Malafide: a novel adversarial convolutive noise attack against deepfake and spoofing detection systems - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

Malafide: a novel adversarial convolutive noise attack against deepfake and spoofing detection systems

Résumé

We present Malafide, a universal adversarial attack against automatic speaker verification (ASV) spoofing countermeasures (CMs). By introducing convolutional noise using an optimised linear time-invariant filter, Malafide attacks can be used to compromise CM reliability while preserving other speech attributes such as quality and the speaker's voice. In contrast to other adversarial attacks proposed recently, Malafide filters are optimised independently of the input utterance and duration, are tuned instead to the underlying spoofing attack, and require the optimisation of only a small number of filter coefficients. Even so, they degrade CM performance estimates by an order of magnitude, even in black-box settings, and can also be configured to overcome integrated CM and ASV subsystems. Integrated solutions that use self-supervised learning CMs, however, are more robust, under both black-box and white-box settings.
Fichier principal
Vignette du fichier
publi-7337.pdf (606.7 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04130093 , version 1 (24-08-2023)

Identifiants

Citer

Michele Panariello, Wanying Ge, Hemlata Tak, Massimiliano Todisco, Nicholas Evans. Malafide: a novel adversarial convolutive noise attack against deepfake and spoofing detection systems. INTERSPEECH 2023, 24th Conference of the International Speech Communication Association, Aug 2023, Dublin, Ireland. ⟨hal-04130093⟩

Collections

EURECOM ANR
26 Consultations
9 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More