A Survey of Threats Against Voice Authentication and Anti-Spoofing Systems
Not on the map. Why?
Abstract (arXiv)
Voice authentication has undergone significant changes from traditional systems that relied on handcrafted acoustic features to deep learning models that can extract robust speaker embeddings. This advancement has expanded its applications across finance, smart devices, law enforcement, and beyond. However, as adoption has grown, so have the threats. This survey presents a comprehensive review of the modern threat landscape targeting Voice Authentication Systems (VAS) and Anti-Spoofing Countermeasures (CMs), including data poisoning, adversarial, deepfake, and adversarial spoofing attacks. We chronologically trace the development of voice authentication and examine how vulnerabilities have evolved in tandem with technological advancements. For each category of attack, we summarize methodologies, highlight commonly used datasets, compare performance and limitations, and organize existing literature using widely accepted taxonomies. By highlighting emerging risks and open challenges, this survey aims to support the development of more secure and resilient voice authentication systems.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 59 of its 125 references that are in the map. First posted on arXiv 22 Aug 2025.
Builds on
59 of 125 references.
References · 59
- 2016WaveNet: A Generative Model for Raw Audiocited by 1,722
- 2018VoxCeleb2: Deep Speaker Recognitioncited by 875
- 2017Natural TTS Synthesis by Conditioning WaveNet on Mel Spectrogram Predictionscited by 804
- 2023Neural Codec Language Models are Zero-Shot Text to Speech Synthesizerscited by 752
- 2017VoxCeleb: a large-scale speaker identification datasetcited by 732
- 2020FastSpeech 2: Fast and High-Quality End-to-End Text to Speechcited by 717
- 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 519
- 2017Tacotron: Towards End-to-End Speech Synthesiscited by 490
- 2021Grad-TTS: A Diffusion Probabilistic Model for Text-to-Speechcited by 447
- 2017AISHELL-1: An Open-Source Mandarin Speech Corpus and A Speech Recognition Baselinecited by 373
- 2020Glow-TTS: A Generative Flow for Text-to-Speech via Monotonic Alignment Searchcited by 273
- 2019Adversarial Attacks and Defenses in Images, Graphs and Text: A Reviewcited by 237
38 more
- 2018Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learningcited by 225
- 2019Detecting AI Trojans Using Meta Neural Analysiscited by 199
- 2021Unlearnable Examples: Making Personal Data Unexploitablecited by 193
- 2019AUTOVC: Zero-Shot Voice Style Transfer with Only Autoencoder Losscited by 192
- 2024XTTS: a Massively Multilingual Zero-Shot Text-to-Speech Modelcited by 179
- 2019ASVspoof 2019: Future Horizons in Spoofed and Fake Audio Detectioncited by 178
- 2024MaskGCT: Zero-Shot Text-to-Speech with Masked Generative Codec Transformercited by 161
- 2018AISHELL-2: Transforming Mandarin ASR Research Into Industrial Scalecited by 128
- 2024VoiceCraft: Zero-Shot Speech Editing and Text-to-Speech in the Wildcited by 120
- 2021Adversarial Examples Make Strong Poisonscited by 119
- 2017Deep Voice: Real-time Neural Text-to-Speechcited by 83
- 2019One-shot Voice Conversion by Separating Speaker and Content Representations with Instance Normalizationcited by 82
- 2022FreeVC: Towards High-Quality Text-Free One-Shot Voice Conversioncited by 80
- 2018StarGAN-VC: Non-parallel many-to-many voice conversion with star generative adversarial networkscited by 78
- 2020Voice Conversion Challenge 2020: Intra-lingual semi-parallel and cross-lingual voice conversioncited by 75
- 2019Who is Real Bob? Adversarial Attacks on Speaker Recognition Systemscited by 67
- 2020Backdoor Attack against Speaker Verificationcited by 66
- 2020One-class Learning Towards Synthetic Voice Spoofing Detectioncited by 61
- 2020Adversarial Machine Learning in Image Classification: A Survey Towards the Defender's Perspectivecited by 59
- 2017Deep Speaker: an End-to-End Neural Speaker Embedding Systemcited by 58
- 2020Flowtron: an Autoregressive Flow-based Generative Network for Text-to-Speech Synthesiscited by 54
- 2023Audio Deepfake Detection: A Surveycited by 50
- 2024Fish-Speech: Leveraging Large Language Models for Advanced Multilingual Text-to-Speech Synthesiscited by 48
- 2018Fooling End-to-end Speaker Verification by Adversarial Examplescited by 39
- 2023OpenVoice: Versatile Instant Voice Cloningcited by 32
- 2019Adversarial Attacks on Spoofing Countermeasures of automatic speaker verificationcited by 23
- 2019Adversarial Attacks on GMM i-vector based Speaker Verification Systemscited by 23
- 2020Tandem Assessment of Spoofing Countermeasures and Automatic Speaker Verification: Fundamentalscited by 22
- 2021ASVspoof 2021: Automatic Speaker Verification Spoofing and Countermeasures Challenge Evaluation Plancited by 20
- 2021Study of Pre-processing Defenses against Adversarial Attacks on State-of-the-art Speaker Recognition Systemscited by 10
- 2022AS2T: Arbitrary Source-To-Target Adversarial Attack on Speaker Recognition Systemscited by 10
- 2023Malafide: a novel adversarial convolutive noise attack against deepfake and spoofing detection systemscited by 10
- 2023Fake the Real: Backdoor Attack on Deep Speech Classification via Voice Conversioncited by 10
- 2023QFA2SR: Query-Free Adversarial Transfer Attacks to Speaker Recognition Systemscited by 9
- 2022Adversarial attacks and defenses in Speaker Recognition Systems: A surveycited by 6
- 2022PBSM: Backdoor attack against Keyword spotting based on pitch boosting and sound maskingcited by 6
- 2023Backdoor Attacks against Voice Recognition Systems: A Surveycited by 6
- 2024Malacopula: adversarial automatic speaker verification attacks using a neural-based generalised Hammerstein modelcited by 6
50 most cited of 59 All 59 (JSON)
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025VocalCrypt: Novel Active Defense Against Deepfake Voice Based on Masking Effect ↗
- 2025Audio Jailbreak Attacks: Exposing Vulnerabilities in SpeechGPT in a White-Box Framework
- 2025Adversarial Attacks on Audio Deepfake Detection: A Benchmark and Comparative Study
- 2022VSVC: Backdoor attack against Keyword Spotting based on Voiceprint Selection and Voice Conversion
- 2025VoiceCloak: A Multi-Dimensional Defense Framework against Unauthorized Diffusion-based Voice Cloning
- 2025Investigating Vulnerabilities and Defenses Against Audio-Visual Attacks: A Comprehensive Survey Emphasizing Multimodal Models
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarking
- 2024EmoAttack: Utilizing Emotional Voice Conversion for Speech Backdoor Attacks on Deep Speech Classification Models