Asja Fisher

DistriBlock: Identifying adversarial audio samples by leveraging characteristics of the output distribution

Adversarial attacks can mislead automatic speech recognition (ASR) systems into predicting an arbitrary target text, thus posing a clear security threat. To prevent such attacks, we propose DistriBlock, an efficient detection strategy applicable to any ASR system that predicts a probability distribu…