Pop Goes the Verifier: Phoneme-Targeted Data Poisoning of Voice Liveness Detection

Summary

The paper introduces Pop Goes the Verifier, a data poisoning attack against VoicePop, a liveness detection technique in Automated Speaker Verification Systems that classifies low-frequency pop bursts from plosive phonemes using GFCC features and an SVM. The attack uses FastSpeech 2 with a modified HiFi-GAN vocoder to inject localized pop bursts at plosive locations, plus subtle Gaussian noise to reduce visibility. On ASVSpoof 2019, it achieves a moderate poisoning effect and resists signal-level inspection better than the prior SyntheticPop attack, which reduced accuracy to 14.01% with 20% poisoned samples but produced easily detectable artifacts.

Topics

• Adversarial machine learning

Related items

• InfoSecuring next-generation edge intelligence: A survey from federated learning to autonomous agents in cyber-physical systemsSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoCharacterizing Recoverable Expert-Utilization Signatures in Fine-Tuned Mixture-of-Experts LLMsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoDiscrete Unintentional Adversarial Perturbation Detection for DQN Traffic Signal ControlSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoTrustworthy Distributed Machine Learning in Cloud-Edge-IoT Systems: A Heterogeneity-Aware Survey of Security, Privacy, and RobustnessSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoVGPD-FL: Group-level poisoning detection without trusted datasets for secure aggregationSimilar attack · Elsevier Security Journals