{"id":"https://openalex.org/W2898435086","doi":"https://doi.org/10.24963/ijcai.2019/741","title":"Robust Audio Adversarial Example for a Physical Attack","display_name":"Robust Audio Adversarial Example for a Physical Attack","publication_year":2019,"publication_date":"2019-07-28","ids":{"openalex":"https://openalex.org/W2898435086","doi":"https://doi.org/10.24963/ijcai.2019/741","mag":"2898435086"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2019/741","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2019/741","pdf_url":"https://www.ijcai.org/proceedings/2019/0741.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Twenty-Eighth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.ijcai.org/proceedings/2019/0741.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051687457","display_name":"Hiromu Yakura","orcid":"https://orcid.org/0000-0002-2558-735X"},"institutions":[{"id":"https://openalex.org/I146399215","display_name":"University of Tsukuba","ror":"https://ror.org/02956yf07","country_code":"JP","type":"education","lineage":["https://openalex.org/I146399215"]},{"id":"https://openalex.org/I4210126580","display_name":"RIKEN Center for Advanced Intelligence Project","ror":"https://ror.org/03ckxwf91","country_code":"JP","type":"facility","lineage":["https://openalex.org/I4210110652","https://openalex.org/I4210126580"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Hiromu Yakura","raw_affiliation_strings":["RIKEN Center for Advanced Intelligence Project","University of Tsukuba"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RIKEN Center for Advanced Intelligence Project","institution_ids":["https://openalex.org/I4210126580"]},{"raw_affiliation_string":"University of Tsukuba","institution_ids":["https://openalex.org/I146399215"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022139141","display_name":"Jun Sakuma","orcid":"https://orcid.org/0000-0001-5015-3812"},"institutions":[{"id":"https://openalex.org/I146399215","display_name":"University of Tsukuba","ror":"https://ror.org/02956yf07","country_code":"JP","type":"education","lineage":["https://openalex.org/I146399215"]},{"id":"https://openalex.org/I4210126580","display_name":"RIKEN Center for Advanced Intelligence Project","ror":"https://ror.org/03ckxwf91","country_code":"JP","type":"facility","lineage":["https://openalex.org/I4210110652","https://openalex.org/I4210126580"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Jun Sakuma","raw_affiliation_strings":["RIKEN Center for Advanced Intelligence Project","University of Tsukuba"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RIKEN Center for Advanced Intelligence Project","institution_ids":["https://openalex.org/I4210126580"]},{"raw_affiliation_string":"University of Tsukuba","institution_ids":["https://openalex.org/I146399215"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5051687457"],"corresponding_institution_ids":["https://openalex.org/I146399215","https://openalex.org/I4210126580"],"apc_list":null,"apc_paid":null,"fwci":12.7931,"has_fulltext":false,"cited_by_count":174,"citation_normalized_percentile":{"value":0.99029822,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"5334","last_page":"5341"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9757999777793884,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9513999819755554,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9477887749671936},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7792676687240601},{"id":"https://openalex.org/keywords/speech-recognition","display_name":"Speech recognition","score":0.591631293296814},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.5300091505050659},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5183531045913696},{"id":"https://openalex.org/keywords/active-listening","display_name":"Active listening","score":0.4778720438480377},{"id":"https://openalex.org/keywords/replay-attack","display_name":"Replay attack","score":0.47772881388664246},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41298994421958923},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.20134398341178894},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.15034988522529602}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9477887749671936},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7792676687240601},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.591631293296814},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.5300091505050659},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5183531045913696},{"id":"https://openalex.org/C177291462","wikidata":"https://www.wikidata.org/wiki/Q423038","display_name":"Active listening","level":2,"score":0.4778720438480377},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.47772881388664246},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41298994421958923},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.20134398341178894},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.15034988522529602},{"id":"https://openalex.org/C46312422","wikidata":"https://www.wikidata.org/wiki/Q11024","display_name":"Communication","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.24963/ijcai.2019/741","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2019/741","pdf_url":"https://www.ijcai.org/proceedings/2019/0741.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Twenty-Eighth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1810.11793","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1810.11793","pdf_url":"https://arxiv.org/pdf/1810.11793","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.24963/ijcai.2019/741","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2019/741","pdf_url":"https://www.ijcai.org/proceedings/2019/0741.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Twenty-Eighth International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.4099999964237213}],"awards":[{"id":"https://openalex.org/G1896175190","display_name":null,"funder_award_id":"JP18H04099","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G7810789773","display_name":"Deep learning security and privacy focused on human-machine recognition gap","funder_award_id":"19H04164","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2898435086.pdf","grobid_xml":"https://content.openalex.org/works/W2898435086.grobid-xml"},"referenced_works_count":24,"referenced_works":["https://openalex.org/W190060899","https://openalex.org/W1522301498","https://openalex.org/W1524333225","https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W1989314204","https://openalex.org/W2136682440","https://openalex.org/W2193413348","https://openalex.org/W2245569228","https://openalex.org/W2403555780","https://openalex.org/W2404568753","https://openalex.org/W2407023693","https://openalex.org/W2736899637","https://openalex.org/W2770312844","https://openalex.org/W2782403400","https://openalex.org/W2784500886","https://openalex.org/W2919115771","https://openalex.org/W2962717526","https://openalex.org/W2963058500","https://openalex.org/W2963557656","https://openalex.org/W2964121744","https://openalex.org/W2964153729","https://openalex.org/W2964301649","https://openalex.org/W2973252307"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W2317723112","https://openalex.org/W2475724061","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W2773393136"],"abstract_inverted_index":{"We":[0],"propose":[1],"a":[2,12,42,83,114],"method":[3,56,111],"to":[4,31,39,93],"generate":[5],"audio":[6,104],"adversarial":[7,26,59,89,105],"examples":[8,27,60,90,106],"that":[9,24,87,103],"can":[10],"attack":[11,44,94],"state-of-the-art":[13],"speech":[14],"recognition":[15,33],"model":[16],"in":[17,69],"the":[18,32,70,75,78,109],"physical":[19,43,71],"world.":[20],"Previous":[21],"work":[22],"assumes":[23],"generated":[25,107],"are":[28,91],"directly":[29],"fed":[30],"model,":[34],"and":[35,48,73,82],"is":[36],"not":[37],"able":[38,92],"perform":[40],"such":[41],"because":[45],"of":[46],"reverberation":[47],"noise":[49],"from":[50],"playback":[51,66],"environments.":[52],"In":[53],"contrast,":[54],"our":[55,88],"obtains":[57],"robust":[58],"by":[61,65,98,108],"simulating":[62],"transformations":[63,76],"caused":[64],"or":[67],"recording":[68],"world":[72],"incorporating":[74],"into":[77],"generation":[79],"process.":[80],"Evaluation":[81],"listening":[84],"experiment":[85],"demonstrated":[86],"without":[95],"being":[96],"noticed":[97],"humans.":[99],"This":[100],"result":[101],"suggests":[102],"proposed":[110],"may":[112],"become":[113],"real":[115],"threat.":[116]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":17},{"year":2023,"cited_by_count":23},{"year":2022,"cited_by_count":26},{"year":2021,"cited_by_count":40},{"year":2020,"cited_by_count":30},{"year":2019,"cited_by_count":21},{"year":2018,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}