SongBsAb: A Dual Prevention Approach against Singing Voice Conversion based Illegal Song Covers
Not on the map. Why?
Abstract (arXiv)
Singing voice conversion (SVC) automates song covers by converting a source singing voice from a source singer into a new singing voice with the same lyrics and melody as the source, but sounds like being covered by the target singer of some given target singing voices. However, it raises serious concerns about copyright and civil right infringements. We propose SongBsAb, the first proactive approach to tackle SVC-based illegal song covers. SongBsAb adds perturbations to singing voices before releasing them, so that when they are used, the process of SVC will be interfered, leading to unexpected singing voices. Perturbations are carefully crafted to (1) provide a dual prevention, i.e., preventing the singing voice from being used as the source and target singing voice in SVC, by proposing a gender-transformation loss and a high/low hierarchy multi-target loss, respectively; and (2) be harmless, i.e., no side-effect on the enjoyment of protected songs, by refining a psychoacoustic model-based loss with the backing track as an additional masker, a unique accompanying element for singing voices compared to ordinary speech voices. We also adopt a frame-level interaction reduction-based loss and encoder ensemble to enhance the transferability of SongBsAb to unknown SVC models. We demonstrate the prevention effectiveness, harmlessness, and robustness of SongBsAb on five diverse and promising SVC models, using both English and Chinese datasets, and both objective and human study-based subjective metrics. Our work fosters an emerging research direction for mitigating illegal automated song covers.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 55 of its 118 references that are in the map. First posted on arXiv 30 Jan 2024.
Builds on
55 of 118 references.
References · 55
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2022Robust Speech Recognition via Large-Scale Weak Supervisioncited by 4,057
- 2020wav2vec 2.0: A Framework for Self-Supervised Learning of Speech Representationscited by 3,905
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2021HuBERT: Self-Supervised Speech Representation Learning by Masked Prediction of Hidden Unitscited by 2,342
- 2020Conformer: Convolution-augmented Transformer for Speech Recognitioncited by 1,863
- 2021WavLM: Large-Scale Self-Supervised Pre-Training for Full Stack Speech Processingcited by 1,657
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,268
- 2019StarGAN v2: Diverse Image Synthesis for Multiple Domainscited by 1,098
38 more
- 2022Diffusion Models in Vision: A Surveycited by 1,015
- 2018VoxCeleb2: Deep Speaker Recognitioncited by 875
- 2017VoxCeleb: a large-scale speaker identification datasetcited by 732
- 2020ECAPA-TDNN: Emphasized Channel Attention, Propagation and Aggregation in TDNN Based Speaker Verificationcited by 628
- 2020On Adaptive Attacks to Adversarial Example Defensescited by 555
- 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 546
- 2016Delving into Transferable Adversarial Examples and Black-box Attackscited by 536
- 2019On Evaluating Adversarial Robustnesscited by 447
- 2021Grad-TTS: A Diffusion Probabilistic Model for Text-to-Speechcited by 447
- 2019Parallel WaveGAN: A fast waveform generation model based on generative adversarial networks with multi-resolution spectrogramcited by 340
- 2017Generalized End-to-End Loss for Speaker Verificationcited by 293
- 2016Joint CTC-Attention based End-to-End Speech Recognition using Multi-task Learningcited by 257
- 2022BigVGAN: A Universal Neural Vocoder with Large-Scale Trainingcited by 251
- 2023Glaze: Protecting Artists from Style Mimicry by Text-to-Image Modelscited by 205
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
- 2023Adversarial Example Does Good: Preventing Painting Imitation from Diffusion Models via Adversarial Examplescited by 167
- 2021DiffSinger: Singing Voice Synthesis via Shallow Diffusion Mechanismcited by 154
- 2019Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognitioncited by 124
- 2018CREPE: A Convolutional Representation for Pitch Estimationcited by 110
- 2018Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hidingcited by 85
- 2020DeCoAR 2.0: Deep Contextualized Acoustic Representations with Vector Quantizationcited by 77
- 2020A Unified Approach to Interpreting and Boosting Adversarial Transferabilitycited by 71
- 2021Bad Characters: Imperceptible NLP Attackscited by 71
- 2019Who is Real Bob? Adversarial Attacks on Speaker Recognition Systemscited by 67
- 2018CommanderSong: A Systematic Approach for Practical Adversarial Voice Recognitioncited by 66
- 2021Multi-Singer: Fast Multi-Singer Singing Voice Vocoder With A Large-Scale Corpuscited by 60
- 2021StarGANv2-VC: A Diverse, Unsupervised, Non-parallel Framework for Natural-Sounding Voice Conversioncited by 58
- 2020SoK: The Faults in our ASRs: An Overview of Attacks against Automatic Speech Recognition and Speaker Identification Systemscited by 46
- 2019SirenAttack: Generating Adversarial Audio for End-to-End Acoustic Systemscited by 34
- 2023The Singing Voice Conversion Challenge 2023cited by 25
- 2020Defending Your Voice: Adversarial Attack on Voice Conversioncited by 23
- 2022Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognitioncited by 23
- 2023Defending against Adversarial Audio via Diffusion Modelcited by 23
- 2020AutoSpeech: Neural Architecture Search for Speaker Recognitioncited by 17
- 2022UnGANable: Defending Against GAN-based Face Manipulationcited by 15
- 2020JVS-MuSiC: Japanese multispeaker singing-voice corpuscited by 14
- 2023VSMask: Defending Against Voice Synthesis Attack via Real-Time Predictive Perturbationcited by 14
- 2022Increasing Confidence in Adversarial Robustness Evaluationscited by 12
50 most cited of 55 All 55 (JSON)
Built on by
Citing papers per year: 2024: 1; 2025: 3; 2026: 1.
5 papers.
- 2025AudioJailbreak: Jailbreak Attacks against End-to-End Large Audio-Language Modelscited by 18
- 2025SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesiscited by 6
- 2024Hidden Echoes Survive Training in Audio To Audio Generative Instrument Modelscited by 0
- 2025Degrading Voice: A Comprehensive Overview of Robust Voice Conversion Through Input Manipulationcited by 0
- 2026TAAC: A gate into Trustable Audio Affective Computingcited by 0
- 2026TAAC: A gate into Trustable Audio Affective Computing26 Mar 2026
- 2025Degrading Voice: A Comprehensive Overview of Robust Voice Conversion Through Input Manipulation6 Dec 2025
- 2025AudioJailbreak: Jailbreak Attacks against End-to-End Large Audio-Language Models20 May 2025
- 2025SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesis14 Apr 2025
- 2024Hidden Echoes Survive Training in Audio To Audio Generative Instrument Models14 Dec 2024