attack arXiv Mar 17, 2026 · 20d ago
Protopopov Alexey · Joint Stock Research and Production Company Kryptonite
White-box adversarial attacks on Wav2Vec speech recognition optimized for imperceptibility in over-the-air physical scenarios
Input Manipulation Attack audio
Automatic speech recognition systems based on neural networks are vulnerable to adversarial attacks that alter transcriptions in a malicious way. Recent works in this field have focused on making attacks work in over-the-air scenarios, however such attacks are typically detectable by human hearing, limiting their potential applications. In the present work we explore different approaches of making over-the-air attacks less detectable, as well as the impact these approaches have on the attacks' effectiveness.
transformer Joint Stock Research and Production Company Kryptonite
ML Security Papers