A Study of the Removability of Speaker-Adversarial Perturbations

This research studies whether adversarial perturbations (small, intentional noise added to audio that tricks speaker recognition systems into misidentifying who is speaking) can be removed from speech. The study tested three scenarios based on how much information a defense system has about the attack: knowing nothing about it, having partial information, and having complete information. The results showed that removing these perturbations is only possible when the defense system has full knowledge of how the attack was generated, while partial or no knowledge makes complete removal difficult or impossible.