论文标题

对关键任务应用的语音识别系统的对抗性攻击:一项调查

Adversarial Attacks on Speech Recognition Systems for Mission-Critical Applications: A Survey

论文作者

Huynh, Ngoc Dung, Bouadjenek, Mohamed Reda, Razzak, Imran, Lee, Kevin, Arora, Chetan, Hassani, Ali, Zaslavsky, Arkady

论文摘要

机器关键应用是一种从根本上来说,对于特定和敏感的操作(例如搜索和恢复,救援,军事和应急管理措施)的成功是必不可少的。机器学习,自然语言处理,语音识别和语音处理技术的最新进展自然使基于语音的对话界面的开发和部署能够与各种机器关键应用程序进行交互。尽管这些对话界面使用户能够发出语音命令进行战略和关键活动,但它们对对抗性攻击的稳健性仍然不确定和不清楚。确实,对抗性人工智能(AI)是指试图用欺骗性数据欺骗机器学习模型的一组技术,是AI和机器学习研究社区的日益增长,尤其是对于机器关键的应用程序。对抗攻击的最常见原因是在机器学习模型中引起故障。对抗性攻击可能需要在训练数据时以不准确或捏造的样本呈现模型,或者引入恶意设计的数据以欺骗已经训练有素的模型。在专注于机器关键应用程序的语音识别时,我们首先回顾了现有的语音识别技术,然后,我们研究了对抗这些系统的对抗性攻击和防御措施的有效性,然后概述了研究挑战,辩护建议和未来的工作。预计本文将为研究人员和从业人员提供服务,以帮助他们理解自己的挑战,定位自己,并最终帮助他们改善对关键任务应用程序的语音识别模式。关键字:关键任务应用程序,对抗性AI,语音识别系统。

A Machine-Critical Application is a system that is fundamentally necessary to the success of specific and sensitive operations such as search and recovery, rescue, military, and emergency management actions. Recent advances in Machine Learning, Natural Language Processing, voice recognition, and speech processing technologies have naturally allowed the development and deployment of speech-based conversational interfaces to interact with various machine-critical applications. While these conversational interfaces have allowed users to give voice commands to carry out strategic and critical activities, their robustness to adversarial attacks remains uncertain and unclear. Indeed, Adversarial Artificial Intelligence (AI) which refers to a set of techniques that attempt to fool machine learning models with deceptive data, is a growing threat in the AI and machine learning research community, in particular for machine-critical applications. The most common reason of adversarial attacks is to cause a malfunction in a machine learning model. An adversarial attack might entail presenting a model with inaccurate or fabricated samples as it's training data, or introducing maliciously designed data to deceive an already trained model. While focusing on speech recognition for machine-critical applications, in this paper, we first review existing speech recognition techniques, then, we investigate the effectiveness of adversarial attacks and defenses against these systems, before outlining research challenges, defense recommendations, and future work. This paper is expected to serve researchers and practitioners as a reference to help them in understanding the challenges, position themselves and, ultimately, help them to improve existing models of speech recognition for mission-critical applications. Keywords: Mission-Critical Applications, Adversarial AI, Speech Recognition Systems.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源