说话人验证系统攻击方法的研究现状及展望. (Chinese)

Attack Methods in Speaker Verification System： The State of the Art and Prospects. (English)

The development of automatic speaker verification （ASV） technology is profoundly affecting and changing the current human-computer interaction system. As the core speech function of some smart devices， ASV can accept the voice of the target speakers and accurately identify the speakers’ identities. In recent years， the rapid development of artificial intelligence technology has promoted the leapfrog development of ASV systems. However， with the development of artificial neural network and deep learning technology， more and more researchers begin to study the way to attack ASV systems. How to attack ASV systems through a series of processing of raw speech has been a hot topic in speech research in recent years. At present， the attack methods of ASV systems can be roughly divided into spoofing attacks and adversarial attacks. In this paper， the typical methods and basic principles of the two kinds of attacks are summarized， some problems existing in current attack methods are sorted out， the safety problems existing in the system of ASV are revealed， a brief outlook on the future development of ASV system security is given， and the development directions of improving the security and reliability of ASV systems are provided. [ABSTRACT FROM AUTHOR]

自动说话人验证（Automatic speaker verification，ASV）技术的发展正在深刻地影响和改变着当 前的人机交互系统，ASV 作为一些智能设备的语音核心功能，可以接受目标说话人的语音并准确识别 出该说话人的身份。近年来，人工智能技术的快速进展推动了 ASV 系统实现跨越式发展。然而，随着 人工神经网络和深度学习技术的发展，越来越多的研究者开始研究如何攻击 ASV 系统。如何通过对原 始语音进行一系列处理实现对 ASV 系统的攻击，是近年来语音领域研究的一个热点问题。目前，对 ASV 系统的攻击方法大致可分为欺骗攻击（Spoofing attack）和对抗攻击（Adversarial attack）两大类。 本文对两大类的典型方法和基本原理进行综述，梳理了目前一些攻击手段中存在的若干问题，揭示了 ASV 系统存在的安全隐患，对今后 ASV 系统安全性的发展做了简要的展望，并为未来进一步提高 ASV 系统的安全性和可靠性提供了参考。 [ABSTRACT FROM AUTHOR]

Copyright of Journal of Data Acquisition & Processing / Shu Ju Cai Ji Yu Chu Li is the property of Editorial Department of Journal of Nanjing University of Aeronautics & Astronautics and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)