{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T05:00:22Z","timestamp":1750309222363,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":37,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,7,1]],"date-time":"2024-07-01T00:00:00Z","timestamp":1719792000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"U.S. National Science Foundation","award":["CNS-193320"],"award-info":[{"award-number":["CNS-193320"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,7]]},"DOI":"10.1145\/3634737.3645013","type":"proceedings-article","created":{"date-parts":[[2024,6,28]],"date-time":"2024-06-28T11:51:38Z","timestamp":1719575498000},"page":"1272-1286","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Self-Supervised Fine-Tuning of Automatic Speech Recognition Systems against Signal Processing Attacks"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-8469-0916","authenticated-orcid":false,"given":"Oshan","family":"Jayawardena","sequence":"first","affiliation":[{"name":"Department of Electronic and Telecommunication Engineering, University of Moratuwa, Moratuwa, Western Province, Sri Lanka"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-7086-8238","authenticated-orcid":false,"given":"Dilmi","family":"Caldera","sequence":"additional","affiliation":[{"name":"Department of Electronic and Telecommunication Engineering, University of Moratuwa, Moratuwa, Western Province, Sri Lanka"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-4748-6814","authenticated-orcid":false,"given":"Sandani","family":"Jayawardena","sequence":"additional","affiliation":[{"name":"Department of Electronic and Telecommunication Engineering, University of Moratuwa, Moratuwa, Western Province, Sri Lanka"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-6980-7805","authenticated-orcid":false,"given":"Avishka","family":"Sandeepa","sequence":"additional","affiliation":[{"name":"Department of Electronic and Telecommunication Engineering, University of Moratuwa, Moratuwa, Western Province, Sri Lanka"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3066-7354","authenticated-orcid":false,"given":"Vincent","family":"Bindschaedler","sequence":"additional","affiliation":[{"name":"CISE, University of Florida, Gainesville, Florida, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6940-3057","authenticated-orcid":false,"given":"Subodha","family":"Charles","sequence":"additional","affiliation":[{"name":"Department of Electronic and Telecommunication Engineering, University of Moratuwa, Moratuwa, Western Province, Sri Lanka"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,7]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2023. Conformer-2: a state-of-the-art speech recognition model trained on 1.1M hours of data. https:\/\/www.assemblyai.com\/blog\/conformer-2\/. (Accessed on 08\/09\/2023)."},{"key":"e_1_3_2_1_2_1","volume-title":"Patrick Cardinal, and Alessandro L Koerich.","author":"Abdoli Sajjad","year":"2019","unstructured":"Sajjad Abdoli, Luiz G Hafemann, Jerome Rony, Ismail Ben Ayed, Patrick Cardinal, and Alessandro L Koerich. 2019. Universal adversarial audio perturbations. arXiv preprint arXiv:1908.03173 (2019)."},{"key":"e_1_3_2_1_3_1","volume-title":"Kevin RB Butler, and Joseph Wilson","author":"Abdullah Hadi","year":"2019","unstructured":"Hadi Abdullah, Washington Garcia, Christian Peeters, Patrick Traynor, Kevin RB Butler, and Joseph Wilson. 2019. Practical hidden voice attacks against speech and speaker recognition systems. arXiv preprint arXiv:1904.05734 (2019)."},{"key":"e_1_3_2_1_4_1","volume-title":"International Conference on Learning Representations (ICLR).","author":"Abdullah Hadi","year":"2021","unstructured":"Hadi Abdullah, Aditya Karlekar, Vincent Bindschaedler, and Patrick Traynor. 2021. Demystifying limited adversarial transferability in automatic speech recognition systems. In International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_2_1_5_1","volume-title":"Logan Blue, Luke A. Bauer, Vincent Bindschaedler, and Patrick Traynor.","author":"Abdullah Hadi","year":"2022","unstructured":"Hadi Abdullah, Aditya Karlekar, Saurabh Prasad, Muhammad Sajidur Rahman, Logan Blue, Luke A. Bauer, Vincent Bindschaedler, and Patrick Traynor. 