{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,22]],"date-time":"2026-04-22T18:17:39Z","timestamp":1776881859011,"version":"3.51.2"},"publisher-location":"New York, NY, USA","reference-count":23,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,5,16]],"date-time":"2022-05-16T00:00:00Z","timestamp":1652659200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,5,19]]},"DOI":"10.1145\/3522783.3529523","type":"proceedings-article","created":{"date-parts":[[2022,5,9]],"date-time":"2022-05-09T14:33:45Z","timestamp":1652106825000},"page":"57-62","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":39,"title":["Can You Hear It?"],"prefix":"10.1145","author":[{"given":"Stefanos","family":"Koffas","sequence":"first","affiliation":[{"name":"Technical University of Delft, Delft, Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jing","family":"Xu","sequence":"additional","affiliation":[{"name":"Technical University of Delft, Delft, Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mauro","family":"Conti","sequence":"additional","affiliation":[{"name":"University of Padua, Padua, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stjepan","family":"Picek","sequence":"additional","affiliation":[{"name":"Radboud University, Nijmegen, Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,5,16]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Common Voice: A Massively-Multilingual Speech Corpus. CoRR","author":"Ardila Rosana","year":"2019","unstructured":"Rosana Ardila , Megan Branson , Kelly Davis , Michael Henretty , Michael Kohler , Josh Meyer , Reuben Morais , Lindsay Saunders , Francis M. Tyers , and Gregor Weber . 2019 . Common Voice: A Massively-Multilingual Speech Corpus. CoRR , Vol. abs\/ 1912 .06670 (2019). arxiv: 1912.06670 http:\/\/arxiv.org\/abs\/1912.06670 Rosana Ardila, Megan Branson, Kelly Davis, Michael Henretty, Michael Kohler, Josh Meyer, Reuben Morais, Lindsay Saunders, Francis M. Tyers, and Gregor Weber. 2019. Common Voice: A Massively-Multilingual Speech Corpus. CoRR, Vol. abs\/1912.06670 (2019). arxiv: 1912.06670 http:\/\/arxiv.org\/abs\/1912.06670"},{"key":"e_1_3_2_1_2_1","volume-title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering. CoRR","author":"Chen Bryant","year":"2018","unstructured":"Bryant Chen , Wilka Carvalho , Nathalie Baracaldo , Heiko Ludwig , Benjamin Edwards , Taesung Lee , Ian M. Molloy , and Biplav Srivastava . 2018. Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering. CoRR , Vol. abs\/ 1811 .03728 ( 2018 ). arxiv: 1811.03728 http:\/\/arxiv.org\/abs\/1811.03728 Bryant Chen, Wilka Carvalho, Nathalie Baracaldo, Heiko Ludwig, Benjamin Edwards, Taesung Lee, Ian M. Molloy, and Biplav Srivastava. 2018. Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering. CoRR, Vol. abs\/1811.03728 (2018). arxiv: 1811.03728 http:\/\/arxiv.org\/abs\/1811.03728"},{"key":"e_1_3_2_1_3_1","volume-title":"Martin Loesener Da Silva Viana, and Christoph Bernkopf","author":"de Andrade Douglas Coimbra","year":"2018","unstructured":"Douglas Coimbra de Andrade , Sabato Leo , Martin Loesener Da Silva Viana, and Christoph Bernkopf . 2018 . A neural attention model for speech command recognition. arxiv: eess.AS\/1808.08929 Douglas Coimbra de Andrade, Sabato Leo, Martin Loesener Da Silva Viana, and Christoph Bernkopf. 2018. A neural attention model for speech command recognition. arxiv: eess.AS\/1808.08929"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"e_1_3_2_1_5_1","unstructured":"Google. 2022. Speech-to-Text basics. https:\/\/cloud.google.com\/speech-to-text\/docs\/basics. [Online Accessed: today].  Google. 2022. Speech-to-Text basics. https:\/\/cloud.google.com\/speech-to-text\/docs\/basics. [Online Accessed: today]."