{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,31]],"date-time":"2025-10-31T07:59:56Z","timestamp":1761897596742,"version":"3.28.0"},"reference-count":26,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,6]]},"DOI":"10.1109\/icc42927.2021.9500431","type":"proceedings-article","created":{"date-parts":[[2021,8,6]],"date-time":"2021-08-06T20:49:21Z","timestamp":1628282961000},"page":"1-6","source":"Crossref","is-referenced-by-count":3,"title":["Generating Audio Adversarial Examples with Ensemble Substituted Models"],"prefix":"10.1109","author":[{"given":"Yun","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongwei","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guowen","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xizhao","family":"Luo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guishan","family":"Dong","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","article-title":"Learning to Attack: Adversarial Transformation Networks","volume":"1","author":"baluja","year":"2018","journal-title":"AAAI"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664262"},{"article-title":"Adversarial attacks against automatic speech recognition systems via psychoacoustic hiding","year":"2018","author":"schnherr","key":"ref12"},{"article-title":"Gansynth: Adversarial neural audio synthesis","year":"2019","author":"engel","key":"ref13"},{"article-title":"Imperceptible, robust, and targeted adversarial examples for automatic speech recognition","year":"2019","author":"qin","key":"ref14"},{"article-title":"Towards mitigating audio adversarial perturbations","year":"2018","author":"yang","key":"ref15"},{"article-title":"Transferability in machine learning: from phenomena to black-box attacks using adversarial samples","year":"2016","author":"papernot","key":"ref16"},{"key":"ref17","article-title":"Commandersong: A systematic approach for practical adversarial voice recognition","author":"yuan","year":"2018","journal-title":"27th USENIX Security Symposium (USENIX Security 18)"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ASP-DAC47756.2020.9045597"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"article-title":"Robust audio adversarial example for a physical attack","year":"2018","author":"yakura","key":"ref4"},{"article-title":"Adversarial examples in the physical world","year":"2016","author":"kurakin","key":"ref3"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00009"},{"article-title":"Did you hear that? adversarial examples against automatic speech recognition","year":"2018","author":"alzantot","key":"ref5"},{"key":"ref8","article-title":"Hidden voice commands","author":"carlini","year":"2016","journal-title":"25th USENIX Security Symposium (USENIX Security 16)"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00016"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5928"},{"key":"ref9","article-title":"Houdini: Fooling deep structured visual and speech recognition models with adversarial examples","author":"cisse","year":"2017","journal-title":"Advances in neural information processing systems"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2925452"},{"article-title":"ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Models","year":"2018","author":"salem","key":"ref20"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014066"},{"article-title":"Speech commands: A public dataset for single-word speech recognition","year":"2017","author":"warden","key":"ref21"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2929409"},{"key":"ref23","first-page":"1","article-title":"Secure and Verifiable Inference in Deep Neural Networks","author":"xu","year":"2020","journal-title":"Proceeding of ACM ACSAC"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.001.1900091"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3005909"}],"event":{"name":"ICC 2021 - IEEE International Conference on Communications","start":{"date-parts":[[2021,6,14]]},"location":"Montreal, QC, Canada","end":{"date-parts":[[2021,6,23]]}},"container-title":["ICC 2021 - IEEE International Conference on Communications"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9500243\/9500244\/09500431.pdf?arnumber=9500431","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T15:48:44Z","timestamp":1652197724000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9500431\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,6]]},"references-count":26,"URL":"https:\/\/doi.org\/10.1109\/icc42927.2021.9500431","relation":{},"subject":[],"published":{"date-parts":[[2021,6]]}}}