{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T03:04:11Z","timestamp":1791428651916,"version":"4.3.3"},"publisher-location":"New York, NY, USA","reference-count":56,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Science Foundation","award":["CNS1820624, CNS1814590"],"award-info":[{"award-number":["CNS1820624, CNS1814590"]}]},{"name":"Air Force Research Laboratory","award":["FA87501820058"],"award-info":[{"award-number":["FA87501820058"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3423348","type":"proceedings-article","created":{"date-parts":[[2021,3,4]],"date-time":"2021-03-04T11:20:42Z","timestamp":1614856842000},"page":"1121-1134","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":99,"title":["AdvPulse: Universal, Synchronization-free, and Targeted Audio Adversarial Attacks via Subsecond Perturbations"],"prefix":"10.1145","author":[{"given":"Zhuohang","family":"Li","sequence":"first","affiliation":[{"name":"University of Tennessee, Knoxville, Knoxville, TN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yi","family":"Wu","sequence":"additional","affiliation":[{"name":"University of Tennessee, Knoxville, Knoxville, TN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jian","family":"Liu","sequence":"additional","affiliation":[{"name":"University of Tennessee, Knoxville, Knoxville, TN, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yingying","family":"Chen","sequence":"additional","affiliation":[{"name":"Rutgers University, New Brunswick, NJ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bo","family":"Yuan","sequence":"additional","affiliation":[{"name":"Rutgers University, New Brunswick, NJ, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"12th USENIX Symposium on Operating Systems Design and Implementation (OSDI). 265--283","author":"Abadi Mart'in","year":"2016"},{"key":"e_1_3_2_2_2_1","volume-title":"Kevin RB Butler, and Joseph Wilson","author":"Abdullah Hadi","year":"2019"},{"key":"e_1_3_2_2_3_1","volume-title":"Proceedings of the Annual Conference on Neural Information Processing Systems (NIPS).","author":"Alzantot Moustafa","year":"2017"},{"key":"e_1_3_2_2_4_1","unstructured":"Amazon. 2020. Amazon Echo. https:\/\/www.amazon.com\/all-new-Echo\/dp\/B07R1CXKN7  Amazon. 2020. Amazon Echo. https:\/\/www.amazon.com\/all-new-Echo\/dp\/B07R1CXKN7"},{"key":"e_1_3_2_2_5_1","volume-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples. arXiv preprint arXiv:1802.00420","author":"Athalye Anish","year":"2018"},{"key":"e_1_3_2_2_6_1","volume-title":"Synthesizing robust adversarial examples. arXiv preprint arXiv:1707.07397","author":"Athalye Anish","year":"2017"},{"key":"e_1_3_2_2_7_1","unstructured":"Chase Bank. 2019. Security as unique as your voice. https:\/\/www.chase.com\/personal\/voice-biometrics.  Chase Bank. 2019. Security as unique as your voice. https:\/\/www.chase.com\/personal\/voice-biometrics."},{"key":"e_1_3_2_2_8_1","unstructured":"Karissa Bell. 2015. A smarter Siri learns to recognize the sound of your voice in iOS 9. https:\/\/mashable.com\/2015\/09\/11\/hey-siri-voice-recognition\/  Karissa Bell. 2015. A smarter Siri learns to recognize the sound of your voice in iOS 9. https:\/\/mashable.com\/2015\/09\/11\/hey-siri-voice-recognition\/"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00009"},{"key":"e_1_3_2_2_11_1","volume-title":"Who is Real Bob? Adversarial Attacks on Speaker Recognition Systems. arXiv preprint arXiv:1911.01840","author":"Chen Guangke","year":"2019"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.23055"},{"key":"e_1_3_2_2_13_1","volume-title":"Proceedings of Advances in neural information processing systems (NeurIPS). 