Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Andreas Bugler

dblp:277/5317 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2022
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Security and privacy of machine learning · 67% Privacy and data protection · 33%
Artificial intelligence
1 paper
Speech recognition and synthesis · 100%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Natural language and speech › Speech recognition and synthesis
speaker recognition
0.612022
VoiceBlock: Privacy through Real-Time Adversarial Attacks with Audio-to-Audio Models · NeurIPS 2022
Security and privacy of machine learning
adversarial attack
0.612022
VoiceBlock: Privacy through Real-Time Adversarial Attacks with Audio-to-Audio Models · NeurIPS 2022
Security and privacy of machine learning › adversarial example
audio adversarial example
0.612022
VoiceBlock: Privacy through Real-Time Adversarial Attacks with Audio-to-Audio Models · NeurIPS 2022
Privacy and data protection › data confidentiality › content privacy › multimedia privacy
speech privacy
0.612022
VoiceBlock: Privacy through Real-Time Adversarial Attacks with Audio-to-Audio Models · NeurIPS 2022

Methods — techniques the papers use, named apart from their topics

finite impulse response filter · 1.1audio-to-audio model · 1.1adversarial perturbation · 1.1
YearPublicationVenuePosition
2022 VoiceBlock: Privacy through Real-Time Adversarial Attacks with Audio-to-Audio Models
abstract
As governments and corporations adopt deep learning systems to collect and analyze user-generated audio data, concerns about security and privacy naturally emerge in areas such as automatic speaker recognition. While audio adversarial examples offer one route to mislead or evade these invasive systems, they are typically crafted through time-intensive offline optimization, limiting their usefulness in streaming contexts. Inspired by architectures for audio-to-audio tasks such as denoising and speech enhancement, we propose a neural network model capable of adversarially modifying a user's audio stream in real-time. Our model learns to apply a time-varying finite impulse response (FIR) filter to outgoing audio, allowing for effective and inconspicuous perturbations on a small fixed delay suitable for streaming tasks. We demonstrate our model is highly effective at de-identifying user speech from speaker recognition and able to transfer to an unseen recognition system. We conduct a perceptual study and find that our method produces perturbations significantly less perceptible than baseline anonymization methods, when controlling for effectiveness. Finally, we provide an implementation of our model capable of running in real-time on a single CPU thread. Audio examples and code can be found at https://interactiveaudiolab.github.io/project/voiceblock.html.
Patrick O'Reilly, Andreas Bugler, Keshav Bhandari, Max Morrison, Bryan Pardo
NeurIPS2