Adversarial speech for voice privacy protection from Personalized Speech generation

Abstract

The rapid progress in personalized speech generation technology, including personalized text-to-speech (TTS) and voice conversion (VC), poses a challenge in distinguishing between generated and real speech for human listeners, resulting in an urgent demand in protecting speakers' voices from malicious misuse. In this regard, we propose a speaker protection method based on adversarial attacks. The proposed method perturbs speech signals by minimally altering the original speech while rendering downstream speech generation models unable to accurately generate the voice of the target speaker. For validation, we employ the open-source pre-trained YourTTS model for speech generation and protect the target speaker's speech in the white-box scenario. Automatic speaker verification (ASV) evaluations were carried out on the generated speech as the assessment of the voice protection capability. Our experimental results show that we successfully perturbed the speaker encoder of the YourTTS model using the gradient-based I-FGSM adversarial perturbation method. Furthermore, the adversarial perturbation is effective in preventing the YourTTS model from generating the speech of the target speaker. Audio samples can be found in https://voiceprivacy.github.io/Adeversarial-Speech-with-YourTTS.

arXiv commentAccepted by icassp 2024

References in corpus (9)

• Explaining and Harnessing Adversarial Examples
• VoxCeleb2: Deep Speaker Recognition
• ECAPA-TDNN: Emphasized Channel Attention, Propagation and Aggregation in TDNN Based Speaker Verification
• HiFi-GAN: Generative Adversarial Networks for Efficient and High Fidelity Speech Synthesis
• MLS: A Large-Scale Multilingual Dataset for Speech Research
• Clova Baseline System for the VoxCeleb Speaker Recognition Challenge 2020
• Attack on practical speaker verification system using universal adversarial perturbations
• TTS-Portuguese Corpus: a corpus for speech synthesis in Brazilian Portuguese
• Symmetric Saliency-based Adversarial Attack To Speaker Identification