Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2026
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2601.20432 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866911517180428288 |
|---|---|
| author | Özer, Yigitcan Ge, Wanying Zhang, Zhe Wang, Xin Yamagishi, Junichi |
| author_facet | Özer, Yigitcan Ge, Wanying Zhang, Zhe Wang, Xin Yamagishi, Junichi |
| contents | Audio watermarking embeds auxiliary information into speech while maintaining speaker identity, linguistic content, and perceptual quality. Although recent advances in neural and digital signal processing-based watermarking methods have improved imperceptibility and embedding capacity, robustness is still primarily assessed against conventional distortions such as compression, additive noise, and resampling. However, the rise of deep learning-based attacks introduces novel and significant threats to watermark security. In this work, we investigate self voice conversion as a universal, content-preserving attack against audio watermarking systems. Self voice conversion remaps a speaker's voice to the same identity while altering acoustic characteristics through a voice conversion model. We demonstrate that this attack severely degrades the reliability of state-of-the-art watermarking approaches and highlight its implications for the security of modern audio watermarking techniques. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2601_20432 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | Self Voice Conversion as an Attack against Neural Audio Watermarking Özer, Yigitcan Ge, Wanying Zhang, Zhe Wang, Xin Yamagishi, Junichi Sound Artificial Intelligence Audio watermarking embeds auxiliary information into speech while maintaining speaker identity, linguistic content, and perceptual quality. Although recent advances in neural and digital signal processing-based watermarking methods have improved imperceptibility and embedding capacity, robustness is still primarily assessed against conventional distortions such as compression, additive noise, and resampling. However, the rise of deep learning-based attacks introduces novel and significant threats to watermark security. In this work, we investigate self voice conversion as a universal, content-preserving attack against audio watermarking systems. Self voice conversion remaps a speaker's voice to the same identity while altering acoustic characteristics through a voice conversion model. We demonstrate that this attack severely degrades the reliability of state-of-the-art watermarking approaches and highlight its implications for the security of modern audio watermarking techniques. |
| title | Self Voice Conversion as an Attack against Neural Audio Watermarking |
| topic | Sound Artificial Intelligence |
| url | https://arxiv.org/abs/2601.20432 |