{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,6]],"date-time":"2026-10-06T16:39:52Z","timestamp":1791304792185,"version":"4.3.1"},"reference-count":91,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,3,1]],"date-time":"2024-03-01T00:00:00Z","timestamp":1709251200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61972306"],"award-info":[{"award-number":["61972306"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"SongShan Laboratory","award":["YYJC012022005"],"award-info":[{"award-number":["YYJC012022005"]}]},{"name":"Zhejiang Lab","award":["2021KD0AB03"],"award-info":[{"award-number":["2021KD0AB03"]}]},{"name":"Zhejiang Lab's International Talent Fund"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2024,3]]},"DOI":"10.1109\/tdsc.2023.3236367","type":"journal-article","created":{"date-parts":[[2023,1,12]],"date-time":"2023-01-12T21:24:21Z","timestamp":1673558661000},"page":"650-667","source":"Crossref","is-referenced-by-count":13,"title":["Improving the Security of Audio CAPTCHAs With Adversarial Examples"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6192-6251","authenticated-orcid":false,"given":"Ping","family":"Wang","sequence":"first","affiliation":[{"name":"Department of Computer Science and Technology, Xidian University, Xi'an, Shaanxi, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4969-5718","authenticated-orcid":false,"given":"Haichang","family":"Gao","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Xidian University, Xi'an, Shaanxi, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaoyan","family":"Guo","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Xidian University, Xi'an, Shaanxi, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1210-1330","authenticated-orcid":false,"given":"Zhongni","family":"Yuan","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Xidian University, Xi'an, Shaanxi, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9693-3467","authenticated-orcid":false,"given":"Jiawei","family":"Nian","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology, Xidian University, Xi'an, Shaanxi, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-39200-9_18"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046724"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516732"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23154"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243754"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2928622"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.37"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3270101.3270104"},{"key":"ref9","article-title":"Sound oriented CAPTCHA","volume-title":"Proc. 1st Workshop Hum. Interactive Proofs","author":"Chan"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-54978-1_99"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3201590"},{"key":"ref12","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref15","first-page":"16","article-title":"Cocaine noodles: Exploiting the gap between human and machine speech recognition","volume-title":"Proc. 9th USENIX Workshop Offensive Technol.","author":"Vaidya"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/543"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2003.1211347"},{"key":"ref18","article-title":"The end is nigh: Generic solving of text-based $\\lbrace${CAPTCHAs$\\rbrace$}","volume-title":"Proc. 8th USENIX Workshop Offensive Technol.","author":"Bursztein"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455839"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2682704"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2821096"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2647868.2655017"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.2971477"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2982945"},{"key":"ref25","article-title":"CAPTCHA recognition with active deep learning","volume-title":"Proc. Workshop New Challenges Neural Comput.","author":"Stark"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3366423.3380166"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1049\/ise2.12047"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/966389.966390"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315291"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0091708"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1101149.1101218"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/957013.957075"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1526709.1526822"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1504\/IJAHUC.2021.114108"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/IC3.2018.8530607"},{"key":"ref37","first-page":"1","article-title":"Accessible voice CAPTCHAs for internet telephony","volume-title":"Proc. Symp. Accessible Privacy Secur.","author":"Markkola"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2702123.2702127"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2856820"},{"key":"ref40","first-page":"1625","article-title":"Breaking audio CAPTCHAs","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Tam"},{"key":"ref41","first-page":"1","article-title":"Decaptcha: Breaking 75% of ebay audio CAPTCHAs","volume-title":"Proc. 3rd USENIX Conf. Offensive Technol.","author":"Bursztein"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.14"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140443"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3201581"},{"key":"ref45","article-title":"Audio CAPTCHA recognition using rastaplp features by svm","author":"\u00c7akmak","year":"2019"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-41383-4_3"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664262"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2021.3071395"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2016.05.220"},{"key":"ref50","article-title":"Three-way dissection of a game-CAPTCHA: Automated attacks, relay attacks, and usability","author":"Mohamed","year":"2013"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-56549-1_30"},{"key":"ref53","first-page":"3291","article-title":"Research on the security of visual reasoning $\\lbrace${CAPTCHA$\\rbrace$}","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Gao"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134052"},{"key":"ref55","first-page":"49","article-title":"$\\lbrace${CommanderSong$\\rbrace$}: A systematic approach for practical adversarial voice recognition","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Yuan"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00009"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23288"},{"key":"ref58","article-title":"Universal adversarial audio perturbations","author":"Abdoli","year":"2019"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.21437\/Interspeech.2019-1353"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/741"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23362"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5457"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i16.17663"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3376897.3377856"},{"key":"ref65","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9053747"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/CyberC.2018.00013"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417258"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2020.3013376"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00009"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00034"},{"key":"ref73","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1145\/3422622"},{"key":"ref75","first-page":"5769","article-title":"Improved training of wasserstein gans","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Gulrajani"},{"key":"ref77","article-title":"Adversarial audio synthesis","author":"Donahue","year":"2018"},{"key":"ref78","article-title":"Unsupervised representation learning with deep convolutional generative adversarial networks","author":"Radford","year":"2015"},{"key":"ref79","article-title":"Deep speech: Scaling up end-to-end speech recognition","author":"Hannun","year":"2014"},{"key":"ref80","article-title":"Lingvo: A modular and scalable framework for sequence-to-sequence modeling","author":"Shen","year":"2019"},{"key":"ref81","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","author":"Papernot","year":"2016"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.21437\/Interspeech.2019-1819"},{"key":"ref83","article-title":"Wav2letter: An end-to-end convnet-based speech recognition system","author":"Collobert","year":"2016"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.21437\/Eurospeech.2003-382"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00016"},{"key":"ref89","first-page":"5231","article-title":"Imperceptible, robust, and targeted adversarial examples for automatic speech recognition","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Qin"},{"key":"ref90","article-title":"Wave-u-Net: A multi-scale neural network for end-to-end audio source separation","author":"Stoller","year":"2018"},{"key":"ref91","first-page":"214","article-title":"Wasserstein generative adversarial networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Arjovsky"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.304"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/isspit.2018.8642623"},{"key":"ref94","article-title":"Characterizing audio adversarial examples using temporal dependency","author":"Yang","year":"2018"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3220673"},{"key":"ref96","first-page":"2273","article-title":"$\\lbrace${WaveGuard$\\rbrace$}: Understanding and mitigating audio adversarial examples","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Hussain"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2020\/438"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10472294\/10015851.pdf?arnumber=10015851","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,26]],"date-time":"2024-03-26T12:48:45Z","timestamp":1711457325000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10015851\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3]]},"references-count":91,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2023.3236367","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,3]]}}}