GhostWord: A Fine-Grained Backdoor Attack on Automatic Speech Recognition
During poisoning, a trigger is injected into the forced-aligned time span of a chosen source word in the audio and replace only that word in the transcript, enabling precise semantic flips and composable sentence manipulation while avoiding many-to-one label artifacts.