Probing Speaker Identity Sensitivity in Audio Deepfake Detectors

Authors: Daniyal Kabir Dar, Arun Ross

Published: 2026-07-23 21:12:33+00:00

Comment: Accepted at IEEE/IAPR International Joint Conference on Biometrics (IJCB) 2026. 8 pages, 3 figures, 7 tables

AI Summary

This research introduces the Identity Sensitivity Score (ISS), a novel diagnostic tool for audio deepfake detectors that quantifies how much a detector's output changes based on speaker identity. The authors argue that detectors often rely on speaker identity cues, leading to performance degradation on new datasets. ISS effectively predicts misclassification and highlights utterances where detector decisions are sensitive to speaker identity, offering a label-free method for failure analysis.

Abstract

Audio deepfake detectors are trained to distinguish genuine speech from synthetic speech and often perform well on standard benchmarks. Yet the same detector that achieves less than 1% error on one dataset can see its error rate increase twentyfold when evaluated on a different dataset. We argue that one contributing factor is speaker-identity reliance: standard training corpora correlate speaker identity with the genuine/synthetic label, allowing detectors to partially rely on speaker-related cues rather than synthesis artifacts alone. We propose the Identity Sensitivity Score (ISS), a per-utterance diagnostic that quantifies how much a detector's output changes across different speaker identity contexts. ISS requires no ground-truth labels at inference time and can be computed from the detector score and a pool of reference speaker examples. Across two detectors and two datasets, incorrectly classified utterances have ISS scores 29 to 52 times higher than correctly classified utterances, and ISS alone predicts misclassification with area-under-curve (AUC) up to 0.954. To test whether ISS actually captures identity-sensitive behavior rather than serving only as a proxy for prediction confidence, we apply voice conversion to 500 utterances and measure the resulting detector-score shift. Utterances flagged as identity-sensitive by ISS respond 19 to 30 times more strongly to this manipulation than utterances flagged as stable. These results position ISS as a practical inference-time diagnostic for speaker-dependent failure analysis in audio deepfake detection.


Key findings
Incorrectly classified utterances consistently exhibit significantly higher ISS scores (29 to 52 times) compared to correctly classified ones. ISS alone can predict misclassification with a high AUC (up to 0.954). Furthermore, utterances flagged as identity-sensitive by ISS respond 19 to 30 times more strongly to voice conversion manipulations, validating ISS as a measure of genuine identity-sensitive detector behavior.
Approach
The authors propose the Identity Sensitivity Score (ISS) which measures the spread of a deepfake detector's score for a given utterance across various speaker identity contexts. This is achieved by logically perturbing the detector's logit score using cosine similarity between the utterance's speaker embedding (from ECAPA-TDNN) and a pool of reference speaker prototypes. A high ISS indicates speaker identity reliance, meaning the detector's decision is unstable across different speaker contexts.
Datasets
ASVspoof 2019 LA, ASVspoof 2021 LA
Model(s)
AASIST, RawNet2, ECAPA-TDNN
Author countries
USA