Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Attack on practical speaker verification system using universal
  adversarial perturbations   In authentication scenarios, applications of practical speaker verification
systems usually require a person to read a dynamic authentication text.
Previous studies played an audio adversarial example as a digital signal to
perform physical attacks, which would be easily rejected by audio replay
detection modules. This work shows that by playing our crafted adversarial
perturbation as a separate source when the adversary is speaking, the practical
speaker verification system will misjudge the adversary as a target speaker. A
two-step algorithm is proposed to optimize the universal adversarial
perturbation to be text-independent and has little effect on the authentication
text recognition. We also estimated room impulse response (RIR) in the
algorithm which allowed the perturbation to be effective after being played
over the air. In the physical experiment, we achieved targeted attacks with
success rate of 100%, while the word error rate (WER) on speech recognition was
only increased by 3.55%. And recorded audios could pass replay detection for
the live person speaking.

34
The categories of this paper are: chem-ph
15
The categories of this paper are: nucl-ex
17
The categories of this paper are: q-fin
6
The categories of this paper are: astro-ph
22
The categories of this paper are: chao-dyn
28
The categories of this paper are: alg-geom
25
The categories of this paper are: patt-sol
26
The categories of this paper are: bayes-an
30
The categories of this paper are: q-alg
29
The categories of this paper are: funct-an
27
The categories of this paper are: comp-gas
18
The categories of this paper are: econ
14
The categories of this paper are: math-ph
20
The categories of this paper are: acc-phys
3
The categories of this paper are: physics
10
The categories of this paper are: q-bio