Daily Arxiv

This is a page that curates AI-related papers published worldwide.
All content here is summarized using Google Gemini and operated on a non-profit basis.
Copyright for each paper belongs to the authors and their institutions; please make sure to credit the source when sharing.

Spectral Masking and Interpolation Attack (SMIA): A Black-box Adversarial Attack against Voice Authentication and Anti-Spoofing Systems

Created by
  • Haebom

Author

Kamel Kamel, Hridoy Sankar Dutta, Keshav Sood, Sunil Aryal

Outline

This paper proposes a novel attack technique, the Spectral Masking and Interpolation Attack (SMIA), which exposes the serious vulnerability of voice authentication systems (VAS). SMIA strategically manipulates frequency ranges inaudible to the human ear to modulate AI-generated voices, generating adversarial samples that bypass existing anti-spoofing countermeasures (CMs). Through various experiments simulating real-world environments, we evaluate the effectiveness of SMIA against state-of-the-art (SOTA) models. We achieve high attack success rates of at least 82% for combined VAS/CM systems, at least 97.5% for standalone speaker authentication systems, and 100% for countermeasures. This demonstrates that current security systems are inadequate against adaptive adversarial attacks.

Takeaways, Limitations

Takeaways:
Clearly presents vulnerabilities in anti-spoofing countermeasures of existing voice authentication systems.
Emphasizes the need for an adaptive, situation-aware, dynamic defense system.
SMIA attack techniques provide a new perspective on real-world threats.
Suggesting research directions for strengthening the security of the current voice authentication system.
Limitations:
The effectiveness of SMIA attacks may be limited to specific SOTA models and settings.
Further research is needed to determine generalizability to real-world environments.
Lack of research on defense techniques against the proposed attacks.
👍