arXiv Machine Learning

Backward Compatibility in Zero-Bit Neural Audio Watermarking

The paper formalizes backward compatibility for zero‑bit neural audio watermarking and introduces a training framework that pairs a new detector with a sequence of frozen legacy embedders. Using a performance‑weighted sampling strategy, the detector maintains accuracy across all earlier versions, but this coupling can cause an embedder‑collapse effect that degrades the true negative rate against out‑of‑chain embedders. To mitigate this, an Angular Diversity Loss is added, ensuring each new embedder occupies a distinct output space region and restoring near‑perfect true negative rates without harming detection accuracy or audio quality.

arXiv Machine Learning
Sep 4

CRAW: Codec Robust Audio Watermarking

The paper introduces CRAW, a codec‑robust audio watermarking framework designed to embed imperceptible signals into synthetic speech. CRAW enhances robustness against neural re‑synthesis, codecs, denoisers, and vocoders while preserving high perceptual quality through distortion‑aware training, attention‑based pooling, perceptual masking, and error‑correcting codes. Experiments show CRAW outperforms existing post‑hoc watermarking methods in robustness without compromising audio quality.

By David Chernin, Ethan Fetaya
Hugging Face Trending Papers
Sep 2

CRAW: Codec Robust Audio Watermarking

CRAW is a codec‑robust audio watermarking framework designed to embed imperceptible signals into synthetic speech, enabling provenance verification. It improves robustness against neural re‑synthesis, codecs, denoisers, and vocoders while preserving perceptual quality through distortion‑aware training, attention‑based pooling, perceptual masking, and error‑correcting codes. Experiments show CRAW outperforms existing post‑hoc watermarking methods in robustness without compromising audio quality.

arXiv AI
Sep 21

A Training-Free Proactive Defense Against Partial Speech Manipulation via Self-Embedding Steganography

The paper introduces a training‑free proactive defense for detecting partial deepfake speech by using self‑embedding steganography. It embeds a compressed version of the clean audio within itself, allowing post‑hoc extraction of reference content and enabling detection of spoofed segments via codec‑based restoration. Experiments on a benchmark dataset show that this method complements passive detectors and operates without any training, offering a robust, data‑efficient alternative for partial deepfake detection.

By Yigitcan \"Ozer, Zhe Zhang, Wanying Ge, Xin Wang, Junichi Yamagishi
arXiv AI
Oct 9

mAVE: A Watermark for Joint Audio-Visual Generation Models

The paper introduces mAVE, a training‑free watermarking framework for joint audio‑visual diffusion transformers that binds audio and video modalities through a session‑keyed cryptographic digest. mAVE separates public record retrieval from secret session authentication, enabling provider‑assisted verification without altering generator weights or training auxiliary networks. Experiments on LTX‑2 and MOVA demonstrate high true‑positive rates (99.8%) and negligible false positives, while maintaining comparable generation quality.

By Luyang Si, Leyi Pan, Dongsheng Ma, Lijie Wen
Hugging Face Trending Papers
Jun 22

The Watermark Shortcut: How Provenance Marking Sabotages Audio Deepfake Detection

Provenance watermarking is increasingly treated as a safeguard for synthetic speech, whether built directly into speech-generation models such as Chatterbox, provided through dedicated techniques such as AudioSeal, or deployed by commercial platforms such as ElevenLabs. We identify a previously uncharacterized liability: when synthetic speech is watermarked and human speech is not, detectors trained alongside latch onto the watermark as a spurious "watermark => fake" shortcut.