{"id":"https://openalex.org/W4361790909","doi":"https://doi.org/10.1145/3577530.3577574","title":"Decision-based adversarial attack for speaker recognition models","display_name":"Decision-based adversarial attack for speaker recognition models","publication_year":2022,"publication_date":"2022-12-09","ids":{"openalex":"https://openalex.org/W4361790909","doi":"https://doi.org/10.1145/3577530.3577574"},"language":"en","primary_location":{"id":"doi:10.1145/3577530.3577574","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3577530.3577574","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 6th International Conference on Computer Science and Artificial Intelligence","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080462619","display_name":"Xueyang Cao","orcid":"https://orcid.org/0000-0003-0178-2502"},"institutions":[{"id":"https://openalex.org/I34949971","display_name":"University of Jinan","ror":"https://ror.org/02mjz6f26","country_code":"CN","type":"education","lineage":["https://openalex.org/I34949971"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xueyang Cao","raw_affiliation_strings":["School of Information Science and Engineering, University of Jinan, China, China"],"raw_orcid":"https://orcid.org/0000-0003-0178-2502","affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, University of Jinan, China, China","institution_ids":["https://openalex.org/I34949971"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002028550","display_name":"Shanshan Wang","orcid":"https://orcid.org/0000-0002-8620-9766"},"institutions":[{"id":"https://openalex.org/I34949971","display_name":"University of Jinan","ror":"https://ror.org/02mjz6f26","country_code":"CN","type":"education","lineage":["https://openalex.org/I34949971"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shanshan Wang","raw_affiliation_strings":["School of Information Science and Engineering, University of Jinan, China, China"],"raw_orcid":"https://orcid.org/0000-0002-8620-9766","affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, University of Jinan, China, China","institution_ids":["https://openalex.org/I34949971"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013341598","display_name":"Zhenxiang Chen","orcid":"https://orcid.org/0000-0002-4948-3803"},"institutions":[{"id":"https://openalex.org/I34949971","display_name":"University of Jinan","ror":"https://ror.org/02mjz6f26","country_code":"CN","type":"education","lineage":["https://openalex.org/I34949971"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenxiang Chen","raw_affiliation_strings":["School of Information Science and Engineering, University of Jinan, China, China"],"raw_orcid":"https://orcid.org/0000-0002-4948-3803","affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, University of Jinan, China, China","institution_ids":["https://openalex.org/I34949971"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070296163","display_name":"Xiaoqing Jiang","orcid":"https://orcid.org/0000-0002-6132-4805"},"institutions":[{"id":"https://openalex.org/I34949971","display_name":"University of Jinan","ror":"https://ror.org/02mjz6f26","country_code":"CN","type":"education","lineage":["https://openalex.org/I34949971"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoqing Jiang","raw_affiliation_strings":["School of Information Science and Engineering, University of Jinan, China, China"],"raw_orcid":"https://orcid.org/0000-0002-6132-4805","affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, University of Jinan, China, China","institution_ids":["https://openalex.org/I34949971"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025676336","display_name":"Weiliang Zheng","orcid":"https://orcid.org/0000-0002-9682-6573"},"institutions":[{"id":"https://openalex.org/I34949971","display_name":"University of Jinan","ror":"https://ror.org/02mjz6f26","country_code":"CN","type":"education","lineage":["https://openalex.org/I34949971"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiliang Zheng","raw_affiliation_strings":["School of Information Science and Engineering, University of Jinan, China, China"],"raw_orcid":"https://orcid.org/0000-0002-9682-6573","affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, University of Jinan, China, China","institution_ids":["https://openalex.org/I34949971"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012385789","display_name":"Yadi Han","orcid":"https://orcid.org/0000-0002-1099-4649"},"institutions":[{"id":"https://openalex.org/I34949971","display_name":"University of Jinan","ror":"https://ror.org/02mjz6f26","country_code":"CN","type":"education","lineage":["https://openalex.org/I34949971"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yadi Han","raw_affiliation_strings":["School of Information Science and Engineering, University of Jinan, China, China"],"raw_orcid":"https://orcid.org/0000-0002-1099-4649","affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, University of Jinan, China, China","institution_ids":["https://openalex.org/I34949971"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.18270301,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"278","last_page":"283"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12072","display_name":"Machine Learning and