{"id":"https://openalex.org/W4416046960","doi":"https://doi.org/10.1186/s42400-025-00374-5","title":"Electronic music assassin: towards imperceptible physical adversarial attacks against black-box automatic speech recognitions","display_name":"Electronic music assassin: towards imperceptible physical adversarial attacks against black-box automatic speech recognitions","publication_year":2025,"publication_date":"2025-11-09","ids":{"openalex":"https://openalex.org/W4416046960","doi":"https://doi.org/10.1186/s42400-025-00374-5"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-025-00374-5","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00374-5","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-025-00374-5","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-025-00374-5","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068531551","display_name":"Ruiyuan Li","orcid":"https://orcid.org/0000-0002-7111-4772"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Ruiyuan Li","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","Institute of Information Engineering, Chinese Academy of Sciences, Beijing, 100085, China","School of Cyber Security, University of Chinese Academy of Sciences, Beijing, 100049, China"],"raw_orcid":"https://orcid.org/0000-0002-7111-4772","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, 100085, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, 100049, China","institution_ids":["https://openalex.org/I4210165038"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5068531551"],"corresponding_institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404","https://openalex.org/I4210165038"],"apc_list":{"value":1230,"currency":"USD","value_usd":1230},"apc_paid":{"value":1230,"currency":"USD","value_usd":1230},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.121553,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"8","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9843000173568726,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9843000173568726,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10667","display_name":"Emotion and Mood Recognition","score":0.002099999925121665,"subfield":{"id":"https://openalex.org/subfields/3205","display_name":"Experimental and Cognitive Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0012000000569969416,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8375999927520752},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5164999961853027},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4165000021457672},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.414900004863739},{"id":"https://openalex.org/keywords/energy","display_name":"Energy (signal processing)","score":0.4032999873161316},{"id":"https://openalex.org/keywords/frequency-domain","display_name":"Frequency domain","score":0.3959999978542328},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.37400001287460327},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.3506999909877777}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8375999927520752},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7235000133514404},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.6055999994277954},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5164999961853027},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4165000021457672},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.414900004863739},{"id":"https://openalex.org/C186370098","wikidata":"https://www.wikidata.org/wiki/Q442787","display_name":"Energy (signal processing)","level":2,"score":0.4032999873161316},{"id":"https://openalex.org/C19118579","wikidata":"https://www.wikidata.org/wiki/Q786423","display_name":"Frequency domain","level":2,"score":0.3959999978542328},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.382099986076355},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.37400001287460327},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.3506999909877777},{"id":"https://openalex.org/C198082294","wikidata":"https://www.wikidata.org/wiki/Q3399648","display_name":"Position (finance)","level":2,"score":0.31540000438690186},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.3100000023841858},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.3012999892234802},{"id":"https://openalex.org/C4069607","wikidata":"https://www.wikidata.org/wiki/Q868732","display_name":"Aliasing","level":3,"score":0.28850001096725464},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.2874999940395355},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.27810001373291016},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2775000035762787},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.27300000190734863},{"id":"https://openalex.org/C2776608160","wikidata":"https://www.wikidata.org/wiki/Q4785462","display_name":"Natural (archaeology)","level":2,"score":0.25209999084472656},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2517000138759613}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-025-00374-5","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00374-5","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-025-00374-5","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:beb1cb594f20407e8d0178d1ad02ca46","is_oa":true,"landing_page_url":"https://doaj.org/article/beb1cb594f20407e8d0178d1ad02ca46","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 8, Iss 1, Pp 1-22 