Attacking Voice Anonymization Systems With Augmented Feature And Speaker Identity Difference

Abstract

This study focuses on the First VoicePrivacy Attacker Challenge within the ICASSP 2025 Signal Processing Grand Challenge, which aims to develop speaker verification systems capable of determining whether two anonymized speech signals are from the same speaker. However, differences between feature distributions of original and anonymized speech complicate this task. To address this challenge, we propose an attacker system that combines Data Augmentation enhanced feature representation and Speaker Identity Difference enhanced classifier to improve verification performance, termed DA-SID. Specifically, data augmentation strategies (i.e., data fusion and SpecAugment) are utilized to mitigate feature distribution gaps, while probabilistic linear discriminant analysis (PLDA) is employed to further enhance speaker identity difference. Our system significantly outperforms the baseline, demonstrating exceptional effectiveness and robustness against various voice anonymization systems, ultimatel

Stats

• citations6
• S2 citations—
• github stars0
• HF likes0
• heat score6.34
• arxiv keyzhang2024attacking

Related papers

• Diffattack: Diffusion-based Timbre-reserved Adversarial Attack In Speaker Identification (2025)0.00
• Privacy-utility Balanced Voice De-identification Using Adversarial Examples (2022)0.00
• Impact Of Phonetics On Speaker Identity In Adversarial Voice Attack (2025)0.00
• Asynchronous Voice Anonymization Using Adversarial Perturbation On Speaker Embedding (2024)7.16
• You Are What You Say: Exploiting Linguistic Content For Voiceprivacy Attacks (2025)3.58
• The Voiceprivacy 2022 Challenge: Progress And Perspectives In Voice Anonymisation (2024)10.61
• Distinctive And Natural Speaker Anonymization Via Singular Value Transformation-assisted Matrix (2024)8.82
• Speaker De-identification System Using Autoencoders And Adversarial Training (2020)0.00