Inaudible Adversarial Perturbation: Manipulating theÂ
Recognition of User Speech in Real Time
Embedded Files
# Update 🎉
# Update 🎉
You can check our new website: Vrifle Demopage.
We have also open-sourced our code: [Github] Inaudible-Adversarial-Perturbation-Vrifle.
- Introduction
This is the demo homepage of VRIFLE: Inaudible Adversarial Perturbation Attack, i.e., IAP Attack (short for "Voice Rifle"). We name it VRIFLE due to:
(1) the demodulated perturbations sound like a continuous emission or firing by a rifle gun, and our IAP attack aims at the voice-interface ASR systems.
(2) the term "rifle" is used because of the long-range capability of our IAP attack. Metaphorically, it is as far as the range of a rifle.
2. Attack with the default long-distance setup
2. Attack with the default long-distance setup
We present the user-present scenarios using our long-distance equipment under 5 different settings, respectively.
1. No Attack: Only Benign Audible Speech (Case 1)
2. Traditional Ultrasound-based Attack: When the user is speaking benign commands, the adversary launches traditional ultrasound-based attacks (Case 2)Â
3. VRIFLE Attacks: (Case 3~5)
Short Universal Perturbation on Short Benign Commands (Case 3)
Silence Perturbation on multiple Benign Commands (Case 4)
Universal Perturbation on Long Benign Commands (Case 5) (alter-and-mute strategy) and No-feedback strategy.
3. Attack with a portable attack device
3. Attack with a portable attack device
Inaudible Adversarial Perturbation on User Benign Commands (man-in-the-middle strategy).
Target intent: Turn on airplane mode and Stop the music.
Therefore the user intent is satisfied and the attack is less suspicious.
4. Attack with an off-the-shelf loudspeaker
4. Attack with an off-the-shelf loudspeaker
Inaudible Adversarial Perturbation on User Benign Commands (alter-and-mute).
Target intent: Start recording.
Page updated
Google Sites
Report abuse