On End-to-End White-Box Adversarial Attacks in Music Information Retrieval. Issue 1 (7th July 2021)

• Record Type: Journal Article
• Authors: Prinz, Katharina; Flexer, Arthur; Widmer, Gerhard
• Is Part Of: Transactions of the International Society for Music Information Retrieval. Volume 4:Issue 1(2021)
• Page Start: 93
• Page End: 104
• Publication Date: 2021-07-07
• Subjects: adversarial attack -- instrument classification -- music recommendation -- validity; 025
• DOI: 10.5334/tismir.85
• Languages: English
• ISSNs: 2514-3298

Abstract

Small adversarial perturbations of input data can drastically change the performance of machine learning systems, thereby challenging their validity. We compare several adversarial attacks targeting an instrument classifier, where for the first time in Music Information Retrieval (MIR) the perturbations are computed directly on the waveform. The attacks can reduce the accuracy of the classifier significantly, while at the same time keeping perturbations almost imperceptible. Furthermore, we show the potential of adversarial attacks being a security issue in MIR by artificially boosting playcounts through an attack on a real-world music recommender system.