Salvato in:
Dettagli Bibliografici
Autori principali: Arefeen, Ridwan, Miao, Xiaoxiao, Tong, Rong, Ng, Aik Beng, See, Simon, Liu, Timothy
Natura: Preprint
Pubblicazione: 2026
Soggetti:
Accesso online:https://arxiv.org/abs/2603.12840
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866914395149303808
author Arefeen, Ridwan
Miao, Xiaoxiao
Tong, Rong
Ng, Aik Beng
See, Simon
Liu, Timothy
author_facet Arefeen, Ridwan
Miao, Xiaoxiao
Tong, Rong
Ng, Aik Beng
See, Simon
Liu, Timothy
contents Voice anonymization masks vocal traits while preserving linguistic content, which may still leak speaker-specific patterns. To assess and strengthen privacy evaluation, we propose a dual-stream attacker that fuses spectral and self-supervised learning features via parallel encoders with a three-stage training strategy. Stage I establishes foundational speaker-discriminative representations. Stage II leverages the shared identity-transformation characteristics of voice conversion and anonymization, exposing the model to diverse converted speech to build cross-system robustness. Stage III provides lightweight adaptation to target anonymized data. Results on the VoicePrivacy Attacker Challenge (VPAC) dataset demonstrate that Stage II is the primary driver of generalization, enabling strong attacking performance on unseen anonymization datasets. With Stage III, fine-tuning on only 10\% of the target anonymization dataset surpasses current state-of-the-art attackers in terms of EER.
format Preprint
id arxiv_https___arxiv_org_abs_2603_12840
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle DAST: A Dual-Stream Voice Anonymization Attacker with Staged Training
Arefeen, Ridwan
Miao, Xiaoxiao
Tong, Rong
Ng, Aik Beng
See, Simon
Liu, Timothy
Sound
Artificial Intelligence
Voice anonymization masks vocal traits while preserving linguistic content, which may still leak speaker-specific patterns. To assess and strengthen privacy evaluation, we propose a dual-stream attacker that fuses spectral and self-supervised learning features via parallel encoders with a three-stage training strategy. Stage I establishes foundational speaker-discriminative representations. Stage II leverages the shared identity-transformation characteristics of voice conversion and anonymization, exposing the model to diverse converted speech to build cross-system robustness. Stage III provides lightweight adaptation to target anonymized data. Results on the VoicePrivacy Attacker Challenge (VPAC) dataset demonstrate that Stage II is the primary driver of generalization, enabling strong attacking performance on unseen anonymization datasets. With Stage III, fine-tuning on only 10\% of the target anonymization dataset surpasses current state-of-the-art attackers in terms of EER.
title DAST: A Dual-Stream Voice Anonymization Attacker with Staged Training
topic Sound
Artificial Intelligence
url https://arxiv.org/abs/2603.12840