Mitigating Unauthorized Speech Synthesis for Voice Protection
Not on the map. Why?
Abstract (arXiv)
With just a few speech samples, it is possible to perfectly replicate a speaker's voice in recent years, while malicious voice exploitation (e.g., telecom fraud for illegal financial gain) has brought huge hazards in our daily lives. Therefore, it is crucial to protect publicly accessible speech data that contains sensitive information, such as personal voiceprints. Most previous defense methods have focused on spoofing speaker verification systems in timbre similarity but the synthesized deepfake speech is still of high quality. In response to the rising hazards, we devise an effective, transferable, and robust proactive protection technology named Pivotal Objective Perturbation (POP) that applies imperceptible error-minimizing noises on original speech samples to prevent them from being effectively learned for text-to-speech (TTS) synthesis models so that high-quality deepfake speeches cannot be generated. We conduct extensive experiments on state-of-the-art (SOTA) TTS models utilizing objective and subjective metrics to comprehensively evaluate our proposed method. The experimental results demonstrate outstanding effectiveness and transferability across various models. Compared to the speech unclarity score of 21.94% from voice synthesizers trained on samples without protection, POP-protected samples significantly increase it to 127.31%. Moreover, our method shows robustness against noise reduction and data augmentation techniques, thereby greatly reducing potential hazards.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Builds on 21 of its 53 references that are in the map. First posted on arXiv 28 Oct 2024.
Builds on
21 of 53 references.
References · 21
- 2022Robust Speech Recognition via Large-Scale Weak Supervisioncited by 4,057
- 2020HiFi-GAN: Generative Adversarial Networks for Efficient and High Fidelity Speech Synthesiscited by 1,154
- 2017Natural TTS Synthesis by Conditioning WaveNet on Mel Spectrogram Predictionscited by 804
- 2020FastSpeech 2: Fast and High-Quality End-to-End Text to Speechcited by 717
- 2020ECAPA-TDNN: Emphasized Channel Attention, Propagation and Aggregation in TDNN Based Speaker Verificationcited by 628
- 2021Conditional Variational Autoencoder with Adversarial Learning for End-to-End Text-to-Speechcited by 561
- 2018WaveGlow: A Flow-based Generative Network for Speech Synthesiscited by 309
- 2020A Survey on Neural Network Interpretabilitycited by 291
- 2020Glow-TTS: A Generative Flow for Text-to-Speech via Monotonic Alignment Searchcited by 273
- 2017Convolutional Neural Networks for Medical Image Analysis: Full Training or Fine Tuning?cited by 221
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
- 2021AdaSpeech: Adaptive Text to Speech for Custom Voicecited by 98
9 more
- 2017Efficiently Trainable Text-to-Speech System Based on Deep Convolutional Networks with Guided Attentioncited by 57
- 2019Speaker Anonymization Using X-vector and Neural Waveform Modelscited by 41
- 2023Mega-TTS 2: Boosting Prompting Mechanisms for Zero-Shot Speech Synthesiscited by 41
- 2023Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compressioncited by 39
- 2021DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentationscited by 34
- 2022Not All Poisons are Created Equal: Robust Training against Data Poisoningcited by 30
- 2023VSMask: Defending Against Voice Synthesis Attack via Real-Time Predictive Perturbationcited by 14
- 2020Voice-Indistinguishability: Protecting Voiceprint in Privacy-Preserving Speech Data Releasecited by 12
- 2024Distinctive and Natural Speaker Anonymization via Singular Value Transformation-assisted Matrixcited by 6
Built on by
Citing papers per year: 2025: 5; 2026: 3.
8 papers.
- 2025AudioJailbreak: Jailbreak Attacks against End-to-End Large Audio-Language Modelscited by 18
- 2025SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesiscited by 6
- 2025A Survey on Unlearnable Datacited by 5
- 2026To See is Not to Learn: Protecting Multimodal Data from Unauthorized Fine-Tuning of Large Vision-Language Modelcited by 2
- 2026Off-The-Shelf Image-to-Image Models Are All You Need To Defeat Image Protection Schemescited by 1
- 2025Boosting the Transferability of Audio Adversarial Examples with Acoustic Representation Optimizationcited by 0
- 2025E2E-VGuard: Adversarial Prevention for Production LLM-based End-To-End Speech Synthesiscited by 0
- 2026VocalBridge: Latent Diffusion-Bridge Purification for Defeating Perturbation-Based Voiceprint Defensescited by 0
- 2026To See is Not to Learn: Protecting Multimodal Data from Unauthorized Fine-Tuning of Large Vision-Language Model14 May 2026
- 2026Off-The-Shelf Image-to-Image Models Are All You Need To Defeat Image Protection Schemes25 Feb 2026
- 2026VocalBridge: Latent Diffusion-Bridge Purification for Defeating Perturbation-Based Voiceprint Defenses5 Jan 2026
- 2025E2E-VGuard: Adversarial Prevention for Production LLM-based End-To-End Speech Synthesis10 Nov 2025
- 2025AudioJailbreak: Jailbreak Attacks against End-to-End Large Audio-Language Models20 May 2025
- 2025SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesis14 Apr 2025
- 2025A Survey on Unlearnable Data30 Mar 2025
- 2025Boosting the Transferability of Audio Adversarial Examples with Acoustic Representation Optimization25 Mar 2025