arXiv Machine Learning
You Are the Trigger: Speaker-Activated Backdoors
Read the original on arXiv Machine Learning →The Flow has not summarised this story yet — read it at arXiv Machine Learning.
Related stories
arXiv Machine Learning
Oct 8
Backdooring Acoustic Foundation Models for Physically Realizable Triggers
arXiv:2610.09819v1 Announce Type: cross Abstract: Acoustic foundation models (AFMs) have democratized acoustic applications, enabling powerful models for tasks ranging from speech recognition to spea...
arXiv AI
Sep 12
Spectral Masking and Interpolation Attack (SMIA): A Black-box Adversarial Attack against Voice Authentication and Anti-Spoofing Systems
The paper introduces the Spectral Masking and Interpolation Attack (SMIA), a black‑box adversarial technique that subtly alters inaudible frequency regions of AI‑generated audio to fool voice authentication systems and their countermeasures. Experiments show SMIA achieves at least 82% success against combined verification and countermeasure systems, 97.5% against standalone speaker verification, and 100% against countermeasures, revealing a critical security gap. The authors argue that current static defenses are inadequate and call for dynamic, context‑aware defenses that can adapt to evolving threats.
arXiv AI
Aug 20
`From Prompt to Perturbation': An Adaptive Framework for Voice-Based Jailbreaks on Audio LLMs
The paper introduces an adaptive jailbreak attack framework that evaluates both cascaded pipelines and end‑to‑end large audio‑language models (LALMs) under a unified setting. It employs a feedback‑guided mutation engine to automatically generate and refine jailbreak candidates across textual prompts and audio perturbations, thereby broadening attack diversity. Experiments on six audio‑based systems show that both paradigms remain highly vulnerable, with the framework achieving higher attack success rates than existing methods.
arXiv AI
Aug 12
Never Stop Speaking: a Denial-of-Service Attack on End-to-End Speech Language Models
arXiv:2608. 10405v1 Announce Type: cross Abstract: Many studies have shown that specially crafted inputs can induce large language models (LLMs) to generate excessively long outputs, resulting in significant computational overhead and resource consumption.
arXiv AI
Sep 3
Backdoor Attacks on Speech Emotion Recognition via TTS-Generated Poisoning
The paper investigates poisoning-based backdoor attacks on Speech Emotion Recognition (SER) systems that use self‑supervised acoustic representations. It introduces a stealthy, low‑energy acoustic trigger that can be embedded imperceptibly into both natural and synthetic speech, enabling scalable poisoning. Experiments show high attack success rates with low poisoning ratios, cross‑model transferability, and a particular vulnerability of self‑supervised representations, highlighting the lowered barrier to effective backdoor attacks via TTS technology.
arXiv Machine Learning
Jul 20
Natural Backdoor Attacks on Speech Recognition Models
arXiv:2607. 15724v1 Announce Type: cross Abstract: With the rapid development of deep learning, its vulnerability has gradually emerged in recent years.