Outline

Ingegneria Sismica

Ingegneria Sismica

A LSH-Based Detection Algorithm for the Adversarial Samples of Early-Stage

Author(s): Jia Zheng1, Hua Zhang1, Ming Lv2, Wanjin Hou1, Huiting Hou2, Lili Zhang3
1School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing 100044, China
2Network Business Unit, China Mobile Communications Group Corporation, Beijing 100032, China
3Operations and Services Department, China Satellite Network Application Co., Ltd., Beijing, 100071 China
Zheng, Jia . et al “A LSH-Based Detection Algorithm for the Adversarial Samples of Early-Stage.” Ingegneria Sismica Volume 43 Issue 3: 1-17, doi:10.65102/is20261088.

Abstract

Addressing the poor performance of detection on early-stage adversarial samples in speaker recognition tasks, we propose a detection algorithm based on locality sensitive hashing (LSH-GPD) for adversarial sample of early-stage during the generation process in this paper. Firstly, a locality-sensitive hashing algorithm tailored to adversarial audio samples is designed, achieving rapid retrieval of similar speech samples and addressing the challenge of similarity search in high-dimensional speech data. Subsequently, the FastDTW algorithm is utilized to further group similar speech samples, eliminating hash collisions. Finally, adversarial samples are identified by determining whether the number of samples within each group exceeds a threshold. Adversarial samples generated on public datasets, the TIMIT, Common Voice, and Voxceleb2, are used to evaluate the LSH-GPD algorithm. Experimental results demonstrate that the LSH-GPD algorithm outperforms both the Voting and WaveGuard algorithms, the accuracy of detection for adversarial samples achieves 99.9%, and an early detection rate achieves 99.0%.

Keywords
Adversarial Sample Detection; Locality-Sensitive Hashing; Speaker Recognition

Related Articles

Zhihao Jiang1,2, Limi Chen1,2, Jing Yang1
1Hainan Vocational University of Science and Technology, Haikou 571126, China
2Institute for Mathematical Research, Universiti Putra Malaysia, Serdang 43400, Malaysia
Limi Chen1,2, Zhihao Jiang1,2, Jing Yang1
1Hainan Vocational University of Science and Technology, Haikou 571126, China
2Institute for Mathematical Research, Universiti Putra Malaysia, Serdang 43400, Malaysia
Hui Yuan1, Minjie Chai2, Siqing Xu1, Jinsong Li1, Jinwan Zheng1
1Electric Power Research Institute, State Grid Shanxi Electric Power Co., Ltd., Taiyuan, 030001, Shanxi, China
2Jincheng Power Supply Branch, State Grid Shanxi Electric Power Co., Ltd., Jincheng, 048000, Shanxi, China
Yanhan Zhu1,2
1China Academy of Cultural Heritage, Chaoyang District, 100029, Beijing, China
2Beijing University of Civil Engineering and Architecture, Xicheng District, 100044, Beijing, China
Ken Wang1, Jinhan Shu2, Kan Yuan1
1School of Digital Media, Shenzhen Polytechnic University, Shenzhen 518055, Guangdong, China
2Postdoctoral Mobile Station of Journalism and communication, Fudan University, Shanghai 200433, Shanghai, China