VSVC: Backdoor attack against Keyword Spotting based on Voiceprint Selection and Voice Conversion

Understand

Keyword spotting (KWS) based on deep neural networks (DNNs) has achieved massive success in voice control scenarios.

• However, training of such DNN-based KWS systems often requires significant data and hardware resources.
• Manufacturers often entrust this process to a third-party platform.
• This makes the training process uncontrollable, where attackers can implant backdoors in the model by manipulating third-party training data.