AWARE: Audio Watermarking with Adversarial Resistance to Edits
By: Kosta Pavlović , Lazar Stanarević , Petar Nedić and more
Potential Business Impact:
Protects music from being copied without permission.
Prevailing practice in learning-based audio watermarking is to pursue robustness by expanding the set of simulated distortions during training. However, such surrogates are narrow and prone to overfitting. This paper presents AWARE (Audio Watermarking with Adversarial Resistance to Edits), an alternative approach that avoids reliance on attack-simulation stacks and handcrafted differentiable distortions. Embedding is obtained via adversarial optimization in the time-frequency domain under a level-proportional perceptual budget. Detection employs a time-order-agnostic detector with a Bitwise Readout Head (BRH) that aggregates temporal evidence into one score per watermark bit, enabling reliable watermark decoding even under desynchronization and temporal cuts. Empirically, AWARE attains high audio quality and speech intelligibility (PESQ/STOI) and consistently low BER across various audio edits, often surpassing representative state-of-the-art learning-based audio watermarking systems.
Similar Papers
Protecting Your Voice: Temporal-aware Robust Watermarking
Cryptography and Security
Makes fake voices sound real, but still detectable.
The Impact of Audio Watermarking on Audio Anti-Spoofing Countermeasures
Machine Learning (CS)
Makes voice security systems work better with hidden messages.
HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removal
Sound
Removes hidden marks from fake voices.