{"id":"https://openalex.org/W3178349919","doi":"https://doi.org/10.21437/interspeech.2021-1759","title":"Representation Learning to Classify and Detect Adversarial Attacks Against Speaker and Speech Recognition Systems","display_name":"Representation Learning to Classify and Detect Adversarial Attacks Against Speaker and Speech Recognition Systems","publication_year":2021,"publication_date":"2021-08-27","ids":{"openalex":"https://openalex.org/W3178349919","doi":"https://doi.org/10.21437/interspeech.2021-1759","mag":"3178349919"},"language":"en","primary_location":{"id":"doi:10.21437/interspeech.2021-1759","is_oa":false,"landing_page_url":"https://doi.org/10.21437/interspeech.2021-1759","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Interspeech 2021","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2107.04448","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057010207","display_name":"Jes\u00fas Villalba","orcid":"https://orcid.org/0000-0001-9459-8426"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jes\u00fas Villalba","raw_affiliation_strings":["Johns Hopkins University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Johns Hopkins University","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052564654","display_name":"Sonal Joshi","orcid":"https://orcid.org/0000-0001-8020-7551"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sonal Joshi","raw_affiliation_strings":["Johns Hopkins University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Johns Hopkins University","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027217976","display_name":"Piotr \u017belasko","orcid":"https://orcid.org/0000-0002-8245-0413"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Piotr \u017belasko","raw_affiliation_strings":["Johns Hopkins University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Johns Hopkins University","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050632169","display_name":"Najim Dehak","orcid":"https://orcid.org/0000-0002-4489-5753"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Najim Dehak","raw_affiliation_strings":["Johns Hopkins University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Johns Hopkins University","institution_ids":["https://openalex.org/I145311948"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I145311948"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4304","last_page":"4308"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9735000133514404,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7503845691680908},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7118058800697327},{"id":"https://openalex.org/keywords/speaker-recognition","display_name":"Speaker recognition","score":0.7098727226257324},{"id":"https://openalex.org/keywords/speech-recognition","display_name":"Speech recognition","score":0.676582932472229},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.6165255308151245},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5822699666023254},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.5767621994018555},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.5134578347206116},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4524877369403839},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4250068664550781},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4246135354042053},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.37258970737457275},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3493891954421997},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.20995759963989258},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.0779065489768982}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7503845691680908},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7118058800697327},{"id":"https://openalex.org/C133892786","wikidata":"https://www.wikidata.org/wiki/Q1145189","display_name":"Speaker recognition","level":2,"score":0.7098727226257324},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.676582932472229},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.6165255308151245},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5822699666023254},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.5767621994018555},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.5134578347206116},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4524877369403839},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4250068664550781},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4246135354042053},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37258970737457275},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3493891954421997},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.20995759963989258},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0779065489768982},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.21437/interspeech.2021-1759","is_oa":false,"landing_page_url":"https://doi.org/10.21437/interspeech.2021-1759","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Interspeech 2021","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2107.04448","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2107.04448","pdf_url":"https://arxiv.org/pdf/2107.04448","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2107.04448","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2107.04448","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"},{"id":"mag:3178349919","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2107.04448","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2107.04448","pdf_url":"https://arxiv.org/pdf/2107.04448","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"score":0.6399999856948853,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3178349919.pdf","grobid_xml":"https://content.openalex.org/works/W3178349919.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W1494198834","https://openalex.org/W2406312423","https://openalex.org/W2738841453","https://openalex.org/W2767951891","https://openalex.org/W2890964092","https://openalex.org/W2923292931","https://openalex.org/W2952730822","https://openalex.org/W2962747881","https://openalex.org/W2963058500","https://openalex.org/W2963207607","https://openalex.org/W2963403868","https://openalex.org/W2963542245","https://openalex.org/W2963857521","https://openalex.org/W2964153729","https://openalex.org/W2964253222","https://openalex.org/W2964301649","https://openalex.org/W2969985801","https://openalex.org/W2972706975","https://openalex.org/W2981087920","https://openalex.org/W2981461916","https://openalex.org/W3015705854","https://openalex.org/W3015707499","https://openalex.org/W3015811740","https://openalex.org/W3015958938","https://openalex.org/W3025443576","https://openalex.org/W3096614974","https://openalex.org/W3123630726","https://openalex.org/W3131867595","https://openalex.org/W3150987417"],"related_works":["https://openalex.org/W3197739001","https://openalex.org/W3015241525","https://openalex.org/W3083910051","https://openalex.org/W2554181009","https://openalex.org/W3212751351","https://openalex.org/W2940934424","https://openalex.org/W3097159718","https://openalex.org/W3113505176","https://openalex.org/W3202316402","https://openalex.org/W3198300623","https://openalex.org/W3087774833","https://openalex.org/W2955431898","https://openalex.org/W3042692870","https://openalex.org/W3017138616","https://openalex.org/W3144792660","https://openalex.org/W3096366160","https://openalex.org/W3115048898","https://openalex.org/W2963196925","https://openalex.org/W2886924402","https://openalex.org/W2954322257"],"abstract_inverted_index":{"Adversarial":[0],"attacks":[1,19,45,59,77,87,150],"have":[2],"become":[3],"a":[4,13],"major":[5],"threat":[6,50],"for":[7],"machine":[8],"learning":[9,42],"applications.":[10],"There":[11],"is":[12,159],"growing":[14],"interest":[15],"in":[16,20,60,128],"studying":[17],"these":[18],"the":[21,47,61,111,129],"audio":[22],"domain,":[23],"e.g,":[24],"speech":[25,92,108],"and":[26,29,91],"speaker":[27,79,89],"recognition;":[28],"find":[30],"defenses":[31],"against":[32,78,88],"them.":[33],"In":[34],"this":[35],"work,":[36],"we":[37,102,137],"focus":[38],"on":[39],"using":[40],"representation":[41,131],"to":[43,75,85,104,123,147],"classify/detect":[44],"w.r.t.":[46],"attack":[48,98,124,130,141],"algorithm,":[49],"model":[51,132],"or":[52],"signal-to-adversarial-noise":[53],"ratio.":[54],"We":[55,94,114,144],"found":[56],"that":[57,116],"common":[58],"literature":[62],"can":[63,81],"be":[64,82],"classified":[65],"with":[66,151],"accuracies":[67],"as":[68,70],"high":[69],"90%.":[71],"Also,":[72],"representations":[73],"trained":[74],"classify":[76,86],"identification":[80],"used":[83],"also":[84,95],"verification":[90,99],"recognition.":[93],"tested":[96],"an":[97,139],"task,":[100],"where":[101],"need":[103],"decide":[105],"whether":[106],"two":[107],"utterances":[109],"contain":[110],"same":[112],"attack.":[113],"observed":[115],"our":[117],"models":[118],"did":[119],"not":[120,126],"generalize":[121],"well":[122],"algorithms":[125],"included":[127],"training.":[133],"Motivated":[134],"by":[135],"this,":[136],"evaluated":[138],"unknown":[140,149],"detection":[142],"task.":[143],"were":[145],"able":[146],"detect":[148],"equal":[152],"error":[153],"rates":[154],"of":[155],"about":[156],"19%,":[157],"which":[158],"promising.":[160]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}