Audio Codec Augmentation for Robust Collaborative Watermarking of Speech Synthesis

Authors: Lauri Juvela, Xin Wang

Published: 2024-09-20 10:33:17+00:00

AI Summary

This paper enhances collaborative watermarking for speech synthesis detection by incorporating audio codec augmentation. It demonstrates that using a waveform-domain straight-through estimator for gradient approximation enables robust watermarking even after processing through traditional and neural audio codecs.

Abstract

Automatic detection of synthetic speech is becoming increasingly important as current synthesis methods are both near indistinguishable from human speech and widely accessible to the public. Audio watermarking and other active disclosure methods of are attracting research activity, as they can complement traditional deepfake defenses based on passive detection. In both active and passive detection, robustness is of major interest. Traditional audio watermarks are particularly susceptible to removal attacks by audio codec application. Most generated speech and audio content released into the wild passes through an audio codec purely as a distribution method. We recently proposed collaborative watermarking as method for making generated speech more easily detectable over a noisy but differentiable transmission channel. This paper extends the channel augmentation to work with non-differentiable traditional audio codecs and neural audio codecs and evaluates transferability and effect of codec bitrate over various configurations. The results show that collaborative watermarking can be reliably augmented by black-box audio codecs using a waveform-domain straight-through-estimator for gradient approximation. Furthermore, that results show that channel augmentation with a neural audio codec transfers well to traditional codecs. Listening tests demonstrate collaborative watermarking incurs negligible perceptual degradation with high bitrate codecs or DAC at 8kbps.


Key findings
Codec augmentation improved robustness for both passive and active detection. The straight-through estimator effectively approximated gradients through codecs. Augmentation with a neural audio codec (DAC) transferred well to traditional codecs, resulting in robust detection with minimal perceptual degradation at higher bitrates.
Approach
The authors extend collaborative watermarking to handle non-differentiable audio codecs. They achieve this by using a waveform-domain straight-through estimator for gradient approximation during training, allowing the watermarking to be robust to various codecs and bitrates.
Datasets
LibriTTS-R dataset (train-clean-100, dev-clean, test-clean partitions)
Model(s)
HiFi-GAN (as neural vocoder and generator), AASIST (as watermark detector)
Author countries
Finland, Japan