Search papers, labs, and topics across Lattice.
This paper addresses the vulnerabilities of existing audio watermarking methods to adversarial attacks by introducing an adaptive audio watermark attack method (AWM). AWM employs a two-stage optimization process that first ensures the success of the attack and then enhances audio quality, effectively evading detection by estimating normal distribution parameters from limited audio samples. The evaluation demonstrates that AWM successfully bypasses state-of-the-art detection methods, achieving detection rates below 10% for replacement and creation, and 0% for removal across multiple datasets.
AWM can evade detection by state-of-the-art audio watermarking defenses, achieving near-perfect stealth with detection rates as low as 0%.
Advances in generative audio have intensified copyright concerns, making audio watermarking increasingly important for asserting ownership. However, existing audio watermarking methods are vulnerable to adversarial attacks. We find that watermark decoder message probabilities follow normal distributions, a property exploited by defenses to detect manipulations. This paper introduces an adaptive audio watermark attack method (AWM) designed to bypass existing defense strategies. AWM uses a two-stage optimization: the first stage ensures attack success, while the second improves audio quality. To evade detection, it estimates normal distribution parameters from limited samples of the target audio, and then adaptively steers decoded probabilities back into the estimated range. Evaluated on two watermarking methods across three voice datasets, AWM achieves high success while bypassing state-of-the-art detectors: detection rates are below 10% for replacement and creation, and 0% for removal.
