HiddenSpeaker: Generate Imperceptible Unlearnable Audios for Speaker Verification System
Not on the map. Why?
Abstract (arXiv)
In recent years, the remarkable advancements in deep neural networks have brought tremendous convenience. However, the training process of a highly effective model necessitates a substantial quantity of samples, which brings huge potential threats, like unauthorized exploitation with privacy leakage. In response, we propose a framework named HiddenSpeaker, embedding imperceptible perturbations within the training speech samples and rendering them unlearnable for deep-learning-based speaker verification systems that employ large-scale speakers for efficient training. The HiddenSpeaker utilizes a simplified error-minimizing method named Single-Level Error-Minimizing (SLEM) to generate specific and effective perturbations. Additionally, a hybrid objective function is employed for human perceptual optimization, ensuring the perturbation is indistinguishable from human listeners. We conduct extensive experiments on multiple state-of-the-art (SOTA) models in the speaker verification domain to evaluate HiddenSpeaker. Our results demonstrate that HiddenSpeaker not only deceives the model with unlearnable samples but also enhances the imperceptibility of the perturbations, showcasing strong transferability across different models.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Builds on 22 of its 41 references that are in the map. First posted on arXiv 24 May 2024.
Builds on
22 of 41 references.
References · 22
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2016Deep Learning with Differential Privacycited by 2,728
- 2018VoxCeleb2: Deep Speaker Recognitioncited by 875
- 2020ECAPA-TDNN: Emphasized Channel Attention, Propagation and Aggregation in TDNN Based Speaker Verificationcited by 628
- 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 519
- 2019High Frequency Component Helps Explain the Generalization of Convolutional Neural Networkscited by 310
- 2021Fast Yet Effective Machine Unlearningcited by 217
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
- 2020Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defensescited by 180
- 2021Large-scale Self-Supervised Speech Representation Learning for Automatic Speaker Verificationcited by 78
- 2020Speaker Recognition Based on Deep Learning: An Overviewcited by 59
- 2022MFA-Conformer: Multi-scale Feature Aggregation Conformer for Automatic Speaker Verificationcited by 47
10 more
- 2022MFA: TDNN with Multi-scale Frequency-channel Attention for Text-independent Speaker Verification with Short Utterancescited by 12
- 2022Improving fairness in speaker verification via Group-adapted Fusion Networkcited by 11
- 2020InfoScrub: Towards Attribute Privacy by Targeted Obfuscationcited by 10
- 2023MASTERKEY: Practical Backdoor Attack Against Speaker Verification Systemscited by 8
- 2020VenoMave: Targeted Poisoning Against Speech Recognitioncited by 7
- 2013Utilizing Noise Addition for Data Privacy, an Overviewcited by 6
- 2023Can Pretrained Language Models Derive Correct Semantics from Corrupt Subwords under Noise?cited by 6
- 2022WaveFuzz: A Clean-Label Poisoning Attack to Protect Your Voicecited by 4
- 2022A Speech Representation Anonymization Framework via Selective Noise Perturbationcited by 1
- 2023DS-TDNN: Dual-stream Time-delay Neural Network with Global-aware Filter for Speaker Verificationcited by 1
Built on by
Citing papers per year: 2024: 1; 2025: 3.
4 papers.
- 2025SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesiscited by 6
- 2025A Survey on Unlearnable Datacited by 5
- 2024Towards Operationalizing Right to Data Protectioncited by 3
- 2025E2E-VGuard: Adversarial Prevention for Production LLM-based End-To-End Speech Synthesiscited by 0
- 2025E2E-VGuard: Adversarial Prevention for Production LLM-based End-To-End Speech Synthesis10 Nov 2025
- 2025SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesis14 Apr 2025
- 2025A Survey on Unlearnable Data30 Mar 2025
- 2024Towards Operationalizing Right to Data Protection13 Nov 2024