mlsanityData to 14 Oct 2026

Impact of Phonetics on Speaker Identity in Adversarial Voice Attack

arXiv 2509.15437 ↗First posted 18 Sep 2025cs.SD cs.AI cs.CRcited by 1

Not on the map. Why?

Abstract (arXiv)

Adversarial perturbations in speech pose a serious threat to automatic speech recognition (ASR) and speaker verification by introducing subtle waveform modifications that remain imperceptible to humans but can significantly alter system outputs. While targeted attacks on end-to-end ASR models have been widely studied, the phonetic basis of these perturbations and their effect on speaker identity remain underexplored. In this work, we analyze adversarial audio at the phonetic level and show that perturbations exploit systematic confusions such as vowel centralization and consonant substitutions. These distortions not only mislead transcription but also degrade phonetic cues critical for speaker verification, leading to identity drift. Using DeepSpeech as our ASR target, we generate targeted adversarial examples and evaluate their impact on speaker embeddings across genuine and impostor samples. Results across 16 phonetically diverse target phrases demonstrate that adversarial audio induces both transcription errors and identity drift, highlighting the need for phonetic-aware defenses to ensure the robustness of ASR and speaker recognition systems.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 20 of its 33 references that are in the map. First posted on arXiv 18 Sep 2025.

Builds on

20 of 33 references.

References · 20

  1. 2014Deep Speech: Scaling up end-to-end speech recognitioncited by 354
  2. 2018Audio Adversarial Examples: Targeted Attacks on Speech-to-Textcited by 274
  3. 2019Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognitioncited by 124
  4. 2018Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hidingcited by 85
  5. 2017DolphinAtack: Inaudible Voice Commandscited by 69
  6. 2019Who is Real Bob? Adversarial Attacks on Speaker Recognition Systemscited by 67
  7. 2018CommanderSong: A Systematic Approach for Practical Adversarial Voice Recognitioncited by 66
  8. 2015End-to-End Text-Dependent Speaker Verificationcited by 49
  9. 2018Robust Audio Adversarial Example for a Physical Attackcited by 44
  10. 2018Fooling End-to-end Speaker Verification by Adversarial Examplescited by 39
  11. 2024AdvWave: Stealthy Adversarial Jailbreak Attack against Large Audio-Language Modelscited by 38
  12. 2020Real-time, Universal, and Robust Adversarial Attacks Against Speaker Recognition Systemscited by 26
8 more
  1. 2019Adversarial Attacks on GMM i-vector based Speaker Verification Systemscited by 23
  2. 2021Improving the Adversarial Robustness for Speaker Verification by Self-Supervised Learningcited by 16
  3. 2023The Impact of Silence on Speech Anti-Spoofingcited by 13
  4. 2024Malacopula: adversarial automatic speaker verification attacks using a neural-based generalised Hammerstein modelcited by 6
  5. 2022Identifying Source Speakers for Voice Conversion based Spoofing Attacks on Speaker Verification Systemscited by 5
  6. 2023PhantomSound: Black-Box, Query-Efficient Audio Adversarial Attack via Split-Second Phoneme Injectioncited by 5
  7. 2024Neural Codec-based Adversarial Sample Detection for Speaker Verificationcited by 5
  8. 2024Detecting and Defending Against Adversarial Attacks on Automatic Speech Recognition via Diffusion Modelscited by 3

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.