{"id":"https://openalex.org/W7139926047","doi":"https://doi.org/10.48550/arxiv.2603.18103","title":"STEP: Detecting Audio Backdoor Attacks via Stability-based Trigger Exposure Profiling","display_name":"STEP: Detecting Audio Backdoor Attacks via Stability-based Trigger Exposure Profiling","publication_year":2026,"publication_date":"2026-03-18","ids":{"openalex":"https://openalex.org/W7139926047","doi":"https://doi.org/10.48550/arxiv.2603.18103"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.18103","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18103","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.18103","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130234249","display_name":"Kun Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Kun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130242020","display_name":"Meng Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Meng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130235328","display_name":"Junhao Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Junhao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130216849","display_name":"Yuli Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Yuli","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130248653","display_name":"Li Lu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lu, Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130241151","display_name":"Chong Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Chong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130225745","display_name":"Peng Cheng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cheng, Peng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130230762","display_name":"Jiaheng Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Jiaheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5130251159","display_name":"Kui Ren","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ren, Kui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.830299973487854,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.830299973487854,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.03269999846816063,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.02979999966919422,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.991100013256073},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6790000200271606},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5254999995231628},{"id":"https://openalex.org/keywords/fragility","display_name":"Fragility","score":0.4345000088214874},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.3950999975204468},{"id":"https://openalex.org/keywords/stability","display_name":"Stability (learning theory)","score":0.38580000400543213}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.991100013256073},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6790000200271606},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6237000226974487},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5254999995231628},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4440000057220459},{"id":"https://openalex.org/C80191262","wikidata":"https://www.wikidata.org/wiki/Q5477668","display_name":"Fragility","level":2,"score":0.4345000088214874},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.3950999975204468},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.38580000400543213},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3682999908924103},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.335999995470047},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.3089999854564667},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3019999861717224},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2939999997615814},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.27900001406669617},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.2718000113964081},{"id":"https://openalex.org/C2779079576","wikidata":"https://www.wikidata.org/wiki/Q17092823","display_name":"Jamming","level":2,"score":0.26980000734329224},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2508000135421753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.18103","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18103","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.18103","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18103","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"With":[0],"the":[1,36,54,145,159],"widespread":[2],"deployment":[3],"of":[4,26,112,178,182],"deep-learning-based":[5],"speech":[6,193],"models":[7],"in":[8],"security-critical":[9],"applications,":[10],"backdoor":[11,95,113,169],"attacks":[12,170],"have":[13],"emerged":[14],"as":[15,57],"a":[16,23,31,92,108],"serious":[17],"threat:":[18],"an":[19,175,195],"adversary":[20],"who":[21],"poisons":[22],"small":[24],"fraction":[25],"training":[27],"data":[28],"can":[29],"implant":[30],"hidden":[32],"trigger":[33,62],"that":[34,65,97,138,172],"controls":[35],"model's":[37],"output":[38],"while":[39],"preserving":[40],"normal":[41],"behavior":[42],"on":[43,61,67,74,154],"clean":[44],"inputs.":[45],"Existing":[46],"inference-time":[47],"defenses":[48],"are":[49],"not":[50],"well":[51],"suited":[52],"to":[53,77,106],"audio":[55],"domain,":[56],"they":[58],"either":[59],"rely":[60],"over-robustness":[63],"assumptions":[64],"fail":[66],"transformation-based":[68],"and":[69,121,157,180,188,199],"semantic":[70],"triggers,":[71],"or":[72,79],"depend":[73],"properties":[75,142],"specific":[76],"image":[78],"text":[80],"modalities.":[81],"In":[82],"this":[83],"paper,":[84],"we":[85],"propose":[86],"STEP":[87,128,173],"(Stability-based":[88],"Trigger":[89],"Exposure":[90],"Profiling),":[91],"black-box,":[93],"retraining-free":[94],"detector":[96],"operates":[98],"under":[99,118,125],"hard-label-only":[100],"access.":[101],"Its":[102],"core":[103],"idea":[104],"is":[105],"exploit":[107],"characteristic":[109],"dual":[110],"anomaly":[111,151],"triggers:":[114],"anomalous":[115,122],"label":[116,123],"stability":[117,147],"semantic-breaking":[119],"perturbations,":[120],"fragility":[124],"semantic-preserving":[126],"perturbations.":[127],"profiles":[129],"each":[130],"test":[131],"sample":[132],"with":[133,149],"two":[134,141,160],"complementary":[135],"perturbation":[136],"branches":[137],"target":[139],"these":[140],"respectively,":[143],"scores":[144,161],"resulting":[146],"features":[148],"one-class":[150],"detectors":[152],"trained":[153],"benign":[155],"references,":[156],"fuses":[158],"via":[162],"unsupervised":[163],"weighting.":[164],"Extensive":[165],"experiments":[166],"across":[167,190],"seven":[168],"show":[171],"achieves":[174],"average":[176],"AUROC":[177],"97.92%":[179],"EER":[181],"4.54%,":[183],"substantially":[184],"outperforming":[185],"state-of-the-art":[186],"baselines,":[187],"generalizes":[189],"model":[191],"architectures,":[192],"tasks,":[194],"open-set":[196],"verification":[197],"scenario,":[198],"over-the-air":[200],"physical-world":[201],"settings.":[202]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-21T00:00:00"}