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"e_1_3_2_1_7_1","volume-title":"Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning. CoRR","author":"Jagielski Matthew","year":"2018","unstructured":"Matthew Jagielski , Alina Oprea , Battista Biggio , Chang Liu , Cristina Nita-Rotaru , and Bo Li. 2018. Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning. CoRR , Vol. abs\/ 1804 .00308 ( 2018 ). arxiv: 1804.00308 http:\/\/arxiv.org\/abs\/1804.00308 Matthew Jagielski, Alina Oprea, Battista Biggio, Chang Liu, Cristina Nita-Rotaru, and Bo Li. 2018. Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning. CoRR, Vol. abs\/1804.00308 (2018). arxiv: 1804.00308 http:\/\/arxiv.org\/abs\/1804.00308"},{"key":"e_1_3_2_1_8_1","volume-title":"Deep Learning for NLP and Speech Recognition","author":"Kamath Uday","unstructured":"Uday Kamath , John Liu , and James Whitaker . 2019. Deep Learning for NLP and Speech Recognition . Springer . https:\/\/doi.org\/10.1007\/978-3-030-14596-5 10.1007\/978-3-030-14596-5 Uday Kamath, John Liu, and James Whitaker. 2019. Deep Learning for NLP and Speech Recognition. Springer. https:\/\/doi.org\/10.1007\/978-3-030-14596-5"},{"key":"e_1_3_2_1_9_1","volume-title":"Trojaning Attack on Neural Networks. In 25nd Annual Network and Distributed System Security Symposium, NDSS 2018","author":"Liu Yingqi","year":"2018","unstructured":"Yingqi Liu , Shiqing Ma , Yousra Aafer , Wen-Chuan Lee , Juan Zhai , Weihang Wang , and Xiangyu Zhang . 2018 . Trojaning Attack on Neural Networks. In 25nd Annual Network and Distributed System Security Symposium, NDSS 2018 , San Diego, California, USA, February 18--221 , 2018. The Internet Society. Yingqi Liu, Shiqing Ma, Yousra Aafer, Wen-Chuan Lee, Juan Zhai, Weihang Wang, and Xiangyu Zhang. 2018. Trojaning Attack on Neural Networks. In 25nd Annual Network and Distributed System Security Symposium, NDSS 2018, San Diego, California, USA, February 18--221, 2018. The Internet Society."},{"key":"e_1_3_2_1_10_1","unstructured":"Microsoft. 2022. Speech to Text. https:\/\/azure.microsoft.com\/en-in\/services\/cognitive-services\/speech-to-text\/. [Online Accessed: today].  Microsoft. 2022. Speech to Text. https:\/\/azure.microsoft.com\/en-in\/services\/cognitive-services\/speech-to-text\/. [Online Accessed: today]."},{"key":"e_1_3_2_1_11_1","volume-title":"Large image datasets: A pyrrhic win for computer vision? CoRR","author":"Prabhu Vinay Uday","year":"2020","unstructured":"Vinay Uday Prabhu and Abeba Birhane . 2020. Large image datasets: A pyrrhic win for computer vision? CoRR , Vol. abs\/ 2006 .16923 ( 2020 ). arxiv: 2006.16923 https:\/\/arxiv.org\/abs\/2006.16923 Vinay Uday Prabhu and Abeba Birhane. 2020. Large image datasets: A pyrrhic win for computer vision? CoRR, Vol. abs\/2006.16923 (2020). arxiv: 2006.16923 https:\/\/arxiv.org\/abs\/2006.16923"},{"key":"e_1_3_2_1_12_1","volume-title":"Deep Neural Networks: A Case Study for Music Genre Classification. In 2015 IEEE 14th International Conference on Machine Learning and Applications (ICMLA). 655--660","author":"Rajanna Arjun Raj","year":"2015","unstructured":"Arjun Raj Rajanna , Kamelia Aryafar , Ali Shokoufandeh , and Raymond Ptucha . 2015 . Deep Neural Networks: A Case Study for Music Genre Classification. In 2015 IEEE 14th International Conference on Machine Learning and Applications (ICMLA). 655--660 . https:\/\/doi.org\/10.1109\/ICMLA.2015.160 10.1109\/ICMLA.2015.160 Arjun Raj Rajanna, Kamelia Aryafar, Ali Shokoufandeh, and Raymond Ptucha. 2015. Deep Neural Networks: A Case Study for Music Genre Classification. In 2015 IEEE 14th International Conference on Machine Learning and Applications (ICMLA). 655--660. https:\/\/doi.org\/10.1109\/ICMLA.2015.160"},{"key":"e_1_3_2_1_13_1","unstructured":"Carl Reinke. 2018. Spectroid. https:\/\/play.google.com\/store\/apps\/details?id=org.intoorbit.spectrum [Online Accessed: today].  Carl Reinke. 2018. Spectroid. https:\/\/play.google.com\/store\/apps\/details?id=org.intoorbit.spectrum [Online Accessed: today]."