Defending against audio adversarial examples based on multiple-sub-detectors Online publication date: Tue, 14-Feb-2023
by Keiichi Tamura; Hajime Ito
International Journal of Computational Intelligence Studies (IJCISTUDIES), Vol. 11, No. 3/4, 2022
Abstract: Audio adversarial examples are audio input that can deceive the speech-to-text (STT) transcription neural network technology. In this paper, we propose a new defence method based on the decision-making of multiple sub-detectors to ensure security against adversarial examples for STT transcription neural networks. This method utilises a detector for defending audio adversarial examples consisting of three different sub-detectors. Then the results of the three sub-detectors are used to make the final decision, which makes the model more robust and accurate than a single detection method. Experiments were conducted to evaluate the method using 2,000 voice sound data, including 1,000 normal voice sound data and 1,000 audio adversarial examples, created on Mozilla-implementation DeepSpeech. The results of experiments to detect audio adversarial examples confirmed that the proposed method offers better performance in protection than our previous method.
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Computational Intelligence Studies (IJCISTUDIES):
Login with your Inderscience username and password:
Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.
If you still need assistance, please email subs@inderscience.com
Our Blog 
Follow us on Twitter 
Visit us on Facebook