mlsanityData to 7 Oct 2026

Robust Audio Adversarial Example for a Physical Attack

arXiv 1810.11793 ↗First posted 28 Oct 2018cs.LG cs.CR cs.SDcited by 42

Not on the map. Why?

Abstract (arXiv)

We propose a method to generate audio adversarial examples that can attack a state-of-the-art speech recognition model in the physical world. Previous work assumes that generated adversarial examples are directly fed to the recognition model, and is not able to perform such a physical attack because of reverberation and noise from playback environments. In contrast, our method obtains robust adversarial examples by simulating transformations caused by playback or recording in the physical world and incorporating the transformations into the generation process. Evaluation and a listening experiment demonstrated that our adversarial examples are able to attack without being noticed by humans. This result suggests that audio adversarial examples generated by the proposed method may become a real threat.

Key facts. Cited by 42 papers in the map (data through 7 Oct 2026). First posted on arXiv 28 Oct 2018.

Builds on

No reference list yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 14; 2022: 10; 2023: 6; 2024: 3; 2025: 4; 2026: 5.

42 papers.

Sort:

By area:

  1. 2021WaveGuard: Understanding and Mitigating Audio Adversarial Examplescited by 39
  2. 2021Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Informationcited by 25
  3. 2023Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspectivecited by 19
  4. 2021Improving the Adversarial Robustness for Speaker Verification by Self-Supervised Learningcited by 16
  5. 2023The Best Defense is a Good Offense: Adversarial Augmentation against Adversarial Attackscited by 15
  6. 2021Sequential Randomized Smoothing for Adversarially Robust Speech Recognitioncited by 13
  7. 2022A Review of Speech-centric Trustworthy Machine Learning: Privacy, Safety, and Fairnesscited by 13
  8. 2021Voting for the right answer: Adversarial defense for speaker verificationcited by 12
  9. 2022DIMBA: Discretely Masked Black-Box Attack in Single Object Trackingcited by 11
  10. 2023Adversarial Examples in the Physical World: A Surveycited by 10
  11. 2021SoK: Machine Learning Governancecited by 9
  12. 2021Real-Time Neural Voice Camouflagecited by 6
30 more
  1. 2021Characterizing the adversarial vulnerability of speech self-supervised learningcited by 5
  2. 2024ALIF: Low-Cost Adversarial Audio Attacks on Black-Box Speech Platforms using Linguistic Featurescited by 5
  3. 2021Multi-Discriminator Sobolev Defense-GAN Against Adversarial Attacks for End-to-End Speech Systemscited by 4
  4. 2021SoK: A Modularized Approach to Study the Security of Automatic Speech Recognition Systemscited by 4
  5. 2021Towards Robust Speech-to-Text Adversarial Attackcited by 3
  6. 2021SEC4SR: A Security Analysis Platform for Speaker Recognitioncited by 3
  7. 2022Perception-Aware Attack: Creating Adversarial Music via Reverse-Engineering Human Perceptioncited by 3
  8. 2022Push-Pull: Characterizing the Adversarial Robustness for Audio-Visual Active Speaker Detectioncited by 3
  9. 2021Application of Adversarial Examples to Physical ECG Signalscited by 2
  10. 2022Mitigating Closed-model Adversarial Examples with Bayesian Neural Modeling for Enhanced End-to-End Speech Recognitioncited by 2
  11. 2022On the robustness of non-intrusive speech quality model by adversarial examplescited by 2
  12. 2024Towards Evaluating the Robustness of Automatic Speech Recognition Systems via Audio Style Transfercited by 2
  13. 2024Transferable Adversarial Attacks against ASRcited by 2
  14. 2021Catch Me If You Can: Blackbox Adversarial Attacks on Automatic Speech Recognition using Frequency Maskingcited by 1
  15. 2022Attacks as Defenses: Designing Robust Audio CAPTCHAs Using Attacks on Automatic Speech Recognition Systemscited by 1
  16. 2022Disappeared Command: Spoofing Attack On Automatic Speech Recognition Systems with Sound Maskingcited by 1
  17. 2022Universal Fourier Attack for Time Seriescited by 1
  18. 2023Group-based Robustness: A General Framework for Customized Robustness in the Real Worldcited by 1
  19. 2023An Integrated Algorithm for Robust and Imperceptible Audio Adversarial Examplescited by 1
  20. 2025Exploiting Vulnerabilities in Speech Translation Systems through Targeted Adversarial Attackscited by 1
  21. 2025Impact of Phonetics on Speaker Identity in Adversarial Voice Attackcited by 1
  22. 2022RSD-GAN: Regularized Sobolev Defense GAN Against Speech-to-Text Adversarial Attackscited by 0
  23. 2023Threats, Vulnerabilities, and Controls of Machine Learning Based Systems: A Survey and Taxonomycited by 0
  24. 2025Boosting the Transferability of Audio Adversarial Examples with Acoustic Representation Optimizationcited by 0
  25. 2025AWARE: Audio Watermarking with Adversarial Resistance to Editscited by 0
  26. 2026Codec-Robust Attacks on Audio LLMscited by 0
  27. 2026Hearing the Unspoken: Language Model Priors for Acoustic Adversarial Attackscited by 0
  28. 2026Room for Error: Large-Scale Simulation of Over-the-Air Acoustic Attackscited by 0
  29. 2026Audio-Driven Adversarial Defense for 3D Talking Face Generation with totally Visual Fidelity Preservationcited by 0
  30. 2026Psychoacoustically Aligned Latent Smoothing for Adversarial Robustness of Full-Duplex Speech-to-Speech Dialogue Modelscited by 0