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3081333.3081366"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP40776.2020.9054750"},{"key":"e_1_3_2_1_16_1","unstructured":"Google Tensorflow Team. 2019. TensorFlow Lite Speech Command Recognition Android Demo. https:\/\/github.com\/tensorflow\/examples\/tree\/master\/lite\/examples\/speech_commands\/android.  Google Tensorflow Team. 2019. TensorFlow Lite Speech Command Recognition Android Demo. https:\/\/github.com\/tensorflow\/examples\/tree\/master\/lite\/examples\/speech_commands\/android."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW50498.2020.00402"},{"key":"e_1_3_2_1_18_1","volume-title":"Bhargava","author":"Villarreal-Vasquez Miguel","year":"2020","unstructured":"Miguel Villarreal-Vasquez and Bharat K . Bhargava . 2020 . ConFoc: Content- Focus Protection Against Trojan Attacks on Neural Networks. CoRR , Vol. abs\/ 2007 .00711 (2020). arxiv: 2007.00711 https:\/\/arxiv.org\/abs\/2007.00711 Miguel Villarreal-Vasquez and Bharat K. Bhargava. 2020. ConFoc: Content-Focus Protection Against Trojan Attacks on Neural Networks. CoRR, Vol. abs\/2007.00711 (2020). arxiv: 2007.00711 https:\/\/arxiv.org\/abs\/2007.00711"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2018.8462665"},{"key":"e_1_3_2_1_20_1","volume-title":"Corpus-based studies in language use, language learning, and language documentation","author":"Weinberger Steven H","unstructured":"Steven H Weinberger and Stephen A Kunath . 2011. The Speech Accent Archive: towards a typology of English accents . In Corpus-based studies in language use, language learning, and language documentation . Brill Rodopi , 265--281. Steven H Weinberger and Stephen A Kunath. 2011. The Speech Accent Archive: towards a typology of English accents. In Corpus-based studies in language use, language learning, and language documentation. Brill Rodopi, 265--281."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00034"},{"key":"e_1_3_2_1_22_1","volume-title":"Backdoor Attack Against Speaker Verification. In ICASSP 2021 - 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP). 2560--2564","author":"Zhai Tongqing","year":"2021","unstructured":"Tongqing Zhai , Yiming Li , Ziqi Zhang , Baoyuan Wu , Yong Jiang , and Shu-Tao Xia . 2021 . Backdoor Attack Against Speaker Verification. In ICASSP 2021 - 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP). 2560--2564 . https:\/\/doi.org\/10.1109\/ICASSP39728.2021.9413468 10.1109\/ICASSP39728.2021.9413468 Tongqing Zhai, Yiming Li, Ziqi Zhang, Baoyuan Wu, Yong Jiang, and Shu-Tao Xia. 2021. Backdoor Attack Against Speaker Verification. In ICASSP 2021 - 2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP). 2560--2564. https:\/\/doi.org\/10.1109\/ICASSP39728.2021.9413468"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134052"}],"event":{"name":"WiSec '22: 15th ACM Conference on Security and Privacy in Wireless and Mobile Networks","location":"San Antonio TX USA","acronym":"WiSec '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the 2022 ACM Workshop on Wireless Security and Machine Learning"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3522783.3529523","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3522783.3529523","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T19:30:16Z","timestamp":1750188616000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3522783.3529523"}},"subtitle":["Backdoor Attacks via Ultrasonic Triggers"],"short-title":[],"issued":{"date-parts":[[2022,5,16]]},"references-count":23,"alternative-id":["10.1145\/3522783.3529523","10.1145\/3522783"],"URL":"https:\/\/doi.org\/10.1145\/3522783.3529523","relation":{},"subject":[],"published":{"date-parts":[[2022,5,16]]},"assertion":[{"value":"2022-05-16","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}