arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2312.03410cs.SDcs.MMeess.AS

通过音色水印检测语音克隆攻击

Detecting Voice Cloning Attacks via Timbre Watermarking

University of Science and Technology of China(中国科学技术大学);Nanyang Technological University(南洋理工大学)

Chang Liu, Jie Zhang, Tianwei Zhang, Xi Yang, Weiming Zhang, Nenghai Yu

AI总结:

提出“音色水印”概念及端到端抗语音克隆框架,通过频域时间不变水印与攻击共享过程建模,实现对多种语音克隆和自适应攻击的鲁棒检测。

摘要:

如今,向公众发布音频内容已十分普遍。然而,随着语音克隆技术的兴起,攻击者有可能未经许可,利用特定人物公开发布的音频轻松冒充该人。因此,检测已发布音频内容的任何潜在滥用,并保护其音色不被冒充,变得十分重要。为此,我们提出了一个新概念——“音色水印”,即将水印信息嵌入目标个人的语音中,最终挫败语音克隆攻击。为确保水印对语音克隆模型的学习过程具有鲁棒性,我们设计了一种端到端的抗语音克隆检测框架。该方案的核心思想是以时间不变的方式在频域中嵌入并提取水印。为获得跨不同语音克隆攻击的泛化能力,我们对这些攻击的共享过程进行建模,并将其作为失真层集成到框架中。实验表明,所提出的音色水印能够防御不同的语音克隆攻击,对多种自适应攻击(例如基于重构的去除攻击、水印覆盖攻击)表现出很强的抵抗能力,并在 PaddleSpeech、Voice-Cloning-App 和 so-vits-svc 等真实服务中实现了实用性。此外,我们还进行了消融研究,以验证设计的有效性。部分音频样本可在 https://timbrewatermarking.github.io/samples 获取。

英文摘要:

Nowadays, it is common to release audio content to the public. However, with the rise of voice cloning technology, attackers have the potential to easily impersonate a specific person by utilizing his publicly released audio without any permission. Therefore, it becomes significant to detect any potential misuse of the released audio content and protect its timbre from being impersonated. To this end, we introduce a novel concept, "Timbre Watermarking", which embeds watermark information into the target individual's speech, eventually defeating the voice cloning attacks. To ensure the watermark is robust to the voice cloning model's learning process, we design an end-to-end voice cloning-resistant detection framework. The core idea of our solution is to embed and extract the watermark in the frequency domain in a temporally invariant manner. To acquire generalization across different voice cloning attacks, we modulate their shared process and integrate it into our framework as a distortion layer. Experiments demonstrate that the proposed timbre watermarking can defend against different voice cloning attacks, exhibit strong resistance against various adaptive attacks (e.g., reconstruction-based removal attacks, watermark overwriting attacks), and achieve practicality in real-world services such as PaddleSpeech, Voice-Cloning-App, and so-vits-svc. In addition, ablation studies are also conducted to verify the effectiveness of our design. Some audio samples are available at https://timbrewatermarking.github.io/samples.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