A Speech Adversarial Sample Detection Method Based on Manifold Learning

Xiao Ma, Dongliang Xu (), Chenglin Yang, Panpan Li and Dong Li
Additional contact information
Xiao Ma: School of Computer Science and Technology, Shandong University, Weihai 264209, China
Dongliang Xu: School of Computer Science and Technology, Shandong University, Weihai 264209, China
Chenglin Yang: School of Computer Science and Technology, Shandong University, Weihai 264209, China
Panpan Li: College of Information Science and Engineering, Jiaxing University, Jiaxing 314041, China
Dong Li: School of Computer Science and Technology, Shandong University, Weihai 264209, China

Mathematics, 2024, vol. 12, issue 8, 1-13

Abstract: Deep learning-based models have achieved impressive results across various practical fields. However, these models are susceptible to attacks. Recent research has demonstrated that adversarial samples can significantly decrease the accuracy of deep learning models. This susceptibility poses considerable challenges for their use in security applications. Various methods have been developed to enhance model robustness by training with more effective and generalized adversarial examples. However, these approaches tend to compromise model accuracy. Currently proposed detection methods mainly focus on speech adversarial samples generated by specified white-box attack models. In this study, leveraging manifold learning technology, a method is proposed to detect whether a speech input is an adversarial sample before feeding it into the recognition model. The method is designed to detect speech adversarial samples generated by black-box attack models and achieves a detection success rate of 84.73%. It identifies the low-dimensional manifold of training samples and measures the distance of a sample under investigation to this manifold to determine its adversarial nature. This technique enables the preprocessing detection of adversarial audio samples before their introduction into the deep learning model, thereby preventing adversarial attacks without affecting model robustness.

Keywords: speech adversarial samples; manifold learning; dimensionality reduction (search for similar items in EconPapers)
JEL-codes: C (search for similar items in EconPapers)
Date: 2024
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/2227-7390/12/8/1226/pdf (application/pdf)
https://www.mdpi.com/2227-7390/12/8/1226/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jmathe:v:12:y:2024:i:8:p:1226-:d:1378613

Access Statistics for this article

Mathematics is currently edited by Ms. Emma He

More articles in Mathematics from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().