CommanderSong: A Systematic Approach for Practical Adversarial Voice Recognition

33 Pages·2017·1.49 MB·English

CommanderSong: A Systematic Approach For
Practical Adversarial Voice Recognition
Xuejing Yuan1,2, Yuxuan Chen3, Yue Zhao1,2, Yunhui Long4, Xiaokang Liu1,2, Kai Chen1,2,
Shengzhi Zhang3, 5, Heqing Huang, XiaoFeng Wang6, and Carl A. Gunter4
1SKLOIS, Institute of Information Engineering, Chinese Academy of Sciences, China
2School of Cyber Security, University of Chinese Academy of Sciences, China
3Department of Computer Sciences, Florida Institute of Technology, USA
4Department of Computer Science, University of Illinois at Urbana-Champaign, USA
5Department of Computer Science, Metropolitan College, Boston University, USA
6School of Informatics and Computing, Indiana University Bloomington, USA
Outline
 Background
 Motivation
 Approach
 Evaluation
 Conclusion
Background
Automatic speech recognition (ASR)
 Traditional attack
 Adversarial sample
Stop
+ =
Speed limit 50
Outline
 Background
 Motivation
 Approach
 Evaluation
 Conclusion
Motivation
Hidden voice command attack:
noise-like voice command is abnormal
Dolphin attack:
need a proper transmitter
Recent adversarial audio sample:
is not effective in the physical world
So can we design an approach that is:
using normal sound to make a physical world attack?

Automatical

Practical

Surreptitious

Spread

Transferable
CommanderSong Attack
CommanderSong Attack
I think the command in the
sound wants me to set the
temprature to 24 degree.
----IVC device
Challenges Of The Attack
 Human realization
 Influence of the speakers and environment
 Transfer