说话人验证系统攻击方法的研究现状及展望

Attack Methods in Speaker Verification System:The State of the Art and Prospects

自动说话人验证(Automatic speaker verification,ASV)技术的发展正在深刻地影响和改变着当前的人机交互系统,ASV作为一些智能设备的语音核心功能,可以接受目标说话人的语音并准确识别出该说话人的身份。近年来,人工智能技术的快速进展推动了ASV系统实现跨越式发展。然而,随着人工神经网络和深度学习技术的发展,越来越多的研究者开始研究如何攻击ASV系统。如何通过对原始语音进行一系列处理实现对ASV系统的攻击,是近年来语音领域研究的一个热点问题。目前,对ASV系统的攻击方法大致可分为欺骗攻击(Spoofing attack)和对抗攻击(Adversarial attack)两大类。本文对两大类的典型方法和基本原理进行综述,梳理了目前一些攻击手段中存在的若干问题,揭示了ASV系统存在的安全隐患,对今后ASV系统安全性的发展做了简要的展望,并为未来进一步提高ASV系统的安全性和可靠性提供了参考。

The development of automatic speaker verification(ASV)technology is profoundly affecting and changing the current human-computer interaction system.As the core speech function of some smart devices,ASV can accept the voice of the target speakers and accurately identify the speakers’identities.In recent years,the rapid development of artificial intelligence technology has promoted the leapfrog development of ASV systems.However,with the development of artificial neural network and deep learning technology,more and more researchers begin to study the way to attack ASV systems.How to attack ASV systems through a series of processing of raw speech has been a hot topic in speech research in recent years.At present,the attack methods of ASV systems can be roughly divided into spoofing attacks and adversarial attacks.In this paper,the typical methods and basic principles of the two kinds of attacks are summarized,some problems existing in current attack methods are sorted out,the safety problems existing in the system of ASV are revealed,a brief outlook on the future development of ASV system security is given,and the development directions of improving the security and reliability of ASV systems are provided.