Audio Steganography with Speech Recognition System

Tan, Hao Hao; Liu, Chenwei; Lyu, Yinyu; Zhang, Xiao; Zhang, Denghui; Gu, Zhaoquan

doi:10.1109/dsc53577.2021.00042

Cited by 3 publications

(1 citation statement)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Recently, the fast development of deep neural networks (DNNs) has resulted in DNN-based models being applied in many scenarios around the Internet of Things, such as smart transportation [ 1 , 2 ], intelligence healthcare [ 3 ], social networks [ 4 ], and information encryption [ 5 , 6 ]. At the same time, the rapid proliferation of attacks against DNN-based models has raised greater security concerns [ 7 ].…”

Section: Introductionmentioning

confidence: 99%

Learning to Discriminate Adversarial Examples by Sensitivity Inconsistency in IoHT Systems

Zhang

Tan

Zhu

et al. 2023

Journal of Healthcare Engineering

View full text Add to dashboard Cite

Deep neural networks (DNNs) have been widely adopted in many fields, and they greatly promote the Internet of Health Things (IoHT) systems by mining health-related information. However, recent studies have shown the serious threat to DNN-based systems posed by adversarial attacks, which has raised widespread concerns. Attackers maliciously craft adversarial examples (AEs) and blend them into the normal examples (NEs) to fool the DNN models, which seriously affects the analysis results of the IoHT systems. Text data is a common form in such systems, such as the patients’ medical records and prescriptions, and we study the security concerns of the DNNs for textural analysis. As identifying and correcting AEs in discrete textual representations is extremely challenging, the available detection techniques are still limited in performance and generalizability, especially in IoHT systems. In this paper, we propose an efficient and structure-free adversarial detection method, which detects AEs even in attack-unknown and model-agnostic circumstances. We reveal that sensitivity inconsistency prevails between AEs and NEs, leading them to react differently when important words in the text are perturbed. This discovery motivates us to design an adversarial detector based on adversarial features, which are extracted based on sensitivity inconsistency. Since the proposed detector is structure-free, it can be directly deployed in off-the-shelf applications without modifying the target models. Compared to the state-of-the-art detection methods, our proposed method improves adversarial detection performance, with an adversarial recall of up to 99.7% and an F1-score of up to 97.8%. In addition, extensive experiments have shown that our method achieves superior generalizability as it can be generalized across different attackers, models, and tasks.

show abstract