arXiv:2411.10034cs.CRcs.MM2024-11被引 4

用音频扰动防御振动窃听,保护语音隐私不被泄露。

EveGuard: Defeating Vibration-based Side-Channel Eavesdropping with Audio Adversarial Perturbations

  • 通过生成对抗性音频扰动,干扰传感器窃听信号。
  • 防护率超97%,有效阻止语音重建与分类识别。
  • 无需硬件改造,适合普通设备部署使用。

基于振动的侧信道对隐私构成重大威胁,利用毫米波雷达、光传感器和加速度计等设备探测声源或附近物体的振动,实现语音窃听。尽管已有多种防御方案,但多依赖昂贵且存在物理局限的硬件。本文提出EveGuard,一种纯软件驱动的防御框架,通过生成对抗性音频,在不损害人类听觉感知的前提下,保护语音隐私免受侧信道攻击。我们利用侧信道传感器与传统麦克风在感知机制上的差异——前者捕捉振动,后者记录气压变化——导致不同的频率响应特性。EveGuard首先提出扰动生成模型(PGM),有效抑制基于传感器的窃听并保持高音质;其次为支持PGM端到端训练,引入新的域转换任务Eve-GAN,用于从给定音频推断被窃听信号;进一步采用少样本学习降低Eve-GAN训练的数据收集开销。大量实验表明,EveGuard对音频分类器的防护率超过97%,显著阻碍窃听音频重建。我们在三种自适应攻击机制下验证其有效性,并通过用户研究确认扰动音频的感知质量良好。

原文摘要 · Abstract (English)

Vibrometry-based side channels pose a significant privacy risk, exploiting sensors like mmWave radars, light sensors, and accelerometers to detect vibrations from sound sources or proximate objects, enabling speech eavesdropping. Despite various proposed defenses, these involve costly hardware solutions with inherent physical limitations. This paper presents EveGuard, a software-driven defense framework that creates adversarial audio, protecting voice privacy from side channels without compromising human perception. We leverage the distinct sensing capabilities of side channels and traditional microphones, where side channels capture vibrations and microphones record changes in air pressure, resulting in different frequency responses. EveGuard first proposes a perturbation generator model (PGM) that effectively suppresses sensor-based eavesdropping while maintaining high audio quality. Second, to enable end-to-end training of PGM, we introduce a new domain translation task called Eve-GAN for inferring an eavesdropped signal from a given audio. We further apply few-shot learning to mitigate the data collection overhead for Eve-GAN training. Our extensive experiments show that EveGuard achieves a protection rate of more than 97 percent from audio classifiers and significantly hinders eavesdropped audio reconstruction. We further validate the performance of EveGuard across three adaptive attack mechanisms. We have conducted a user study to verify the perceptual quality of our perturbed audio.

隐私保护对抗样本侧信道防御

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。