Evaluating Voice Conversion-based Privacy Protection against Informed Attackers

Brij Mohan Lal Srivastava 1, 2 Nathalie Vauquier 1 Md Sahidullah 2 Aurélien Bellet 1 Marc Tommasi 1 Emmanuel Vincent 2
1 MAGNET - Machine Learning in Information Networks
Inria Lille - Nord Europe, CRIStAL - Centre de Recherche en Informatique, Signal et Automatique de Lille (CRIStAL) - UMR 9189
2 MULTISPEECH - Speech Modeling for Facilitating Oral-Based Communication
Inria Nancy - Grand Est, LORIA - NLPKD - Department of Natural Language Processing & Knowledge Discovery
Abstract : Speech signals are a rich source of speaker-related information including sensitive attributes like identity or accent. With a small amount of found speech data, such attributes can be extracted and modeled for malicious purposes like voice cloning, spoofing, etc. In this paper, we investigate speaker anonymization strategies based on voice conversion. In contrast to prior evaluations, we argue that different types of attackers can be defined depending on the extent of their knowledge about the conversion scheme. We compare two frequency warping-based conversion methods and a deep learning based method in three attack scenarios. The utility of the converted speech is measured through the word error rate achieved by automatic speech recognition, while privacy protection is assessed by state-of-the-art speaker verification techniques (i-vectors and x-vectors). Our results show that voice conversion schemes are unable to effectively protect against an attacker that has extensive knowledge of the type of conversion and how it has been applied, but may provide some protection against less knowledgeable attackers.
Complete list of metadatas

Cited literature [22 references]  Display  Hide  Download

Contributor : Brij Mohan Lal Srivastava <>
Submitted on : Friday, November 8, 2019 - 10:00:36 AM
Last modification on : Tuesday, November 19, 2019 - 6:06:28 PM


Files produced by the author(s)


  • HAL Id : hal-02355115, version 1


Brij Mohan Lal Srivastava, Nathalie Vauquier, Md Sahidullah, Aurélien Bellet, Marc Tommasi, et al.. Evaluating Voice Conversion-based Privacy Protection against Informed Attackers. 2019. ⟨hal-02355115⟩



Record views


Files downloads