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-025-00374-5","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00374-5","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-025-00374-5","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416046960.pdf","grobid_xml":"https://content.openalex.org/works/W4416046960.grobid-xml"},"referenced_works_count":54,"referenced_works":["https://openalex.org/W158259177","https://openalex.org/W1575800622","https://openalex.org/W2009674825","https://openalex.org/W2012582764","https://openalex.org/W2022217943","https://openalex.org/W2022635353","https://openalex.org/W2024514452","https://openalex.org/W2047094503","https://openalex.org/W2076933304","https://openalex.org/W2096133334","https://openalex.org/W2120847449","https://openalex.org/W2125537450","https://openalex.org/W2127141656","https://openalex.org/W2143612262","https://openalex.org/W2145487065","https://openalex.org/W2160815625","https://openalex.org/W2164693228","https://openalex.org/W2168267199","https://openalex.org/W2207618852","https://openalex.org/W2243397390","https://openalex.org/W2617258110","https://openalex.org/W2624801495","https://openalex.org/W2746600820","https://openalex.org/W2748829701","https://openalex.org/W2787752687","https://openalex.org/W2898435086","https://openalex.org/W2933426098","https://openalex.org/W2954718360","https://openalex.org/W2963058500","https://openalex.org/W2963077926","https://openalex.org/W2963414781","https://openalex.org/W2963857521","https://openalex.org/W2964301649","https://openalex.org/W2969908034","https://openalex.org/W2972986629","https://openalex.org/W2973252307","https://openalex.org/W3006816054","https://openalex.org/W3015241525","https://openalex.org/W3088377098","https://openalex.org/W3091896612","https://openalex.org/W3109354406","https://openalex.org/W3110715780","https://openalex.org/W3147254695","https://openalex.org/W3153453329","https://openalex.org/W3207651366","https://openalex.org/W4232313832","https://openalex.org/W4252877946","https://openalex.org/W4298255709","https://openalex.org/W4300293005","https://openalex.org/W4300672471","https://openalex.org/W4300824008","https://openalex.org/W4312275241","https://openalex.org/W4366593807","https://openalex.org/W4385822407"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Speech":[1],"recognition":[2,26,50,225],"technology":[3],"has":[4,14],"brought":[5],"revolutionary":[6],"changes":[7],"to":[8,23,64,121,178,199,249,280],"our":[9,218,298],"lives,":[10],"but":[11],"existing":[12,29,282],"work":[13],"demonstrated":[15],"the":[16,49,65,77,83,86,89,103,123,150,155,160,165,170,180,181,189,195,200,238,245,250,270,281,304,314],"feasibility":[17],"of":[18,169,194,264],"using":[19],"adversarial":[20,30,139,157,196],"examples":[21],"(AEs)":[22],"mislead":[24],"speech":[25,224],"systems.":[27,143],"Most":[28],"attacks":[31],"are":[32,41,256,289,311],"designed":[33],"for":[34,129,206],"white-box":[35],"or":[36],"grey-box":[37],"systems":[38,226],"and":[39,80,88,111,125,163,192,214,230,243,267,300,309],"they":[40,81,95,107],"ineffective":[42],"against":[43,141],"strict":[44],"black-box":[45,57,142,223,252],"scenarios":[46],"where":[47],"only":[48,275,284],"results":[51],"can":[52,126,236],"be":[53,98,127],"queried.":[54],"The":[55,113,307],"known":[56],"attack":[58,105,140,240],"methods":[59],"all":[60],"add":[61],"perturbations":[62,87,148],"limited":[63],"bounded":[66],"$$L_{p}$$":[67],"<mml:math":[68],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\">":[69],"<mml:msub>":[70],"<mml:mi>L</mml:mi>":[71],"<mml:mi>p</mml:mi>":[72],"</mml:msub>":[73],"</mml:math>":[74],"neighborhood":[75],"in":[76,116,149,159,174,262,269,303],"time":[78,151],"domain":[79,162],"neglected":[82],"relationship":[84],"between":[85,297],"carrier":[90,171],"audios.":[91],"Therefore,":[92],"although":[93],"AEs":[94,210,235,255,288,299],"generated":[96],"cannot":[97],"recognized":[99],"by":[100],"humans":[101],"as":[102],"target":[104],"commands,":[106],"sound":[108,212],"very":[109],"unnatural":[110],"unsmooth.":[112],"abnormal":[114],"sense":[115],"auditory":[117,265],"perception":[118],"is":[119,208],"easy":[120],"alarm":[122],"victim":[124],"used":[128],"defense.":[130],"To":[131],"address":[132],"this":[133],"limitation,":[134],"we":[135,153,186],"propose":[136],"a":[137,175],"novel":[138],"Unlike":[144],"previous":[145],"works":[146],"adding":[147],"domain,":[152],"extract":[154],"effective":[156],"feature":[158,197],"frequency":[161],"modify":[164],"spectral":[166],"energy":[167],"distribution":[168],"electronic":[172],"music":[173,261,302],"smooth":[176],"way":[177],"maintain":[179],"carriers\u2019":[182],"original":[183],"timbre.":[184],"Meanwhile,":[185],"dynamically":[187],"adjust":[188],"insert":[190],"position":[191],"duration":[193],"according":[198],"music\u2019s":[201],"rhythm.":[202],"Our":[203,234,254],"higher":[204],"requirement":[205],"imperceptibility":[207,247],"that":[209],"should":[211],"natural":[213],"smooth.":[215],"We":[216],"evaluated":[217],"method":[219],"on":[220,257],"eight":[221],"commercial":[222],"(including":[227],"five":[228],"digital":[229,271],"three":[231],"physical":[232,305],"systems).":[233],"achieved":[237],"100%":[239],"success":[241],"rate":[242],"have":[244],"outstanding":[246],"compared":[248],"state-of-the-art":[251],"attacks.":[253],"par":[258],"with":[259],"normal":[260,301],"terms":[263],"naturalness":[266],"smoothness":[268],"world,":[272],"which":[273],"requires":[274],"about":[276],"500":[277],"queries.":[278],"Compared":[279],"works,":[283],"7.9%":[285],"think":[286],"their":[287],"normal,":[290],"at":[291,313],"least":[292],"52.1%":[293],"could":[294],"not":[295],"distinguish":[296],"world.":[306],"demos":[308],"code":[310],"available":[312],"open":[315],"source":[316],"repository":[317],"https://github.com/Cybersecurity-Electronic-Music-Assassin/Electronic-Music-Assassin.git.":[318]},"counts_by_year":[],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-11-09T00:00:00"}