2022. Attacks as Defenses: Designing Robust Audio CAPTCHAs Using Attacks on Automatic Speech Recognition Systems. arXiv preprint arXiv:2203.05408 (2022)."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00009"},{"key":"e_1_3_2_1_7_1","volume-title":"Asian Conference on Machine Learning. PMLR, 672--688","author":"Abdullah Hadi","year":"2021","unstructured":"Hadi Abdullah, Muhammad Sajidur Rahman, Christian Peeters, Cassidy Gibson, Washington Garcia, Vincent Bindschaedler, Thomas Shrimpton, and Patrick Traynor. 2021. Beyond lp clipping: Equalization based psychoacoustic attacks against asrs. In Asian Conference on Machine Learning. PMLR, 672--688."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00014"},{"key":"e_1_3_2_1_9_1","volume-title":"Real time speech enhancement in the waveform domain. arXiv preprint arXiv:2006.12847","author":"Alexandre Defossez","year":"2020","unstructured":"Defossez Alexandre, Synnaeve Gabriel, and Adi Yossi. 2020. Real time speech enhancement in the waveform domain. arXiv preprint arXiv:2006.12847 (2020)."},{"key":"e_1_3_2_1_10_1","volume-title":"Did you hear that? adversarial examples against automatic speech recognition. arXiv preprint arXiv:1801.00554","author":"Alzantot Moustafa","year":"2018","unstructured":"Moustafa Alzantot, Bharathan Balaji, and Mani Srivastava. 2018. Did you hear that? adversarial examples against automatic speech recognition. arXiv preprint arXiv:1801.00554 (2018)."},{"key":"e_1_3_2_1_11_1","volume-title":"Perceptual-based deep-learning denoiser as a defense against adversarial attacks on ASR systems. arXiv preprint arXiv:2107.05222","author":"Anirudh Sreeram","year":"2021","unstructured":"Sreeram Anirudh, Mehlman Nicholas, Peri Raghuveer, Knox Dillon, and Narayanan Shrikanth. 2021. Perceptual-based deep-learning denoiser as a defense against adversarial attacks on ASR systems. arXiv preprint arXiv:2107.05222 (2021)."},{"key":"e_1_3_2_1_12_1","volume-title":"Common voice: A massively-multilingual speech corpus. arXiv preprint arXiv:1912.06670","author":"Ardila Rosana","year":"2019","unstructured":"Rosana Ardila, Megan Branson, Kelly Davis, Michael Henretty, Michael Kohler, Josh Meyer, Reuben Morais, Lindsay Saunders, Francis M Tyers, and Gregor Weber. 2019. Common voice: A massively-multilingual speech corpus. arXiv preprint arXiv:1912.06670 (2019)."},{"key":"e_1_3_2_1_13_1","volume-title":"Audio Adversarial Examples: Targeted Attacks on Speech-to-Text. arXiv:1801.01944v2 [cs.LG]","author":"Carlini Nicholas","year":"2018","unstructured":"Nicholas Carlini and David Wagner. 2018. Audio Adversarial Examples: Targeted Attacks on Speech-to-Text. arXiv:1801.01944v2 [cs.LG] 30 Mar 2018 (2018)."},{"key":"e_1_3_2_1_14_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Chen Yuxuan","year":"2020","unstructured":"Yuxuan Chen, Xuejing Yuan, Jiangshan Zhang, Yue Zhao, Shengzhi Zhang, Kai Chen, and XiaoFeng Wang. 2020. {Devil's} Whisper: A General Approach for Physical Adversarial Attacks against Commercial Black-box Speech Recognition Devices. In 29th USENIX Security Symposium (USENIX Security 20). 2667--2684."},{"key":"e_1_3_2_1_15_1","volume-title":"Houdini: Fooling deep structured visual and speech recognition models with adversarial examples. Advances in neural information processing systems 30","author":"Cisse Moustapha M","year":"2017","unstructured":"Moustapha M Cisse, Yossi Adi, Natalia Neverova, and Joseph Keshet. 2017. Houdini: Fooling deep structured visual and speech recognition models with adversarial examples. Advances in neural information processing systems 30 (2017)."},{"key":"e_1_3_2_1_16_1","volume-title":"Music source separation in the waveform domain. arXiv preprint arXiv:1911.13254","author":"D\u00e9fossez Alexandre","year":"2019","unstructured":"Alexandre D\u00e9fossez, Nicolas Usunier, L\u00e9on Bottou, and Francis Bach. 2019. Music source separation in the waveform domain. arXiv preprint arXiv:1911.13254 (2019)."