[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-327328-105":59,"doc-detail-327328-en":131},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":124,"head_meta":126,"extra_data":128,"updated_unix":130},105,"en","drl-clba-drl-clba-a-clean-label-backdoor-attack-for-speech-classification-via-ddpg-reinforcement-learning","DRL-CLBA - DRL-CLBA - A Clean Label Backdoor Attack for Speech Classification via DDPG Reinforcement Learning","","Deep learning speech classification systems are exposed to backdoor attacks in which carefully designed triggers force targeted misclassification during inference. This paper presents DRL-CLBA, a clean label backdoor attack using Deep Deterministic Policy Gradient (DDPG) reinforcement learning. Deep audio steganography embeds sample-specific triggers into source speech and forms feature-space anchors. The framework steers target samples toward trigger-bearing anchor points in latent representations. Experiments on three datasets and four DNNs show high attack success rates and strong resistance against fine-tuning, pruning, and spectral signature defenses, revealing critical risks in speech-controlled applications.",{"@graph":69,"@context":123},[70,84,106],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":40,"@type":76,"position":81},"https://docshare.wps.com/document/research-report/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/drl-clba-drl-clba-a-clean-label-backdoor-attack-for-speech-classification-via-ddpg-reinforcement-learning/327328/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/drl-clba-drl-clba-a-clean-label-backdoor-attack-for-speech-classification-via-ddpg-reinforcement-learning/327328.png","ImageObject",300,407,{"name":92,"@type":93},"Emma Wilson","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-08","2026-09-21",true,{"@type":102,"interactionType":103,"userInteractionCount":105},"InteractionCounter",{"@type":104},"ViewAction",13,{"@type":107,"mainEntity":108},"FAQPage",[109,115,119],{"name":110,"@type":111,"acceptedAnswer":112},"What problem does DRL-CLBA address in speech classification?","Question",{"text":113,"@type":114},"DRL-CLBA addresses the vulnerability of deep learning speech classification models to backdoor attacks, where malicious triggers can cause targeted misclassification at inference time.","Answer",{"name":116,"@type":111,"acceptedAnswer":117},"How does DRL-CLBA achieve a clean label backdoor attack?",{"text":118,"@type":114},"DRL-CLBA leverages deep audio steganography to embed sample-specific triggers into source audio and uses a DDPG actor-critic reinforcement learning framework to optimize poisoned samples toward trigger-bearing anchor points in deep latent space.",{"name":120,"@type":111,"acceptedAnswer":121},"How effective is DRL-CLBA and how does it resist defenses?",{"text":122,"@type":114},"Experiments across three datasets and four DNNs report high attack success rates, and the attack shows strong resistance against fine-tuning, pruning, and spectral signature-based defenses.","https://schema.org",{"og:url":83,"og:type":125,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":127,"canonical":83},"index,follow",{"doc_id":129,"site_id":62},327328,1791094036,{"code":4,"msg":5,"data":132},{"doc_id":129,"user_id":133,"nickname":92,"user_avatar":134,"doc_module":4,"category_id":39,"category_name":40,"doc_title":65,"doc_description":67,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":105,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":105,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":145,"preview_page_count":4},3848291630094,"https://eur-avatar.wpscdn.com/davatar_085a072bc5b1113ac321206ff7593b45","DRL-CLBA: A Clean Label Backdoor Attack for Speech Classification via DDPG  \nReinforcement Learning  \nYueming Huanga , Wenhan Yaoa , Fen Xiaoa , Xiarun Chenb , Weiping Wenb,∗  \na Xiangtan University, Yuhu District Xiangda Road, Xiangtan, 411100, Hunan, China b Peking University, No. 5, Summer Palace Road, Haidian District, Beijing, China, Beijing, 100871, Beijing, China  \nAbstract  \nDeep learning models for speech classification are vulnerable to backdoor attacks, where malicious triggers cause misclassification at inference time. While sample-specific attacks can bypass many defenses, they often rely on poisoned label attack, making them detectable via manual data defense. In this paper, we propose DRL-CLBA, a novel clean label backdoor attack for speech classification that