mlsanityData to 7 Oct 2026

Audio Adversarial Examples: Targeted Attacks on Speech-to-Text

arXiv 1801.01944 ↗First posted 5 Jan 2018cs.LG cs.AI cs.CRcited by 268

Not on the map. Why?

Abstract (arXiv)

We construct targeted audio adversarial examples on automatic speech recognition. Given any audio waveform, we can produce another that is over 99.9% similar, but transcribes as any phrase we choose (recognizing up to 50 characters per second of audio). We apply our white-box iterative optimization-based attack to Mozilla's implementation DeepSpeech end-to-end, and show it has a 100% success rate. The feasibility of this attack introduce a new domain to study adversarial examples.

Key facts. Cited by 268 papers in the map (data through 7 Oct 2026). First posted on arXiv 5 Jan 2018.

Builds on

No reference list yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 74; 2022: 60; 2023: 39; 2024: 30; 2025: 36; 2026: 29.

268 papers.

Sort:

By area:

  1. 2023Visual Adversarial Examples Jailbreak Aligned Large Language Modelscited by 307
  2. 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
  3. 2021Gradient-based Adversarial Attacks against Text Transformerscited by 233
  4. 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
  5. 2021BERT: A Review of Applications in Natural Language Processing and Understandingcited by 109
  6. 2021Trustworthy AI: A Computational Perspectivecited by 93
  7. 2021Stable Neural ODE with Lyapunov-Stable Equilibrium Points for Defending Against Adversarial Attackscited by 91
  8. 2023A Complete Survey on Generative AI (AIGC): Is ChatGPT from GPT-4 to GPT-5 All You Need?cited by 84
  9. 2021WaveFake: A Data Set to Facilitate Audio Deepfake Detectioncited by 78
  10. 2021TDGIA:Effective Injection Attacks on Graph Neural Networkscited by 67
  11. 2022SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehiclescited by 65
  12. 2023Structure Invariant Transformation for better Adversarial Transferabilitycited by 61
38 more
  1. 2021Can stable and accurate neural networks be computed? -- On the barriers of deep learning and Smale's 18th problemcited by 53
  2. 2021A Zeroth-Order Block Coordinate Descent Algorithm for Huge-Scale Black-Box Optimizationcited by 46
  3. 2021Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Datacited by 45
  4. 2021Can You Hear It? Backdoor Attacks via Ultrasonic Triggerscited by 41
  5. 2021WaveGuard: Understanding and Mitigating Audio Adversarial Examplescited by 39
  6. 2021Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descentcited by 34
  7. 2022Character-level White-Box Adversarial Attacks against Transformers via Attachable Subwords Substitutioncited by 28
  8. 2023Deep Transfer Learning for Automatic Speech Recognition: Towards Better Generalizationcited by 28
  9. 2023Adversarial Illusions in Multi-Modal Embeddingscited by 28
  10. 2022Gradient Methods Provably Converge to Non-Robust Networkscited by 27
  11. 2021Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Informationcited by 25
  12. 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputscited by 25
  13. 2021Can audio-visual integration strengthen robustness under multimodal attacks?cited by 23
  14. 2021ML Attack Models: Adversarial Attacks and Data Poisoning Attackscited by 23
  15. 2023The Double-Edged Sword of Implicit Bias: Generalization vs. Robustness in ReLU Networkscited by 23
  16. 2022Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognitioncited by 22
  17. 2023Defending against Adversarial Audio via Diffusion Modelcited by 20
  18. 2024SafeEar: Content Privacy-Preserving Audio Deepfake Detectioncited by 20
  19. 2022Going In Style: Audio Backdoors Through Stylistic Transformationscited by 19
  20. 2023Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspectivecited by 19
  21. 2021Center Smoothing: Certified Robustness for Networks with Structured Outputscited by 18
  22. 2022Unrestricted Black-box Adversarial Attack Using GAN with Limited Queriescited by 18
  23. 2023Omnidirectional Information Gathering for Knowledge Transfer-based Audio-Visual Navigationcited by 18
  24. 2021Security and Privacy for Artificial Intelligence: Opportunities and Challengescited by 16
  25. 2021Adversarial defense for automatic speaker verification by cascaded self-supervised learning modelscited by 16
  26. 2021Improving the Adversarial Robustness for Speaker Verification by Self-Supervised Learningcited by 16
  27. 2021The mathematics of adversarial attacks in AI -- Why deep learning is unstable despite the existence of stable neural networkscited by 16
  28. 2021Adversarial Visual Robustness by Causal Interventioncited by 13
  29. 2021Sequential Randomized Smoothing for Adversarially Robust Speech Recognitioncited by 13
  30. 2022Recent improvements of ASR models in the face of adversarial attackscited by 13
  31. 2022Adversarial Examples in Random Neural Networks with General Activationscited by 13
  32. 2022A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairnesscited by 13
  33. 2023Overload: Latency Attacks on Object Detection for Edge Devicescited by 13
  34. 2021Voting for the right answer: Adversarial defense for speaker verificationcited by 12
  35. 2021Neural Population Geometry Reveals the Role of Stochasticity in Robust Perceptioncited by 12
  36. 2024Muting Whisper: A Universal Acoustic Adversarial Attack on Speech Foundation Modelscited by 12
  37. 2021On the Robustness of Domain Constraintscited by 11
  38. 2022An Evolutionary, Gradient-Free, Query-Efficient, Black-Box Algorithm for Generating Adversarial Instances in Deep Networkscited by 11

50 most cited of 268 All 268 (JSON)