Saved in:
Bibliographic Details
Main Authors: Ren, Yong, Yi, Jiangyan, Wang, Tao, Tao, Jianhua, Lian, Zheng, Wen, Zhengqi, Li, Chenxing, Fu, Ruibo, Bai, Ye, Zhang, Xiaohui
Format: Preprint
Published: 2025
Subjects:
Online Access:https://arxiv.org/abs/2504.05197
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866912359918862336
author Ren, Yong
Yi, Jiangyan
Wang, Tao
Tao, Jianhua
Lian, Zheng
Wen, Zhengqi
Li, Chenxing
Fu, Ruibo
Bai, Ye
Zhang, Xiaohui
author_facet Ren, Yong
Yi, Jiangyan
Wang, Tao
Tao, Jianhua
Lian, Zheng
Wen, Zhengqi
Li, Chenxing
Fu, Ruibo
Bai, Ye
Zhang, Xiaohui
contents Neural speech generation (NSG) has rapidly advanced as a key component of artificial intelligence-generated content, enabling the generation of high-quality, highly realistic speech for diverse applications. This development increases the risk of technique misuse and threatens social security. Audio watermarking can embed imperceptible marks into generated audio, providing a promising approach for secure NSG usage. However, current audio watermarking methods are mainly applied at the audio-level or feature-level, which are not suitable for open-sourced scenarios where source codes and model weights are released. To address this limitation, we propose a Plug-and-play Parameter-level WaterMarking (P2Mark) method for NSG. Specifically, we embed watermarks into the released model weights, offering a reliable solution for proactively tracing and protecting model copyrights in open-source scenarios. During training, we introduce a lightweight watermark adapter into the pre-trained model, allowing watermark information to be merged into the model via this adapter. This design ensures both the flexibility to modify the watermark before model release and the security of embedding the watermark within model parameters after model release. Meanwhile, we propose a gradient orthogonal projection optimization strategy to ensure the quality of the generated audio and the accuracy of watermark preservation. Experimental results on two mainstream waveform decoders in NSG (i.e., vocoder and codec) demonstrate that P2Mark achieves comparable performance to state-of-the-art audio watermarking methods that are not applicable to open-source white-box protection scenarios, in terms of watermark extraction accuracy, watermark imperceptibility, and robustness.
format Preprint
id arxiv_https___arxiv_org_abs_2504_05197
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle P2Mark: Plug-and-play Parameter-level Watermarking for Neural Speech Generation
Ren, Yong
Yi, Jiangyan
Wang, Tao
Tao, Jianhua
Lian, Zheng
Wen, Zhengqi
Li, Chenxing
Fu, Ruibo
Bai, Ye
Zhang, Xiaohui
Sound
Neural speech generation (NSG) has rapidly advanced as a key component of artificial intelligence-generated content, enabling the generation of high-quality, highly realistic speech for diverse applications. This development increases the risk of technique misuse and threatens social security. Audio watermarking can embed imperceptible marks into generated audio, providing a promising approach for secure NSG usage. However, current audio watermarking methods are mainly applied at the audio-level or feature-level, which are not suitable for open-sourced scenarios where source codes and model weights are released. To address this limitation, we propose a Plug-and-play Parameter-level WaterMarking (P2Mark) method for NSG. Specifically, we embed watermarks into the released model weights, offering a reliable solution for proactively tracing and protecting model copyrights in open-source scenarios. During training, we introduce a lightweight watermark adapter into the pre-trained model, allowing watermark information to be merged into the model via this adapter. This design ensures both the flexibility to modify the watermark before model release and the security of embedding the watermark within model parameters after model release. Meanwhile, we propose a gradient orthogonal projection optimization strategy to ensure the quality of the generated audio and the accuracy of watermark preservation. Experimental results on two mainstream waveform decoders in NSG (i.e., vocoder and codec) demonstrate that P2Mark achieves comparable performance to state-of-the-art audio watermarking methods that are not applicable to open-source white-box protection scenarios, in terms of watermark extraction accuracy, watermark imperceptibility, and robustness.
title P2Mark: Plug-and-play Parameter-level Watermarking for Neural Speech Generation
topic Sound
url https://arxiv.org/abs/2504.05197