A Comprehensive Real-World Assessment of Audio Watermarking Algorithms: Will They Survive Neural Codecs?
Not on the map. Why?
Abstract (arXiv)
We introduce the Robust Audio Watermarking Benchmark (RAW-Bench), a benchmark for evaluating deep learning-based audio watermarking methods with standardized and systematic comparisons. To simulate real-world usage, we introduce a comprehensive audio attack pipeline with various distortions such as compression, background noise, and reverberation, along with a diverse test dataset including speech, environmental sounds, and music recordings. Evaluating four existing watermarking methods on RAW-bench reveals two main insights: (i) neural compression techniques pose the most significant challenge, even when algorithms are trained with such compressions; and (ii) training with audio attacks generally improves robustness, although it is insufficient in some cases. Furthermore, we find that specific distortions, such as polarity inversion, time stretching, or reverb, seriously affect certain methods. The evaluation framework is accessible at github.com/SonyResearch/raw_bench.
Key facts. Cited by 13 papers in the map (data through 14 Oct 2026). Builds on 21 of its 35 references that are in the map. First posted on arXiv 26 May 2025.
Builds on
21 of 35 references.
References · 21
- 2019SpecAugment: A Simple Data Augmentation Method for Automatic Speech Recognitioncited by 1,380
- 2020FastSpeech 2: Fast and High-Quality End-to-End Text to Speechcited by 717
- 2022High Fidelity Neural Audio Compressioncited by 687
- 2023Simple and Controllable Music Generationcited by 488
- 2023High-Fidelity Audio Compression with Improved RVQGANcited by 431
- 2018Conv-TasNet: Surpassing Ideal Time-Frequency Magnitude Masking for Speech Separationcited by 406
- 2023Voicebox: Text-Guided Multilingual Universal Speech Generation at Scalecited by 379
- 2019Clotho: An Audio Captioning Datasetcited by 358
- 2018Enabling Factorized Piano Music Modeling and Generation with the MAESTRO Datasetcited by 217
- 2023Music ControlNet: Multiple Time-varying Controls for Music Generationcited by 83
- 2024Proactive Detection of Voice Cloning with Localized Watermarkingcited by 78
- 2021A Comparative Study on Recent Neural Spoofing Countermeasures for Synthetic Speech Detectioncited by 56
9 more
- 2023WavMark: Watermarking for Audio Generationcited by 50
- 2023Detecting Voice Cloning Attacks via Timbre Watermarkingcited by 44
- 2023Moisesdb: A dataset for source separation beyond 4-stemscited by 39
- 2024AudioMarkBench: Benchmarking Robustness of Audio Watermarkingcited by 23
- 2024SilentCipher: Deep Audio Watermarkingcited by 21
- 2024Latent Watermarking of Audio Generative Modelscited by 16
- 2024Towards Assessing Data Replication in Music Generation with Music Similarity Metrics on Raw Audiocited by 10
- 2022JaCappella Corpus: A Japanese a Cappella Vocal Ensemble Corpuscited by 5
- 2024Audio Codec Augmentation for Robust Collaborative Watermarking of Speech Synthesiscited by 4
Built on by
Citing papers per year: 2025: 3; 2026: 10.
13 papers.