6977--6987","author":"Cisse Moustapha M","year":"2017"},{"key":"e_1_3_2_2_14_1","volume-title":"Joint European Conference on Machine Learning and Knowledge Discovery in Databases. Springer, 677--681","author":"Das Nilaksh","year":"2018"},{"key":"e_1_3_2_2_15_1","volume-title":"International Conference on Learning Representations (ICLR).","author":"Dozat Timothy","year":"2016"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/1953048.2021068"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/649"},{"key":"e_1_3_2_2_18_1","volume-title":"Deep learning","author":"Goodfellow Ian"},{"key":"e_1_3_2_2_19_1","volume-title":"Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572","author":"Goodfellow Ian J","year":"2014"},{"key":"e_1_3_2_2_20_1","unstructured":"Google. 2020 a. Google Home. https:\/\/store.google.com\/us\/product\/google_home  Google. 2020 a. Google Home. https:\/\/store.google.com\/us\/product\/google_home"},{"key":"e_1_3_2_2_21_1","unstructured":"Google. 2020 b. Speech-to-text Conversion Powered by Machine Learning. https:\/\/cloud.google.com\/speech-to-text  Google. 2020 b. Speech-to-text Conversion Powered by Machine Learning. https:\/\/cloud.google.com\/speech-to-text"},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143891"},{"key":"e_1_3_2_2_23_1","unstructured":"Chris Hall. 2019. Hey BMW: Your intelligent voice assistant is actually pretty good. https:\/\/www.pocket-lint.com\/cars\/news\/bmw\/148690-hey-bmw-your-intelligent-voice-assistant-is-actually-pretty-good.  Chris Hall. 2019. Hey BMW: Your intelligent voice assistant is actually pretty good. https:\/\/www.pocket-lint.com\/cars\/news\/bmw\/148690-hey-bmw-your-intelligent-voice-assistant-is-actually-pretty-good."},{"key":"e_1_3_2_2_24_1","unstructured":"Awni Hannun Carl Case Jared Casper Bryan Catanzaro Greg Diamos Erich Elsen Ryan Prenger Sanjeev Satheesh Shubho Sengupta Adam Coates etal 2014. Deep speech: Scaling up end-to-end speech recognition. arXiv preprint arXiv:1412.5567 (2014).  Awni Hannun Carl Case Jared Casper Bryan Catanzaro Greg Diamos Erich Elsen Ryan Prenger Sanjeev Satheesh Shubho Sengupta Adam Coates et al. 2014. Deep speech: Scaling up end-to-end speech recognition. arXiv preprint arXiv:1412.5567 (2014)."},{"key":"e_1_3_2_2_25_1","unstructured":"Xuedong Huang. 2017. Microsoft researchers achieve new conversational speech recognition milestone. https:\/\/www.microsoft.com\/en-us\/research\/blog\/microsoft-researchers-achieve-new-conversational-speech-recognition-milestone\/  Xuedong Huang. 2017. Microsoft researchers achieve new conversational speech recognition milestone. https:\/\/www.microsoft.com\/en-us\/research\/blog\/microsoft-researchers-achieve-new-conversational-speech-recognition-milestone\/"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDSP.2009.5201259"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"publisher","DOI":"10.1214\/aoms\/1177729392"},{"key":"e_1_3_2_2_28_1","volume-title":"Adam: A method for stochastic optimization. arXiv preprint arXiv:1412.6980","author":"Kingma Diederik P","year":"2014"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/WASPAA.2013.6701894"},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2018.8462693"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3376897.3377856"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"e_1_3_2_2_34_1","volume-title":"Language Resources and Evaluation Conference. 965--968","author":"Nakamura Satoshi","year":"2000"},{"key":"e_1_3_2_2_35_1","volume-title":"Universal adversarial perturbations for speech recognition systems. arXiv preprint arXiv:1905.03828","author":"Neekhara Paarth","year":"2019"},{"key":"e_1_3_2_2_36_1","volume-title":"Annual Conference of the International Speech Communication Association (INTERSPEECH).","author":"Peddinti Vijayaditya","year":"2015"},{"key":"e_1_3_2_2_37_1","volume-title":"The Kaldi Speech Recognition Toolkit. In IEEE Workshop on Automatic Speech Recognition and Understanding (ASRU). IEEE Signal Processing Society. IEEE Catalog No.: CFP11SRW-USB.","author":"Povey Daniel","year":"2011"},{"key":"e_1_3_2_2_38_1","volume-title":"Proceedings of the International Conference on Machine Learning (ICLR). 