{"id":"https://openalex.org/W3096171739","doi":"https://doi.org/10.21437/interspeech.2020-2026","title":"Defense for Black-Box Attacks on Anti-Spoofing Models by Self-Supervised Learning","display_name":"Defense for Black-Box Attacks on Anti-Spoofing Models by Self-Supervised Learning","publication_year":2020,"publication_date":"2020-10-25","ids":{"openalex":"https://openalex.org/W3096171739","doi":"https://doi.org/10.21437/interspeech.2020-2026","mag":"3096171739"},"language":"en","primary_location":{"id":"doi:10.21437/interspeech.2020-2026","is_oa":false,"landing_page_url":"https://doi.org/10.21437/interspeech.2020-2026","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Interspeech 2020","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101474128","display_name":"Haibin Wu","orcid":"https://orcid.org/0000-0001-7166-5534"},"institutions":[{"id":"https://openalex.org/I16733864","display_name":"National Taiwan University","ror":"https://ror.org/05bqach95","country_code":"TW","type":"education","lineage":["https://openalex.org/I16733864"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Haibin Wu","raw_affiliation_strings":["Graduate Institute of Communication Engineering, National Taiwan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate Institute of Communication Engineering, National Taiwan University","institution_ids":["https://openalex.org/I16733864"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018050919","display_name":"Andy T. Liu","orcid":"https://orcid.org/0000-0002-2502-3992"},"institutions":[{"id":"https://openalex.org/I16733864","display_name":"National Taiwan University","ror":"https://ror.org/05bqach95","country_code":"TW","type":"education","lineage":["https://openalex.org/I16733864"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Andy T. Liu","raw_affiliation_strings":["College of Electrical Engineering and Computer Science, National Taiwan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Electrical Engineering and Computer Science, National Taiwan University","institution_ids":["https://openalex.org/I16733864"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040508737","display_name":"Hung-yi Lee","orcid":"https://orcid.org/0000-0002-9654-5747"},"institutions":[{"id":"https://openalex.org/I16733864","display_name":"National Taiwan University","ror":"https://ror.org/05bqach95","country_code":"TW","type":"education","lineage":["https://openalex.org/I16733864"]}],"countries":["TW"],"is_corresponding":true,"raw_author_name":"Hung-yi Lee","raw_affiliation_strings":["College of Electrical Engineering and Computer Science, National Taiwan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Electrical Engineering and Computer Science, National Taiwan University","institution_ids":["https://openalex.org/I16733864"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5040508737"],"corresponding_institution_ids":["https://openalex.org/I16733864"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":27,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3780","last_page":"3784"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.9430999755859375,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10863","display_name":"Voice and Speech Disorders","score":0.933899998664856,"subfield":{"id":"https://openalex.org/subfields/2737","display_name":"Physiology"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.7151289582252502},{"id":"https://openalex.org/keywords/spoofing-attack","display_name":"Spoofing attack","score":0.6435379981994629},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6269741058349609},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5282865166664124},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.44902902841567993},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.375004380941391}],"concepts":[{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.7151289582252502},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.6435379981994629},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6269741058349609},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5282865166664124},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44902902841567993},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.375004380941391}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.21437/interspeech.2020-2026","is_oa":false,"landing_page_url":"https://doi.org/10.21437/interspeech.2020-2026","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Interspeech 2020","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6800000071525574}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1494198834","https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2041823554","https://openalex.org/W2112606109","https://openalex.org/W2123299109","https://openalex.org/W2176804518","https://openalex.org/W2183016404","https://openalex.org/W2294013337","https://openalex.org/W2303197844","https://openalex.org/W2395750323","https://openalex.org/W2401839215","https://openalex.org/W2533075636","https://openalex.org/W2548055032","https://openalex.org/W2607219512","https://openalex.org/W2745896134","https://openalex.org/W2747872086","https://openalex.org/W2807325376","https://openalex.org/W2890964092","https://openalex.org/W2896457183","https://openalex.org/W2936802426","https://openalex.org/W2962747881","https://openalex.org/W2964002811","https://openalex.org/W2964301649","https://openalex.org/W2972811785","https://openalex.org/W2972943112","https://openalex.org/W2973181078","https://openalex.org/W2982223350","https://openalex.org/W2984229499","https://openalex.org/W3003875258","https://openalex.org/W3006808893","https://openalex.org/W3016138785","https://openalex.org/W3095259706","https://openalex.org/W4234330420","https://openalex.org/W4293846201","https://openalex.org/W4297808394","https://openalex.org/W4385245566"],"related_works":["https://openalex.org/W3017138616","https://openalex.org/W2763821861","https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W2980513516","https://openalex.org/W4224009465","https://openalex.org/W4286629047","https://openalex.org/W4306321456","https://openalex.org/W4285260836","https://openalex.org/W3046775127"],"abstract_inverted_index":{"High-performance":[0],"anti-spoofing":[1],"models":[2,39,62,90,99,160],"for":[3,60,116],"automatic":[4],"speaker":[5],"verification":[6],"(ASV),":[7],"have":[8],"been":[9,34,121],"widely":[10],"used":[11],"to":[12,42,79,87,146,152],"protect":[13,88],"ASV":[14],"by":[15,25,135,176],"identifying":[16],"and":[17,63,154,185],"filtering":[18],"spoofing":[19],"audio":[20,29],"that":[21,36,46,172],"is":[22,150],"deliberately":[23],"generated":[24],"text-to-speech,":[26],"voice":[27],"conversion,":[28],"replay,":[30],"etc.However,":[31],"it":[32],"has":[33,119],"shown":[35],"high-performance":[37],"antispoofing":[38,61,89],"are":[40,47,58,100],"vulnerable":[41],"adversarial":[43,92,117,142,163,183],"attacks.Adversarial":[44],"attacks,":[45],"indistinguishable":[48],"from":[49],"original":[50],"data":[51],"but":[52],"result":[53],"in":[54,65,94,102,114,138,161],"the":[55,95,128,139,156,167,180],"incorrect":[56],"predictions,":[57],"dangerous":[59],"not":[64,120],"dispute":[66],"we":[67,77,126],"should":[68],"detect":[69],"them":[70,137],"at":[71],"any":[72],"cost.To":[73],"explore":[74,127],"this":[75,124],"issue,":[76],"proposed":[78,151],"employ":[80],"Mockingjay,":[81],"a":[82],"self-supervised":[83,131],"learning":[84,98],"based":[85],"model,":[86],"against":[91,141],"attacks":[93,118],"black-box":[96,188],"scenario.Self-supervised":[97],"effective":[101],"improving":[103],"downstream":[104],"task":[105],"performance":[106],"like":[107],"phone":[108],"classification":[109],"or":[110],"ASR.However,":[111],"their":[112],"effect":[113],"defense":[115,140],"explored":[122],"yet.In":[123],"work,":[125],"robustness":[129],"of":[130,158,182],"learned":[132],"high-level":[133,173],"representations":[134,174],"using":[136],"attacks.A":[143],"layerwise":[144],"noise":[145],"signal":[147],"ratio":[148],"(LNSR)":[149],"quantize":[153],"measure":[155],"effectiveness":[157],"deep":[159],"countering":[162],"noise.Experimental":[164],"results":[165],"on":[166],"ASVspoof":[168],"2019":[169],"dataset":[170],"demonstrate":[171],"extracted":[175],"Mockingjay":[177],"can":[178],"prevent":[179],"transferability":[181],"examples,":[184],"successfully":[186],"counter":[187],"attacks.":[189]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":4}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}