leverages Deep Deterministic Policy Gradient (DDPG) reinforcement learning. We also utilize deep audio steganography to embed sample-specific triggers into source audio, creating feature-space anchors. The proposed reinforcement learning framework effectively optimizes target samples toward trigger-bearing anchor points in the model’s deep latent space, enabling label-migration-free poisoning of target samples. Experimental results across three datasets and four different DNNs demonstrate that DRL-CLBA achieves a high attack success rate , effectively bypassing some backdoor defenses. The attack demonstrates strong resistance against fine-tuning, pruning, and spectral signature defenses, exposing critical vulnerabilities in speech-controlled systems.  \nKeywords:  \nBackdoor Attack, Clean Label, DDPG, Reinforcement Learning  \n1. Introduction  \nDeep learning models have been extensively deployed in various voice-based human-computer interaction scenarios, such as the speech classification tasks: Keyword Spotting (KWS)  \n[1] and Speaker Verification (SV) [2] . To improve generalization performance in real-world environments, practitioners frequently incorporate synthetic noise into training datasets for data augmentation. However, existing research indicates that such noise can be exploited by adversaries as a potential threat vector, specifically for backdoor attacks [3] .  \nBackdoor attacks are generally categorized into poisoned label and clean label attacks. In the poisoned label paradigm, an adversary injects a specific trigger into a subset of benign training data and modifies their corresponding labels to a target class. This process establishes a strong correlation between the trigger and the target class during the training stage. At the inference stage, the model functions as a backdoored model, which misclassifies poisoned samples into the target class, while still providing correct predictions for benign inputs. Gu et al. [4] pioneered this field with BadNets, the first backdoor attack against deep image classification models, which utilized pixel-block patterns as triggers. Subsequent research has introduced diverse trigger patterns [5, 6, 7] . However, as these triggers are typically independent of the underlying sample content, they remain vulnerable to backdoor defenses designed for trigger filtering [8] . Most conventional methods require the  \n∗ Corresponding author  \nsimultaneous manipulation of both samples and labels. This allows potential victims to thwart attacks by auditing training datasets to detect label-content inconsistencies or identifying low-level image editing artifacts.  \nClean label backdoor attacks represent a more pragmatic and stealthy threat, as they maliciously tamper with training samples without altering their ground-truth labels. This class of attack typically begins by introducing perturbations into samples of a target class to generate \"poisoned samples.\" These perturbations are designed to shift the poisoned samples’ representations within the feature space of a deep classification model, aligning them more closely with samples containing a trigger (referred to as backdoor samples) . Consequently, the model is coer","cbCailjeVauSm9tF","https://ap.wps.com/l/cbCailjeVauSm9tF","pdf",722131,"English","# Introduction\n## Backdoor attack categories\n## Clean label backdoor attack design and limitations\n## Proposed DRL-CLBA approach","[{\"question\":\"What problem does DRL-CLBA address in speech classification?\",\"answer\":\"DRL-CLBA addresses the vulnerability of deep learning speech classification models to backdoor attacks, where malicious triggers can cause targeted misclassification at inference time.\"},{\"question\":\"How does DRL-CLBA achieve a clean label backdoor attack?\",\"answer\":\"DRL-CLBA leverages deep audio steganography to embed sample-specific triggers into source audio and uses a DDPG actor-critic reinforcement learning framework to optimize poisoned samples toward trigger-bearing anchor points in deep latent space.\"},{\"question\":\"How effective is DRL-CLBA and how does it resist defenses?\",\"answer\":\"Experiments across three datasets and four DNNs report high attack success rates, and the attack shows strong resistance against fine-tuning, pruning, and spectral signature-based defenses.\"}]","DRL-CLBA - DRL-CLBA - A Clean Label Backdoor Attack for Speech Classification via DDPG Reinforcement Learning | PDF",1789976985,33]