Certification of Speaker Recognition Models to Additive Perturbations
arxiv(2024)
摘要
Speaker recognition technology is applied in various tasks ranging from
personal virtual assistants to secure access systems. However, the robustness
of these systems against adversarial attacks, particularly to additive
perturbations, remains a significant challenge. In this paper, we pioneer
applying robustness certification techniques to speaker recognition, originally
developed for the image domain. In our work, we cover this gap by transferring
and improving randomized smoothing certification techniques against
norm-bounded additive perturbations for classification and few-shot learning
tasks to speaker recognition. We demonstrate the effectiveness of these methods
on VoxCeleb 1 and 2 datasets for several models. We expect this work to improve
voice-biometry robustness, establish a new certification benchmark, and
accelerate research of certification methods in the audio domain.
更多查看译文
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要