Algorithms","score":0.9641000032424927,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.9577999711036682,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.783060610294342},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.7826392650604248},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7595880031585693},{"id":"https://openalex.org/keywords/speaker-recognition","display_name":"Speaker recognition","score":0.6888818740844727},{"id":"https://openalex.org/keywords/spoofing-attack","display_name":"Spoofing attack","score":0.6652485132217407},{"id":"https://openalex.org/keywords/biometrics","display_name":"Biometrics","score":0.6551740169525146},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.505746603012085},{"id":"https://openalex.org/keywords/speech-recognition","display_name":"Speech recognition","score":0.46776407957077026},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4561746120452881},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.43211886286735535},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.38723132014274597},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.31184035539627075}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.783060610294342},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.7826392650604248},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7595880031585693},{"id":"https://openalex.org/C133892786","wikidata":"https://www.wikidata.org/wiki/Q1145189","display_name":"Speaker recognition","level":2,"score":0.6888818740844727},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.6652485132217407},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.6551740169525146},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.505746603012085},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.46776407957077026},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4561746120452881},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.43211886286735535},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38723132014274597},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.31184035539627075},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3577530.3577574","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3577530.3577574","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 6th International Conference on Computer Science and Artificial Intelligence","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5799999833106995,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W2150769028","https://openalex.org/W2797978264","https://openalex.org/W2906208681","https://openalex.org/W2972986629","https://openalex.org/W2985451033","https://openalex.org/W3034678948","https://openalex.org/W3035172095","https://openalex.org/W3096023981","https://openalex.org/W3137249133","https://openalex.org/W3204362682","https://openalex.org/W3207651366","https://openalex.org/W6600075554","https://openalex.org/W6600175564","https://openalex.org/W6600655691","https://openalex.org/W6601945181","https://openalex.org/W6604190760"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2281508611","https://openalex.org/W2954943288","https://openalex.org/W4307079546","https://openalex.org/W4386875801","https://openalex.org/W4283317927","https://openalex.org/W3102631191","https://openalex.org/W4210531071","https://openalex.org/W3197739001","https://openalex.org/W4361790909"],"abstract_inverted_index":{"As":[0],"a":[1,79,142],"biometric":[2],"technology,":[3],"speaker":[4,38,55,152],"recognition":[5,24,39,56,153],"is":[6,108],"widely":[7],"used":[8],"in":[9,59],"finance,":[10],"criminal":[11],"investigation,":[12],"and":[13,20,31,88,118,147,159],"other":[14],"fields":[15],"due":[16],"to":[17,28,95,101],"its":[18],"convenience":[19],"high":[21,143,148],"accuracy.":[22],"Speaker":[23],"models":[25,40],"are":[26],"vulnerable":[27],"spoofing":[29],"attacks":[30,53],"adversarial":[32,52,104,166],"attacks.":[33,167],"Thus,":[34],"the":[35,50,61,66,70,92,103,106,112,120,128,132,151,163],"security":[36],"of":[37,69],"has":[41],"received":[42],"much":[43],"attention.":[44],"However,":[45],"few":[46],"works":[47],"focus":[48],"on":[49],"decision-based":[51,80,165],"for":[54,115,123],"systems":[57],"(SRS),":[58],"which":[60],"adversary":[62],"can":[63],"only":[64],"access":[65],"final":[67],"decisions":[68],"black-box":[71],"models.":[72],"In":[73],"this":[74],"paper,":[75],"we":[76],"proposed":[77],"Biased-Aha,":[78],"attack":[81,144],"method":[82],"that":[83,139],"combined":[84,126],"query":[85],"history":[86],"information":[87],"prior":[89],"gradient":[90,129],"from":[91,131],"substitution":[93,133],"model":[94],"launch":[96],"an":[97],"efficient":[98],"attack.":[99],"Specifically,":[100],"generate":[102],"example,":[105],"perturbation":[107],"determined":[109],"by":[110],"following":[111],"sampling":[113,121],"direction":[114,122,130],"successful":[116],"queries":[117],"avoiding":[119],"failed":[124],"queries,":[125],"with":[127],"model.":[134],"The":[135],"experiment":[136],"results":[137],"show":[138],"Biased-Aha":[140,161],"takes":[141],"success":[145],"rate":[146],"efficiency.":[149],"For":[150],"models,":[154],"Gaussian":[155],"Mixture":[156],"Models":[157],"(GMM)":[158],"ivector,":[160],"outperforms":[162],"state-of-the-art":[164]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}
