Ouroboros: Self-Referential Backdoor Attacks on Speech Enhancement via Clean Audio Triggers

arXiv:2608.30329 · cs.SD, cs.CR · Submitted 2026-08-31 · Read on arXiv

cs.SD, cs.CR

Submitted: 2026-08-31

Updated: 2026-08-31

Comments: Accepted at INTERSPEECH 2026. This is the author-accepted manuscript, not the ISCA proceedings camera-ready publisher version. 5 pages, 2 figures

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Ablation — 5× in this paper · explained in 1 episode
• Core — 5× in this paper · explained in 2 episodes
• Attack Success Rate — 4× in this paper
• Fine-Tuning — 3× in this paper · explained in 5 episodes
• Ablation study — 2× in this paper · explained in 1 episode
• Consistency — 2× in this paper · explained in 3 episodes
• Generative AI — 2× in this paper · explained in 2 episodes
• Adversarial Attacks — 1× in this paper · explained in 1 episode
• Adversarial Examples — 1× in this paper · explained in 2 episodes
• Adversarial Robustness — 1× in this paper · explained in 3 episodes
• Attack Success Rate (ASR) — 1× in this paper · explained in 2 episodes
• Benchmark — 1× in this paper · explained in 2 episodes
• Diffusion Model — 1× in this paper · explained in 8 episodes
• Diffusion Models — 1× in this paper · explained in 6 episodes
• Generalization — 1× in this paper · explained in 13 episodes
• Generative Model — 1× in this paper · explained in 2 episodes
• Generative Models — 1× in this paper · explained in 3 episodes
• Perceptual Evaluation of Speech Quality — 1× in this paper
• Pruning — 1× in this paper · explained in 4 episodes
• Robustness — 1× in this paper · explained in 5 episodes

Sources

• Are Modern Speech Enhancement Systems Vulnerable to Adversarial Attacks?

Related papers

• Few-Shot Open-Set Audio Classification via Transductive Prototype Refinement and Class Logit Enhancement
• Spectral Masking and Interpolation Attack (SMIA): A Black-box Adversarial Attack against Voice Authentication and Anti-Spoofing Systems
• AVMeme Exam: A Multimodal Multilingual Multicultural Benchmark for LLMs' Contextual and Cultural Knowledge and Thinking
• SoundWeaver: Compositional Warm-Starting for Text-to-Audio Diffusion Serving
• WASIL: In-the-Wild Arabic Spoken Interactions with LLMs
• Efficient Audiovisual Speech Processing via MUTUD: Multimodal Training and Unimodal Deployment