Research question
Can audio be perturbed so speech recognition transcribes attacker-chosen text?
Key findings
- Any waveform can be perturbed to produce any target transcription in DeepSpeech with 100% success - Perturbations are inaudible to humans at -30 dB
