VoxAnon: A balanced dataset for a fair evaluation of speech anonymization
On the map: Speech and audio language models → Anti-spoofing and adversarial audio attacks
Abstract (arXiv)
Speech anonymization is evaluated with automatic speaker verification attackers whose performance depends on the attribute distribution of both their training and evaluation data, which may bias privacy estimates for some speaker groups. To alleviate this issue, we introduce VoxAnon, a dataset built from VoxCeleb1 and 2 with training and evaluation splits balanced across gender, age, accent, and pitch. We extract and cross-check attributes using two complementary methods, balance trial lists per subgroup, and draw test/enrollment utterances from distinct video sources in order to limit linguistic and session bias. Comparing VoxAnon with unbalanced training and test data across four attackers and three anonymizers, we show that attribute imbalance changes which subgroups appear hardest to re-identify, in directions that depend on the attribute. In the balanced setting, residual disparities persist, mostly tied to accent and pitch, and depend on the anonymizer/attacker pair. Code and trial lists are publicly available.
Key facts. No citing papers in the map yet (data through 19 Oct 2026). Placed in Anti-spoofing and adversarial audio attacks, one of 11 directions in Speech and audio language models. Builds on 25 of its 31 references that are in the map. First posted on arXiv 9 Oct 2026.
Builds on
25 of 31 references.
Closest ancestors · 1
Same direction, newest first
Other references · 24
- 2015Deep Residual Learning for Image Recognitioncited by 52,456
- 2021WavLM: Large-Scale Self-Supervised Pre-Training for Full Stack Speech Processingcited by 2,135
- 2018VoxCeleb2: Deep Speaker Recognitioncited by 1,166
- 2017VoxCeleb: a large-scale speaker identification datasetcited by 985
- 2020ECAPA-TDNN: Emphasized Channel Attention, Propagation and Aggregation in TDNN Based Speaker Verificationcited by 980
- 2023SONAR: Sentence-Level Multimodal and Language-Agnostic Representationscited by 118
- 2021The VoicePrivacy 2020 Challenge: Results and findingscited by 53
- 2024Reshape Dimensions Network for Speaker Recognitioncited by 48
- 2019Evaluating Voice Conversion-based Privacy Protection against Informed Attackerscited by 33
- 2021VoxCeleb Enrichment for Age and Gender Recognitioncited by 27
- 2023Anonymizing Speech: Evaluating and Designing Speaker Anonymization Techniquescited by 26
- 2022To train or not to train adversarially: A study of bias mitigation strategies for speaker recognitioncited by 10
12 more
- 2025SVeritas: Benchmark for Robust Speaker Verification under Diverse Conditionscited by 9
- 2021Improving Fairness in Speaker Recognitioncited by 8
- 2025You Are What You Say: Exploiting Linguistic Content for VoicePrivacy Attackscited by 4
- 2022C-P Map: A Novel Evaluation Toolkit for Speaker Verificationcited by 3
- 2023Voice Anonymization for All -- Bias Evaluation of the Voice Privacy Challenge Baseline Systemcited by 3
- 2024A Comparison of Differential Performance Metrics for the Evaluation of Automatic Speaker Verification Fairnesscited by 3
- 2026Content Leakage in LibriSpeech and Its Impact on the Privacy Evaluation of Speaker Anonymizationcited by 2
- 2026DAST: A Dual-Stream Voice Anonymization Attacker with Staged Trainingcited by 2
- 2026SpeakerCard-1M: An Evidence-Grounded Corpus for In-the-Wild Speaker Verificationcited by 2
- 2026Kiwano: A Cutting-Edge Open-Source Toolkit for Speaker Verificationcited by 2
- 2026Trade-offs Between Individual and Group Fairness in Machine Learning: A Comprehensive Reviewcited by 1
- 2026A Large-Scale Per-Speaker Analysis of Re-identification Risk in Speech Anonymizationcited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025VoxGuard: Evaluating User and Attribute Privacy in Speech via Membership Inference Attacks
- 2026Multimodal Speaker Verification as a Threat to Speaker Anonymization
- 2026VoxTubeS: Distributable Speaker-Anonymized Synthetic Speech Corpora and Their Analysis
- 2022Differentially Private Speaker Anonymization
- 2025Inference Attacks for X-Vector Speaker Anonymization
- 2026Evaluating voice anonymisation using similarity rank disclosure ↗
- 2026Exploiting Acoustic and Content-Oriented Speaker Verification Attacks Against Multilingual Voice Anonymization
- 2025SegReConcat: A Data Augmentation Method for Voice Anonymization Attack