arXiv Machine Learning
Oct 9

How Hackable Is Your Speech Quality Metric? A Corrected Protocol, a Benchmark, and What Patching Buys

The paper introduces a corrected protocol for measuring the hackability of speech quality predictors, addressing two key flaws in previous methods. Using this protocol, it finds that four published predictors vary widely in vulnerability, with NISQA being the most hackable. The study also audits an attack‑detect‑patch loop, showing it only hardens predictors within its own attack space and can even reduce performance.

By Ali Alavi, Donald S. Williamson
arXiv AI
Sep 12

Spectral Masking and Interpolation Attack (SMIA): A Black-box Adversarial Attack against Voice Authentication and Anti-Spoofing Systems

The paper introduces the Spectral Masking and Interpolation Attack (SMIA), a black‑box adversarial technique that subtly alters inaudible frequency regions of AI‑generated audio to fool voice authentication systems and their countermeasures. Experiments show SMIA achieves at least 82% success against combined verification and countermeasure systems, 97.5% against standalone speaker verification, and 100% against countermeasures, revealing a critical security gap. The authors argue that current static defenses are inadequate and call for dynamic, context‑aware defenses that can adapt to evolving threats.

By Kamel Kamel, Hridoy Sankar Dutta, Keshav Sood, Sunil Aryal