{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,11]],"date-time":"2025-09-11T20:32:34Z","timestamp":1757622754315,"version":"3.44.0"},"reference-count":42,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U2441240","62441238","U21B2018","62441237"],"award-info":[{"award-number":["U2441240","62441238","U21B2018","62441237"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Xiaomi Young Scholar Program"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2025,9]]},"DOI":"10.1109\/tdsc.2025.3548611","type":"journal-article","created":{"date-parts":[[2025,3,6]],"date-time":"2025-03-06T13:54:35Z","timestamp":1741269275000},"page":"4488-4502","source":"Crossref","is-referenced-by-count":1,"title":["CuckooAttack: Towards Practical Backdoor Attack against Automatic Speech Recognition Systems"],"prefix":"10.1109","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0009-0004-5445-8209","authenticated-orcid":false,"given":"Bowen","family":"Li","sequence":"first","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6158-3180","authenticated-orcid":false,"given":"Yunjie","family":"Ge","sequence":"additional","affiliation":[{"name":"Institute for Math&AI, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-9308-7452","authenticated-orcid":false,"given":"Zheng","family":"Fang","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5265-1521","authenticated-orcid":false,"given":"Tao","family":"Wang","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1700-3836","authenticated-orcid":false,"given":"Lingchen","family":"Zhao","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Quan","family":"Lu","sequence":"additional","affiliation":[{"name":"Mashang Consumer Finance Company., Ltd., Chongqing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ning","family":"Jiang","sequence":"additional","affiliation":[{"name":"Mashang Consumer Finance Company., Ltd., Chongqing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8967-8525","authenticated-orcid":false,"given":"Qian","family":"Wang","sequence":"additional","affiliation":[{"name":"Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering, Wuhan University, Wuhan, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3503161.3548261"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3495243.3560531"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179331"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP39728.2021.9413468"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.3390\/app12125786"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-20096-0_45"},{"key":"ref10","first-page":"57","article-title":"Can you hear it? Backdoor attacks via ultrasonic triggers","volume-title":"Proc. ACM Workshop Wireless Secur. Mach. Learn.","author":"Koffas","year":"2022"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3581783.3613843"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3570361.3613261"},{"article-title":"PBSM: Backdoor attack against keyword spotting based on pitch boosting and sound masking","year":"2022","author":"Cai","key":"ref13"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP49357.2023.10096332"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SaTML54575.2023.00035"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00148"},{"key":"ref17","first-page":"7285","article-title":"Devil in the room: Triggering audio backdoors in the physical world","volume-title":"Proc. USENIX Secur.","author":"Chen","year":"2023"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9053889"},{"article-title":"Citrinet: Closing the gap between non-autoregressive and autoregressive end-to-end models for automatic speech recognition","year":"2021","author":"Majumdar","key":"ref19"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.21437\/Interspeech.2020-2059"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.21437\/Interspeech.2020-3015"},{"issue":"PMLR","key":"ref22","first-page":"173","article-title":"Deep speech 2: End-to-end speech recognition in english and mandarin","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Amodei","year":"2016"},{"key":"ref23","article-title":"Mel frequency cepstral coefficients for music modeling","volume-title":"Proc. Int. Soc. Music Inf. Retrieval","author":"Logan","year":"2000"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1121\/1.1995189"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1121\/1.399423"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143891"},{"article-title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","year":"2017","author":"Gu","key":"ref27"},{"article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","year":"2017","author":"Chen","key":"ref28"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"ref30","first-page":"1505","article-title":"Blind backdoors in deep learning models","volume-title":"Proc. USENIX Secur.","author":"Bagdasaryan","year":"2021"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3374664.3375751"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR42600.2020.01445"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3021407"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417253"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464809"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2015.7178964"},{"issue":"PMLR","key":"ref37","first-page":"195","article-title":"Deep voice: Real-time neural text-to-speech","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Arik","year":"2017"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3423348"},{"key":"ref39","first-page":"284","article-title":"Synthesizing robust adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Athalye","year":"2018"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/741"},{"article-title":"Room impulse response generator","year":"2006","author":"Habets","key":"ref41"},{"year":"2023","key":"ref42","article-title":"Librispeech"},{"key":"ref43","first-page":"2273","article-title":"Waveguard: Understanding and mitigating audio adversarial examples","volume-title":"Proc. USENIX Secur.","author":"Hussain","year":"2021"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_13"},{"article-title":"Clean-Label Backdoor Attacks","year":"2018","author":"Turner","key":"ref45"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8858\/11150357\/10916507.pdf?arnumber=10916507","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,8]],"date-time":"2025-09-08T22:52:06Z","timestamp":1757371926000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10916507\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9]]},"references-count":42,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2025.3548611","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"type":"print","value":"1545-5971"},{"type":"electronic","value":"1941-0018"},{"type":"electronic","value":"2160-9209"}],"subject":[],"published":{"date-parts":[[2025,9]]}}}