Sort:
By area:
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarkingcited by 4
- 2025Attribution-by-design: Ensuring Inference-Time Provenance in Generative Music Systemscited by 3
- 2025HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removalcited by 3
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarkingcited by 2
- 2026Latent-Mark: An Audio Watermark Robust to Neural Codec Compressioncited by 1
- 2026CRAW: Codec Robust Audio Watermarkingcited by 1
- 2025Efficient Speech Watermarking for Speech Synthesis via Progressive Knowledge Distillationcited by 0
- 2026MerkleSpeech: Public-Key Verifiable, Chunk-Localised Speech Provenance via Perceptual Fingerprints and Merkle Commitmentscited by 0
- 2026Feature-Aligned Speech Watermarking for Robustness to Reconstruction Distortionscited by 0
- 2026LambdaMark: Semantic Audio Watermarking for Robustness and Radioactivitycited by 0
- 2026MusicMark: A Robust Generative Watermarking Framework for Music Generationcited by 0
- 2026AudioNoisePrints: Model-free audio watermarking using spatial correlation in flow matching TTScited by 0
1 more
- 2026GAMW: Generation-Aware Mel-Domain Watermarking for TTS Traceability10 Oct 2026
- 2026CRAW: Codec Robust Audio Watermarking2 Sep 2026
- 2026AudioNoisePrints: Model-free audio watermarking using spatial correlation in flow matching TTS23 Aug 2026
- 2026MusicMark: A Robust Generative Watermarking Framework for Music Generation13 Jul 2026
- 2026LambdaMark: Semantic Audio Watermarking for Robustness and Radioactivity19 Jun 2026
- 2026Feature-Aligned Speech Watermarking for Robustness to Reconstruction Distortions10 Jun 2026
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking15 Apr 2026
- 2026Latent-Mark: An Audio Watermark Robust to Neural Codec Compression5 Mar 2026
- 2026MerkleSpeech: Public-Key Verifiable, Chunk-Localised Speech Provenance via Perceptual Fingerprints and Merkle Commitments10 Feb 2026
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarking28 Jan 2026
- 2025HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removal26 Nov 2025
- 2025Attribution-by-design: Ensuring Inference-Time Provenance in Generative Music Systems9 Oct 2025
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarkingcited by 2
- 2026MerkleSpeech: Public-Key Verifiable, Chunk-Localised Speech Provenance via Perceptual Fingerprints and Merkle Commitmentscited by 0
- 2026MusicMark: A Robust Generative Watermarking Framework for Music Generationcited by 0
- 2026GAMW: Generation-Aware Mel-Domain Watermarking for TTS Traceabilitycited by 0
- 2026GAMW: Generation-Aware Mel-Domain Watermarking for TTS Traceability10 Oct 2026
- 2026MusicMark: A Robust Generative Watermarking Framework for Music Generation13 Jul 2026
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking15 Apr 2026
- 2026MerkleSpeech: Public-Key Verifiable, Chunk-Localised Speech Provenance via Perceptual Fingerprints and Merkle Commitments10 Feb 2026
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarkingcited by 4
- 2025Attribution-by-design: Ensuring Inference-Time Provenance in Generative Music Systemscited by 3
- 2025HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removalcited by 3
- 2026Latent-Mark: An Audio Watermark Robust to Neural Codec Compressioncited by 1
- 2026CRAW: Codec Robust Audio Watermarkingcited by 1
- 2026Feature-Aligned Speech Watermarking for Robustness to Reconstruction Distortionscited by 0
- 2026LambdaMark: Semantic Audio Watermarking for Robustness and Radioactivitycited by 0
- 2026CRAW: Codec Robust Audio Watermarking2 Sep 2026
- 2026LambdaMark: Semantic Audio Watermarking for Robustness and Radioactivity19 Jun 2026
- 2026Feature-Aligned Speech Watermarking for Robustness to Reconstruction Distortions10 Jun 2026
- 2026Latent-Mark: An Audio Watermark Robust to Neural Codec Compression5 Mar 2026
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarking28 Jan 2026
- 2025HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removal26 Nov 2025
- 2025Attribution-by-design: Ensuring Inference-Time Provenance in Generative Music Systems9 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2025AWARE: Audio Watermarking with Adversarial Resistance to Edits
- 2025SoK: How Robust is Audio Watermarking in Generative AI models?
- 2025Multi-bit Audio Watermarking
- 2025XAttnMark: Learning Robust Audio Watermarking with Cross-Attention
- 2026The Vulnerability of Neural Audio Watermarks under Speech Enhancement ↗
- 2025The Impact of Audio Watermarking on Audio Anti-Spoofing Countermeasures
- 2026Learning to Evade: Adaptive Attacks on Audio Watermarking ↗
- 2024IDEAW: Robust Neural Audio Watermarking with Invertible Dual-Embedding