{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,2]],"date-time":"2026-08-02T22:06:57Z","timestamp":1785708417742,"version":"3.56.0"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012335","name":"National Defense Basic Scientific Research Program of China","doi-asserted-by":"publisher","award":["JCKY2018603B006"],"award-info":[{"award-number":["JCKY2018603B006"]}],"id":[{"id":"10.13039\/501100012335","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62172402"],"award-info":[{"award-number":["62172402"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U19B2022"],"award-info":[{"award-number":["U19B2022"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U22B2047"],"award-info":[{"award-number":["U22B2047"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1936214"],"award-info":[{"award-number":["U1936214"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61872350"],"award-info":[{"award-number":["61872350"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Science and Technology Development Fund, Macau SAR","award":["0049\/2022\/A1"],"award-info":[{"award-number":["0049\/2022\/A1"]}]},{"DOI":"10.13039\/501100004733","name":"University of Macau","doi-asserted-by":"publisher","award":["MYRG2022-00072-FST"],"award-info":[{"award-number":["MYRG2022-00072-FST"]}],"id":[{"id":"10.13039\/501100004733","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["FRFCU5710011322"],"award-info":[{"award-number":["FRFCU5710011322"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/tifs.2022.3222963","type":"journal-article","created":{"date-parts":[[2022,11,17]],"date-time":"2022-11-17T20:32:26Z","timestamp":1668717146000},"page":"351-364","source":"Crossref","is-referenced-by-count":33,"title":["Query-Efficient Adversarial Attack With Low Perturbation Against End-to-End Speech Recognition Systems"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5748-5438","authenticated-orcid":false,"given":"Shen","family":"Wang","sequence":"first","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhaoyang","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7956-5343","authenticated-orcid":false,"given":"Guopu","family":"Zhu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Harbin Institute of Technology, Harbin, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0212-3501","authenticated-orcid":false,"given":"Xinpeng","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Computer Science, Fudan University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4487-6384","authenticated-orcid":false,"given":"Yicong","family":"Zhou","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Science, University of Macau, Taipa, Macau"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7625-5689","authenticated-orcid":false,"given":"Jiwu","family":"Huang","sequence":"additional","affiliation":[{"name":"Guangdong Key Laboratory of Intelligent Information Processing, Shenzhen Key Laboratory of Media Security, Shenzhen University, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3485383"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2019.8683713"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICME.2019.00223"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143891"},{"key":"ref31","article-title":"Deep speech: Scaling up end-to-end speech recognition","author":"hannun","year":"2014","journal-title":"arXiv 1412 5567"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2018.8462105"},{"key":"ref37","first-page":"49","article-title":"Commandersong: A systematic approach for practical adversarial voice recognition","author":"yuan","year":"2018","journal-title":"Proc 27th USENIX Conf Secur Symp"},{"key":"ref36","author":"iter","year":"2017","journal-title":"Generating Adversarial Examples for Speech Recognition"},{"key":"ref35","article-title":"Adversarial attacks against automatic speech recognition systems via psychoacoustic hiding","author":"sch\u00f6nherr","year":"2018","journal-title":"arXiv 1808 05665"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5928"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2019.1800477"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01258-8_10"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TASLP.2020.3040545"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00009"},{"key":"ref21","first-page":"1","article-title":"Houdini: Fooling deep structured visual and speech recognition models with adversarial examples","volume":"30","author":"cisse","year":"2017","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref24","article-title":"Practical black-box attacks against machine learning","author":"papernot","year":"2016","journal-title":"arXiv 1602 02697"},{"key":"ref23","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"liu","year":"2016","journal-title":"arXiv 1611 02770"},{"key":"ref26","first-page":"2137","article-title":"Black-box adversarial attacks with limited queries and information","author":"ilyas","year":"2018","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TCIAIG.2012.2186810"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1561\/2200000038"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.6173"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2018.8462456"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/ASRU.2017.8268937"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2015.7178964"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ADPRL.2013.6614991"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1609\/icaps.v21i1.13484"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1609\/icaps.v22i1.13507"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.21437\/Interspeech.2020-2834"},{"key":"ref11","first-page":"1381","article-title":"Textshield: Robust text classification based on multimodal embedding and neural machine translation","author":"li","year":"2020","journal-title":"Proc 29th USENIX Secur Symp"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ICC42927.2021.9500431"},{"key":"ref12","article-title":"TextBugger: Generating adversarial text against real-world applications","author":"li","year":"2018","journal-title":"arXiv 1812 05271"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2019.1900006"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3384733"},{"key":"ref15","first-page":"326","article-title":"Automatic speech recognition: Architecture, methodologies and challenges—A review","volume":"2","author":"karpagavalli","year":"2011","journal-title":"Int J Adv Res Comput Sci"},{"key":"ref16","first-page":"5231","article-title":"Imperceptible, robust, and targeted adversarial examples for automatic speech recognition","author":"qin","year":"2019","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TASLP.2021.3124420"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.3026543"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TASLP.2019.2933146"},{"key":"ref3","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2015","journal-title":"arXiv 1412 6572"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00014"},{"key":"ref5","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013","journal-title":"arXiv 1312 6199"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00099"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1038\/nature24270"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref46","volume":"24","author":"chaslot","year":"2010","journal-title":"Monte-carlo Tree Search"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00016"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1038\/s41586-020-03051-4"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1038\/nature16961"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3152526"},{"key":"ref41","first-page":"2667","article-title":"Devil’s whisper: A general approach for physical adversarial attacks against commercial black-box speech recognition devices","author":"chen","year":"2020","journal-title":"Proc 29th USENIX Secur Symp (USENIX Security)"},{"key":"ref44","article-title":"Did you hear that? Adversarial examples against automatic speech recognition","author":"alzantot","year":"2018","journal-title":"arXiv 1801 00554"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-88052-1_9"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9970396\/09954062.pdf?arnumber=9954062","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,26]],"date-time":"2022-12-26T19:12:20Z","timestamp":1672081940000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9954062\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":58,"URL":"https:\/\/doi.org\/10.1109\/tifs.2022.3222963","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}