Automatic speech recognition system addressing perceptual-based adversarial audio attacks

A non-transitory computer-readable medium tangibly embodying computer readable instructions for a software program, the software program being executable by a processor of a computing device to provide operations comprising:

• sampling an audio input signal to generate a time-domain sampled input signal;
• converting the time-domain sampled input signal to a frequency-domain input signal;
• generating perceptual weights in response to frequency components of critical bands of the frequency-domain input signal;
• creating a time-domain adversary signal in response to the perceptual weights;
• and
• combining the time-domain adversary signal with the audio input signal to create a combined audio signal.

A computer system for performing adversarial audio attacks to an automated speech recognition system having a processor configured to execute computer-readable instructions and a memory configured to execute the computer-executable instructions, the computer-executable instructions when executed by the processor perform the following functions:

• sampling an audio input signal to generate a time-domain sampled input signal;
• converting the time-domain sampled input signal to a frequency-domain input signal;
• identifying the critical bands via a psychoacoustic model of the human ear;
• generating perceptual weights based on frequency components of the critical bands of the frequency-domain input signal;
• creating a time-domain adversary signal based on the perceptual weights;
• and
• combining the time-domain adversary signal with the audio input signal to create a combined audio signal.