funder_award_id":"FRFCU5710011322","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G4871455045","display_name":null,"funder_award_id":"U19B2022","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5803342146","display_name":null,"funder_award_id":"JCKY2018603B006","funder_id":"https://openalex.org/F4320335833","funder_display_name":"National Defense Basic Scientific Research Program of China"},{"id":"https://openalex.org/G7809598670","display_name":"\u56fe\u50cf\u9510\u5316\u68c0\u6d4b\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"61872350","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322841","display_name":"Universidade de Macau","ror":"https://ror.org/01r4q9n85"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null},{"id":"https://openalex.org/F4320335833","display_name":"National Defense Basic Scientific Research Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":71,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W1494198834","https://openalex.org/W1673923490","https://openalex.org/W1922655562","https://openalex.org/W1945616565","https://openalex.org/W2073107347","https://openalex.org/W2126316555","https://openalex.org/W2127141656","https://openalex.org/W2161632769","https://openalex.org/W2180612164","https://openalex.org/W2186241545","https://openalex.org/W2243397390","https://openalex.org/W2257979135","https://openalex.org/W2399790246","https://openalex.org/W2535873859","https://openalex.org/W2570685808","https://openalex.org/W2594717275","https://openalex.org/W2603766943","https://openalex.org/W2746600820","https://openalex.org/W2766447205","https://openalex.org/W2770312844","https://openalex.org/W2782403400","https://openalex.org/W2794995252","https://openalex.org/W2885407017","https://openalex.org/W2895097814","https://openalex.org/W2923292931","https://openalex.org/W2941750187","https://openalex.org/W2962717526","https://openalex.org/W2962824709","https://openalex.org/W2962909949","https://openalex.org/W2963058500","https://openalex.org/W2963062382","https://openalex.org/W2963542245","https://openalex.org/W2963827914","https://openalex.org/W2963857521","https://openalex.org/W2963859254","https://openalex.org/W2964097310","https://openalex.org/W2964227577","https://openalex.org/W2964301649","https://openalex.org/W2965116050","https://openalex.org/W2966344125","https://openalex.org/W2969249185","https://openalex.org/W2973252307","https://openalex.org/W2989847975","https://openalex.org/W2997395473","https://openalex.org/W2998347911","https://openalex.org/W3024608270","https://openalex.org/W3088377098","https://openalex.org/W3091896612","https://openalex.org/W3096023981","https://openalex.org/W3103836116","https://openalex.org/W3106412272","https://openalex.org/W3109931032","https://openalex.org/W3118210634","https://openalex.org/W3188275726","https://openalex.org/W3201280301","https://openalex.org/W3207651366","https://openalex.org/W3209050974","https://openalex.org/W4212822688","https://openalex.org/W6637162671","https://openalex.org/W6640090968","https://openalex.org/W6640425456","https://openalex.org/W6731927902","https://openalex.org/W6736092963","https://openalex.org/W6746295503","https://openalex.org/W6746882984","https://openalex.org/W6748288002","https://openalex.org/W6750404860","https://openalex.org/W6760326341","https://openalex.org/W6766401332","https://openalex.org/W6777342446"],"related_works":["https://openalex.org/W2264067234","https://openalex.org/W2502115930","https://openalex.org/W3124243301","https://openalex.org/W1571502335","https://openalex.org/W1589409554","https://openalex.org/W2759038785","https://openalex.org/W2172232600","https://openalex.org/W2482350142","https://openalex.org/W3009622996","https://openalex.org/W3037859390"],"abstract_inverted_index":{"With":[0],"the":[1,47,50,55,61,65,73,93,116,132,136,143,158,169,174,177,182,199,209,212,222],"widespread":[2],"use":[3],"of":[4,49,57,60,72,135,150,160,171,176,215],"automated":[5],"speech":[6],"recognition":[7],"(ASR)":[8],"systems":[9,17,80],"in":[10,23,35,67],"modern":[11],"consumer":[12],"devices,":[13],"attack":[14,29,76,91,98,195],"against":[15],"ASR":[16,79,161],"have":[18,31,154],"become":[19],"an":[20,111],"attractive":[21],"topic":[22],"recent":[24],"years.":[25],"Although":[26],"related":[27],"white-box":[28],"methods":[30,77],"achieved":[32],"remarkable":[33],"success":[34,196],"fooling":[36],"neural":[37],"networks,":[38],"they":[39],"rely":[40],"heavily":[41],"on":[42,115,157,181,198],"obtaining":[43],"full":[44],"access":[45],"to":[46,54,100,131,142,167],"details":[48],"target":[51],"models.":[52],"Due":[53],"lack":[56],"prior":[58],"knowledge":[59],"victim":[62],"model":[63],"and":[64,173,193,201,221],"inefficiency":[66],"utilizing":[68],"query":[69,129],"results,":[70],"most":[71],"existing":[74],"black-box":[75,90],"for":[78],"are":[81,165],"query-intensive.":[82],"In":[83],"this":[84],"paper,":[85],"we":[86],"propose":[87],"a":[88,120,147],"new":[89],"called":[92],"Monte":[94,121],"Carlo":[95,122],"gradient":[96,138],"sign":[97],"(MGSA)":[99],"generate":[101],"adversarial":[102,179],"audio":[103],"samples":[104],"with":[105,208],"substantially":[106],"fewer":[107],"queries.":[108],"It":[109],"updates":[110],"original":[112],"sample":[113,153],"based":[114],"elements":[117,149],"obtained":[118],"by":[119,219,227],"tree":[123],"search.":[124],"We":[125],"attribute":[126],"its":[127],"high":[128],"efficiency":[130,170],"effective":[133],"utilization":[134],"dominant":[137],"phenomenon,":[139],"which":[140],"refers":[141],"fact":[144],"that":[145,189],"only":[146],"few":[148],"each":[151],"origin":[152],"significant":[155],"effect":[156],"output":[159],"systems.":[162],"Extensive":[163],"experiments":[164],"performed":[166],"evaluate":[168],"MGSA":[172,190],"stealthiness":[175],"generated":[178],"examples":[180],"DeepSpeech":[183],"system.":[184],"The":[185],"experimental":[186],"results":[187],"show":[188],"achieves":[191],"98%":[192],"99%":[194],"rates":[197],"LibriSpeech":[200],"Mozilla":[202],"Common":[203],"Voice":[204],"datasets,":[205],"respectively.":[206],"Compared":[207],"state-of-the-art":[210],"methods,":[211],"average":[213],"number":[214],"queries":[216],"is":[217,225],"reduced":[218],"27%":[220],"signal-to-noise":[223],"ratio":[224],"increased":[226],"31%.":[228]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":7}],"updated_date":"2026-08-02T14:50:37.381335","created_date":"2025-10-10T00:00:00"}