Impact of Phonetics on Speaker Identity in Adversarial Voice Attack
Adversarial perturbations in speech pose a serious threat to automatic speech recognition (ASR) and speaker verification by introducing subtle waveform modifications that remain imperceptible to humans but can significantly alter system outputs. While targeted attacks on end-to-end ASR models have been widely studied, the phonetic basis of these perturbations and their effect on speaker identity remain underexplored. In this work, we analyze adversarial audio at the phonetic level and show that perturbations are associated with systematic phonetic tendencies, such as vowel centralization and consonant substitutions. These distortions not only mislead transcription but also degrade phonetic cues critical for speaker verification, leading to identity drift. Using the DeepSpeech ASR model as our target, we generate targeted adversarial examples and evaluate their impact on speaker identity embeddings across genuine and impostor samples. Results across 16 phonetically diverse target phrases demonstrate that adversarial audio induces both transcription errors and identity drift, highlighting the need for phonetic-aware defenses to ensure the robustness of ASR and speaker recognition systems.
Authors
- Qiben Yan (ORCID: https://orcid.org/0000-0001-6272-7668)
- Arun Ross (ORCID: https://orcid.org/0000-0001-8850-3013)
- Xia Li (ORCID: https://orcid.org/0000-0003-3050-8529)
- Daniyal Kabir Dar
Institutions
- Michigan State University (US)
Publication Details
- Published
- 2026-04-21
- DOI
- https://doi.org/10.1109/icassp55912.2026.11460864
- Primary Topic
- Speech Recognition and Synthesis
- Type
- article
- Field-Weighted Citation Impact
- 0.00
Funders
- National Science Foundation