A Speech Recognition Attack Defense Method Based on PSO Algorithm

Abstract

A speech recognition attack defense method based on the PSO algorithm, comprising: (1) preparing an original audio data set, which is divided into a pre-training data set, a test data set and a disturbance data set for generating adversarial samples; (2) training a speech recognition model : Build a speech recognition model and initialize the relevant parameters of the model, use the pre-training data set to train the speech recognition model, and use the test data set to test the recognition accuracy of the model; (3) attack the speech recognition model: build an attack based on the PSO algorithm method, set the fitness function and the relevant parameters of the PSO algorithm, and the optimal adversarial samples generated by this attack method can be misidentified and not recognized by the human ear; (4) adversarial training speech recognition model: the generated in step (3) The adversarial samples are added to the pre-training data set, and the speech recognition model is retrained, so that the speech recognition model has the ability to defend against adversarial sample attacks and improve the security and stability of the model.

Description

technical field [0001] The invention relates to a speech recognition attack defense method based on a PSO algorithm. Background technique [0002] With the rapid development of machine learning in recent years, speech recognition technology has gradually become one of the key technologies in people's lives. By extracting relevant information from the input voice and audio and processing it, the smart device can transcribe the correct text content and even realize communication and interaction with people. With the unremitting efforts of researchers, speech recognition technology has gradually matured, the recognition accuracy has been continuously improved, and the application range has been continuously expanded, which has brought great convenience to people's production and life. However, the latest scientific research shows that the speech recognition model based on deep learning has certain defects and is easily interfered by adversarial examples. Attackers cause speec...

AI Technical Summary

Problems solved by technology

[0006] Aiming at the security problem that the speech recognition model in the prior art is vulnerable to adversarial attacks, the present invention provides a speech recognition attack defense method based on the PSO algorithm, which can efficiently generate adversarial audio samples with transcription errors, and through the adversarial Training improves the model's ability to defend against adversarial examples

Images