Search papers, labs, and topics across Lattice.
This study introduces a novel approach to evaluate the fragility of neural audio watermarks by employing training-free structural probes that identify watermark locations within audio signals. By applying a targeted attack based on these probes, the authors demonstrate that certain watermarking schemes can be easily compromised, while others exhibit significant resilience against removal attempts. The findings reveal a stark contrast in the robustness of different watermarking techniques, with magnitude and carrier-domain watermarks being particularly vulnerable to a single, domain-matched attack, achieving high quality in the process.
Targeted structural probes reveal that some neural audio watermarks can be erased with a single attack, while others remain impervious, highlighting a critical divide in watermarking effectiveness.
Neural audio watermarks are increasingly used to attribute and detect AI-generated speech, so their practical value rests on how cheaply an adversary can remove them. Robustness is usually measured by running a fixed battery of distortions blindly against every scheme. We instead make removal diagnostic: from a few clean/watermarked pairs we compute cheap structural probes that reveal where a watermark sits in the signal (its embedding domain), then apply a single domain-matched attack rather than a blind sweep. We further summarize each scheme with one threshold-free fragility score, the area under its accuracy-versus-quality trade-off, which an accuracy-only benchmark cannot provide. Across ten watermarking schemes the probes separate fragile from robust marks: for magnitude and carrier-domain watermarks a single matched attack erases the payload (WavMark, SilentCipher, audiowmark) or removes the detection flag (AudioSeal) at high objective quality (PESQ>= 3.6), whereas latent-domain marks (VoiceMark, WMCodec, AlignMark, AWARE) resist every training-free attack we apply. The same pair-only probe signatures also identify which watermarking scheme is present (84% over ten schemes).
