Certification of Speaker Recognition Models to Additive Perturbations
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , , , , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2024
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866929637086461952 |
|---|---|
| author | Korzh, Dmitrii Karimov, Elvir Pautov, Mikhail Rogov, Oleg Y. Oseledets, Ivan |
| author_facet | Korzh, Dmitrii Karimov, Elvir Pautov, Mikhail Rogov, Oleg Y. Oseledets, Ivan |
| contents | Speaker recognition technology is applied to various tasks, from personal virtual assistants to secure access systems. However, the robustness of these systems against adversarial attacks, particularly to additive perturbations, remains a significant challenge. In this paper, we pioneer applying robustness certification techniques to speaker recognition, initially developed for the image domain. Our work covers this gap by transferring and improving randomized smoothing certification techniques against norm-bounded additive perturbations for classification and few-shot learning tasks to speaker recognition. We demonstrate the effectiveness of these methods on VoxCeleb 1 and 2 datasets for several models. We expect this work to improve the robustness of voice biometrics and accelerate the research of certification methods in the audio domain. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2404_18791 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Certification of Speaker Recognition Models to Additive Perturbations Korzh, Dmitrii Karimov, Elvir Pautov, Mikhail Rogov, Oleg Y. Oseledets, Ivan Sound Artificial Intelligence Audio and Speech Processing Speaker recognition technology is applied to various tasks, from personal virtual assistants to secure access systems. However, the robustness of these systems against adversarial attacks, particularly to additive perturbations, remains a significant challenge. In this paper, we pioneer applying robustness certification techniques to speaker recognition, initially developed for the image domain. Our work covers this gap by transferring and improving randomized smoothing certification techniques against norm-bounded additive perturbations for classification and few-shot learning tasks to speaker recognition. We demonstrate the effectiveness of these methods on VoxCeleb 1 and 2 datasets for several models. We expect this work to improve the robustness of voice biometrics and accelerate the research of certification methods in the audio domain. |
| title | Certification of Speaker Recognition Models to Additive Perturbations |
| topic | Sound Artificial Intelligence Audio and Speech Processing |
| url | https://arxiv.org/abs/2404.18791 |