Preprint
Sep 2026
GhostWord: A Fine-Grained Backdoor Attack on Automatic Speech Recognition
During poisoning, a trigger is injected into the forced-aligned time span of a chosen source word in the audio and replace only that word in the transcript, enabling precise semantic flips and composable sentence manipulation while avoiding many-to-one label artifacts.
Mojtaba Nafez, Mobina Poulaei, Kiarash Kiani Feriz et al.
· 0 citations