activity
20232025
most citedMitigating Unauthorized Speech Synthesis for Voice Protection

7 citations · 9 across the 15 of their papers we have counts for

collaborators

16 papers

cs.SD2025

E2E-VGuard: Adversarial Prevention for Production LLM-based End-To-End Speech Synthesis

Zhisheng Zhang, Derui Wang, Yifan Mi +6

Recent advancements in speech synthesis technology have enriched our daily lives, with high-quality and human-like audio widely adopted across real-world applications. However, mal…

cs.CR2025

Mirage Fools the Ear, Mute Hides the Truth: Precise Targeted Adversarial Attacks on Polyphonic Sound Event Detection Systems

Junjie Su, Weifei Jin, Yuxin Cao +3

Sound Event Detection (SED) systems are increasingly deployed in safety-critical applications such as industrial monitoring and audio surveillance. However, their robustness agains…

cs.SD2025

SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesis

Zhisheng Zhang, Derui Wang, Qianyi Yang +6

Speech synthesis technology has brought great convenience, while the widespread usage of realistic deepfake audio has triggered hazards. Malicious adversaries may unauthorizedly co…

cs.CR2025

Whispering Under the Eaves: Protecting User Privacy Against Commercial and LLM-powered Automatic Speech Recognition Systems

Weifei Jin, Yuxin Cao, Junjie Su +6

The widespread application of automatic speech recognition (ASR) supports large-scale voice surveillance, raising concerns about privacy among users. In this paper, we concentrate…

cs.CR2025

Bones of Contention: Exploring Query-Efficient Attacks against Skeleton Recognition Systems

Yuxin Cao, Kai Ye, Derui Wang +4

Skeleton action recognition models have secured more attention than video-based ones in various applications due to privacy preservation and lower storage requirements. Skeleton da…

cs.SD2024★ 7 cited

Mitigating Unauthorized Speech Synthesis for Voice Protection

Zhisheng Zhang, Qianyi Yang, Derui Wang +4

With just a few speech samples, it is possible to perfectly replicate a speaker's voice in recent years, while malicious voice exploitation (e.g., telecom fraud for illegal financi…

cs.CV2024★ 2 cited

GRFormer: Grouped Residual Self-Attention for Lightweight Single Image Super-Resolution

Yuzhen Li, Zehang Deng, Yuxin Cao +1

Previous works have shown that reducing parameter overhead and computations for transformer-based single image super-resolution (SISR) models (e.g., SwinIR) usually leads to a redu…

cs.CV2024

Query-Efficient Video Adversarial Attack with Stylized Logo on Service Computing

Duoxun Tang, Yuxin Cao, Xi Xiao +3

In service computing, video classification has become fundamental to many intelligent applications. While Deep Neural Networks (DNNs) have demonstrated excellent performance in rec…

cs.CV2024

Rethinking the Threat and Accessibility of Adversarial Attacks against Face Recognition Systems

Yuxin Cao, Yumeng Zhu, Derui Wang +4

Face recognition pipelines have been widely deployed in various mission-critical systems in trust, equitable and responsible AI applications. However, the emergence of adversarial…

cs.LG2024

Effects of Exponential Gaussian Distribution on (Double Sampling) Randomized Smoothing

Youwei Shu, Xi Xiao, Derui Wang +5

Randomized Smoothing (RS) is currently a scalable certified defense method providing robustness certification against adversarial examples. Although significant progress has been a…

cs.SD2024

Towards Evaluating the Robustness of Automatic Speech Recognition Systems via Audio Style Transfer

Weifei Jin, Yuxin Cao, Junjie Su +5

In light of the widespread application of Automatic Speech Recognition (ASR) systems, their security concerns have received much more attention than ever before, primarily due to t…

cs.CR2024

Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security

Yihe Fan, Yuxin Cao, Ziyu Zhao +2

Multimodal Large Language Models (MLLMs) demonstrate remarkable capabilities that increasingly influence various aspects of our daily lives, constantly defining the new boundary of…

cs.CV2024

LocalStyleFool: Regional Video Style Transfer Attack Using Segment Anything Model

Yuxin Cao, Jinghao Li, Xi Xiao +5

Previous work has shown that well-crafted adversarial perturbations can threaten the security of video recognition systems. Attackers can invade such models with a low query budget…

cs.CV2024

3D Face Reconstruction Using A Spectral-Based Graph Convolution Encoder

Haoxin Xu, Zezheng Zhao, Yuxin Cao +3

Monocular 3D face reconstruction plays a crucial role in avatar generation, with significant demand in web-related applications such as generating virtual financial advisors in Fin…

cs.CV2023

LogoStyleFool: Vitiating Video Recognition Systems via Logo Style Transfer

Yuxin Cao, Ziyu Zhao, Xi Xiao +3

Video recognition systems are vulnerable to adversarial examples. Recent studies show that style transfer-based and patch-based unrestricted perturbations can effectively improve a…

cs.CV2023

Flow-Attention-based Spatio-Temporal Aggregation Network for 3D Mask Detection

Yuxin Cao, Yian Li, Yumeng Zhu +2

Anti-spoofing detection has become a necessity for face recognition systems due to the security threat posed by spoofing attacks. Despite great success in traditional attacks, most…