},{"key":"e_1_3_2_1_17_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Eisenhofer Thorsten","year":"2021","unstructured":"Thorsten Eisenhofer, Lea Sch\u00f6nherr, Joel Frank, Lars Speckemeier, Dorothea Kolossa, and Thorsten Holz. 2021. Dompteur: Taming audio adversarial examples. In 30th USENIX Security Symposium (USENIX Security 21). 2309--2326."},{"key":"e_1_3_2_1_18_1","volume-title":"An improved version of metricgan for speech enhancement. arXiv preprint arXiv:2104.03538","author":"Fu Szu-Wei","year":"2021","unstructured":"Szu-Wei Fu, Cheng Yu, Tsun-An Hsieh, Peter Plantinga, Mirco Ravanelli, Xugang Lu, and Yu Tsao. 2021. Metricgan+: An improved version of metricgan for speech enhancement. arXiv preprint arXiv:2104.03538 (2021)."},{"key":"e_1_3_2_1_19_1","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Hussain Shehzeen","year":"2021","unstructured":"Shehzeen Hussain, Paarth Neekhara, Shlomo Dubnov, Julian McAuley, and Farinaz Koushanfar. 2021. WaveGuard: Understanding and mitigating audio adversarial examples. In 30th USENIX Security Symposium (USENIX Security 21). 2273--2290."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2018.8462693"},{"volume-title":"Artificial intelligence safety and security","author":"Kurakin Alexey","key":"e_1_3_2_1_21_1","unstructured":"Alexey Kurakin, Ian J Goodfellow, and Samy Bengio. 2018. Adversarial examples in the physical world. In Artificial intelligence safety and security. Chapman and Hall\/CRC, 99--112."},{"key":"e_1_3_2_1_22_1","volume-title":"Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083","author":"Madry Aleksander","year":"2017","unstructured":"Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu. 2017. Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017)."},{"key":"e_1_3_2_1_23_1","volume-title":"Sequential randomized smoothing for adversarially robust speech recognition. arXiv preprint arXiv:2112.03000","author":"Olivier Raphael","year":"2021","unstructured":"Raphael Olivier and Bhiksha Raj. 2021. Sequential randomized smoothing for adversarially robust speech recognition. arXiv preprint arXiv:2112.03000 (2021)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2015.7178964"},{"key":"e_1_3_2_1_25_1","volume-title":"International conference on machine learning. PMLR, 5231--5240","author":"Qin Yao","year":"2019","unstructured":"Yao Qin, Nicholas Carlini, Garrison Cottrell, Ian Goodfellow, and Colin Raffel. 2019. Imperceptible, robust, and targeted adversarial examples for automatic speech recognition. In International conference on machine learning. PMLR, 5231--5240."},{"key":"e_1_3_2_1_26_1","volume-title":"International Conference on Machine Learning. PMLR, 28492--28518","author":"Radford Alec","year":"2023","unstructured":"Alec Radford, Jong Wook Kim, Tao Xu, Greg Brockman, Christine McLeavey, and Ilya Sutskever. 2023. Robust speech recognition via large-scale weak supervision. In International Conference on Machine Learning. PMLR, 28492--28518."},{"key":"e_1_3_2_1_27_1","volume-title":"Adversarial attacks against automatic speech recognition systems via psychoacoustic hiding. arXiv preprint arXiv:1808.05665","author":"Sch\u00f6nherr Lea","year":"2018","unstructured":"Lea Sch\u00f6nherr, Katharina Kohls, Steffen Zeiler, Thorsten Holz, and Dorothea Kolossa. 2018. Adversarial attacks against automatic speech recognition systems via psychoacoustic hiding. arXiv preprint arXiv:1808.05665 (2018)."