Black box voice confrontation sample generation method with auditory concealment

An anti-sample and concealment technology, applied in speech analysis, speech recognition, instruments, etc., can solve problems such as local minima

Active Publication Date: 2021-09-07
BEIJING INST OF COMP TECH & APPL
View PDF6 Cites 5 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, in the generation method of speech confrontation samples, if the initialization temperature is set too large or too small, it is easy to fall into local minimum

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Black box voice confrontation sample generation method with auditory concealment
  • Black box voice confrontation sample generation method with auditory concealment
  • Black box voice confrontation sample generation method with auditory concealment

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0052] In order to make the objects, content, and advantages of the present invention, the specific embodiments of the present invention will be further described in detail below with reference to the accompanying drawings and examples.

[0053] The present invention is directed to systems studied voice command recognition neural network model based on cyclic structure, an object to provide a black box having a voice audible concealment against sample generation method. In conjunction with other black-box generation algorithm compared against samples, the method for speech signals can have high attack success rate, but also solve the problem of hidden voice against the sample, can not distinguish between the generated speech against the right ear in the case samples and real samples, the samples can be achieved against the voice command recognition system as any given voice instruction.

[0054] refer to figure 1 , The present invention provides a black box having a voice audible ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a black box voice confrontation sample generation method with auditory concealment, and relates to the technical field of artificial intelligence safety. According to the main technical scheme, the method comprises the steps of initializing simulated annealing parameters; reading in an original audio, and initializing an audio confrontation sample; calculating black box noise according to an input audio, and performing concealment processing, namely a time-varying noise strategy based on signal variance and concealment improvement based on an auditory effect of human ears; synthesizing a new confrontationsample by using the black box noise; and inputting a black box voice recognition model, judging whether the attack is successful or not, if the attack is successful, stopping iteration, outputting an audio confrontation sample, and if the attack is not successful, generating a new solution as an input audio according to a Markov criterion to continue iteration until the iteration is completed or the attack is successful. According to the invention, the audio confrontation sample generated by the method has high similarity with the original audio, is more in line with the auditory effect of human ears, has high concealment, and can be successfully attacked without being perceived.

Description

Technical field [0001] The present invention relates to the field of artificial intelligence safety, and more particularly to a black box speech to the anti-sample generation method having audible concealed. Background technique [0002] In recent years, with the rapid development of artificial intelligence, deep learning has been gradually applied to various fields of society, especially in many areas such as security, finance, logistics, and many commercial applications. Modern speech recognition technology has also seen a major breakthrough during this period. Due to depth learning nonlinear traits and its deep network structure, the performance of the decoder, acoustic modeling and speech information is particularly prominent. In 2018, UNIFEF proposed a depth full sequence consolidation neural network (DFCNN), using a large number of convolutions to model the entire speech signal, learn from the network configuration of image identification, each convolution layer uses a smal...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G10L15/22G10L15/16G10L15/02
CPCG10L15/22G10L15/16G10L15/02G10L2015/223
Inventor 曾颖明郭敏方永强
Owner BEIJING INST OF COMP TECH & APPL
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products