5231--5240","author":"Qin Yao","year":"2019"},{"key":"e_1_3_2_2_39_1","volume-title":"Annual Conference of the International Speech Communication Association (INTERSPEECH).","author":"Sainath Tara N","year":"2015"},{"key":"e_1_3_2_2_40_1","unstructured":"Samsung. 2020. Unlocks your phone with Bixby Voice. https:\/\/www.samsung.com\/us\/support\/answer\/ANS00082783\/  Samsung. 2020. Unlocks your phone with Bixby Voice. https:\/\/www.samsung.com\/us\/support\/answer\/ANS00082783\/"},{"key":"e_1_3_2_2_41_1","volume-title":"Adversarial attacks against automatic speech recognition systems via psychoacoustic hiding. arXiv preprint arXiv:1808.05665","author":"Sch\u00f6nherr Lea","year":"2018"},{"key":"e_1_3_2_2_42_1","unstructured":"Google Assistant SDK. 2020. Best Practices for Audio. https:\/\/developers.google.com\/assistant\/sdk\/guides\/service\/python\/best-practices\/audio.  Google Assistant SDK. 2020. Best Practices for Audio. https:\/\/developers.google.com\/assistant\/sdk\/guides\/service\/python\/best-practices\/audio."},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/SLT.2018.8639622"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2018.8461375"},{"key":"e_1_3_2_2_45_1","volume-title":"Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199","author":"Szegedy Christian","year":"2013"},{"key":"e_1_3_2_2_46_1","unstructured":"Tesla. 2020. Voice Commands. https:\/\/www.tesla.com\/support\/voice-commands.  Tesla. 2020. Voice Commands. https:\/\/www.tesla.com\/support\/voice-commands."},{"key":"e_1_3_2_2_47_1","volume-title":"Universal adversarial examples in speech command classification. arXiv preprint arXiv:1911.10182","author":"Vadillo Jon","year":"2019"},{"key":"e_1_3_2_2_48_1","unstructured":"Christophe Veaux Junichi Yamagishi Kirsten MacDonald etal 2017. CSTR VCTK corpus: English multi-speaker corpus for CSTR voice cloning toolkit. University of Edinburgh. The Centre for Speech Technology Research (CSTR) (2017).  Christophe Veaux Junichi Yamagishi Kirsten MacDonald et al. 2017. CSTR VCTK corpus: English multi-speaker corpus for CSTR voice cloning toolkit. University of Edinburgh. The Centre for Speech Technology Research (CSTR) (2017)."},{"key":"e_1_3_2_2_49_1","volume-title":"Speech commands: A dataset for limited-vocabulary speech recognition. arXiv preprint arXiv:1804.03209","author":"Warden Pete","year":"2018"},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2019.8683120"},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9053747"},{"key":"e_1_3_2_2_52_1","volume-title":"Robust audio adversarial example for a physical attack. arXiv preprint arXiv:1810.11793","author":"Yakura Hiromu","year":"2018"},{"key":"e_1_3_2_2_53_1","volume-title":"Characterizing audio adversarial examples using temporal dependency. arXiv preprint arXiv:1809.10875","author":"Yang Zhuolin","year":"2018"},{"key":"e_1_3_2_2_54_1","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Yuan Xuejing","year":"2018"},{"key":"e_1_3_2_2_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155483"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"crossref","unstructured":"Yingke Zhu Tom Ko David Snyder Brian Mak and Daniel Povey. 2018. Self-Attentive Speaker Embeddings for Text-Independent Speaker Verification. In Interspeech. 3573--3577.  Yingke Zhu Tom Ko David Snyder Brian Mak and Daniel Povey. 2018. Self-Attentive Speaker Embeddings for Text-Independent Speaker Verification. In Interspeech. 3573--3577.","DOI":"10.21437\/Interspeech.2018-1158"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3423348","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3423348","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3423348","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T18:02:20Z","timestamp":1750183340000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3423348"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":56,"alternative-id":["10.1145\/3372297.3423348","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3423348","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}