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"crossref","first-page":"2351","DOI":"10.1109\/TASLP.2021.3095662","article-title":"Tera: Self-supervised learning of transformer encoder representation for speech","volume":"29","author":"Liu Andy","year":"2021","unstructured":"Liu Andy T., Li Shang-Wen, and Lee Hung-yi. 2021. Tera: Self-supervised learning of transformer encoder representation for speech. IEEE\/ACM Transactions on Audio Speech Language Processing 29 (2021), 2351--2366.","journal-title":"IEEE\/ACM Transactions on Audio Speech Language Processing"},{"key":"e_1_3_2_1_29_1","volume-title":"Mockingjay: Unsupervised speech representation learning with deep bidirectional transformer encoders","author":"Liu Andy","year":"2020","unstructured":"Liu Andy T., Yang Shu-wen, Chi Po-Han, Hsu Po-chun, and Lee Hung-yi. 2020. Mockingjay: Unsupervised speech representation learning with deep bidirectional transformer encoders. In ICASSP. IEEE, Barcelona, 6419--6423."},{"volume-title":"Targeted adversarial examples for black box audio systems. In 2019 IEEE security and privacy workshops (SPW)","author":"Taori Rohan","key":"e_1_3_2_1_30_1","unstructured":"Rohan Taori, Amog Kamsetty, Brenton Chu, and Nikita Vemuri. 2019. Targeted adversarial examples for black box audio systems. In 2019 IEEE security and privacy workshops (SPW). IEEE, 15--20."},{"volume-title":"Advances in neural information processing systems","author":"Vaswani Ashish","key":"e_1_3_2_1_31_1","unstructured":"Ashish Vaswani, Noam Shazeer, Niki Parmar, Jakob Uszkoreit, Llion Jones, Aidan N. Gomez, \u0141ukasz Kaiser, and Illia Polosukhin. 2017. Attention is all you need. In Advances in neural information processing systems, Vol. 30."},{"key":"e_1_3_2_1_32_1","volume-title":"Fighting gradients with gradients: Dynamic defenses against adversarial attacks. arXiv preprint arXiv:2105.08714","author":"Wang Dequan","year":"2021","unstructured":"Dequan Wang, An Ju, Evan Shelhamer, David Wagner, and Trevor Darrell. 2021. Fighting gradients with gradients: Dynamic defenses against adversarial attacks. arXiv preprint arXiv:2105.08714 (2021)."},{"key":"e_1_3_2_1_33_1","volume-title":"International conference on machine learning. PMLR, 5286--5295","author":"Wong Eric","year":"2018","unstructured":"Eric Wong and Zico Kolter. 2018. Provable defenses against adversarial examples via the convex outer adversarial polytope. In International conference on machine learning. PMLR, 5286--5295."},{"key":"e_1_3_2_1_34_1","volume-title":"Robust audio adversarial example for a physical attack. arXiv preprint arXiv:1810.11793","author":"Yakura Hiromu","year":"2018","unstructured":"Hiromu Yakura and Jun Sakuma. 2018. Robust audio adversarial example for a physical attack. arXiv preprint arXiv:1810.11793 (2018)."},{"volume-title":"27th USENIX security symposium (USENIX security 18). 49--64.","author":"Yuan Xuejing","key":"e_1_3_2_1_35_1","unstructured":"Xuejing Yuan, Yuxuan Chen, Yue Zhao, Yunhui Long, Xiaokang Liu, Kai Chen, Shengzhi Zhang, Heqing Huang, Xiaofeng Wang, and Carl A Gunter. 2018. {CommanderSong}: A Systematic Approach for Practical Adversarial Voice Recognition. In 27th USENIX security symposium (USENIX security 18). 49--64."},{"key":"e_1_3_2_1_36_1","unstructured":"Yang Z. Li B. Chen P.-Y. and Song D. 2018. Characterizing audio adversarial examples using temporal dependency. arXiv preprint arXiv:1809.10875 (2018)."},{"key":"e_1_3_2_1_37_1","volume-title":"Generating natural adversarial examples. arXiv preprint arXiv:1710.11342","author":"Zhengli Zhao","year":"2017","unstructured":"Zhao Zhengli, Dua Dheeru, and Singh Sameer. 2017. Generating natural adversarial examples. arXiv preprint arXiv:1710.11342 (2017)."}],"event":{"name":"ASIA CCS '24: 19th ACM Asia Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Singapore Singapore","acronym":"ASIA CCS '24"},"container-title":["Proceedings of the 19th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3645013","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T23:44:06Z","timestamp":1750290246000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3634737.3645013"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7]]},"references-count":37,"alternative-id":["10.1145\/3634737.3645013","10.1145\/3634737"],"URL":"https:\/\/doi.org\/10.1145\/3634737.3645013","relation":{},"subject":[],"published":{"date-parts":[[2024,7]]},"assertion":[{"value":"2024-07-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}