基于噪声能量检测音频对抗样本

DETECTING AUDIO ADVERSARIAL EXAMPLES BASED ON THE NOISE ENERGY

  • 摘要: 针对智能语音系统的对抗样本攻击给人工智能应用带来了严重的安全威胁。现有的检测方法均为特定的攻击而设计,难以应对不同的攻击。通过分析信号能量特征,证明对抗音频与原始音频存在能量差异,在此基础上提出一个基于噪声能量的检测模型Noise-Energy。实验表明,Noise-Energy模型对CW攻击的检测准确率达到99.5%,对其他多种攻击的准确率均超过98%,表现出较强的鲁棒性和良好的泛化性。

     

    Abstract: Audio adversarial attacks seriously threaten the security of artificial intelligence application. Most of the methods are only effective for specific attacks, and difficult to deal with different attacks. In this paper, we proved that there was an energy difference between adversarial example and original example, and proposed a detection model Noise-Energy based on the noise energy changes. The experiments show that the detection accuracy of the Noise-Energy model for CW attack reaches 99.5%, and for other attacks is more than 98%. It exhibits strong robustness and excellent generalization.

     

/

返回文章
返回