Hearing the Whispers: Black-Box Membership Inference Attacks on Finetuned TTS Models
📄 复述一句就能听出你来过:微调语音如何记住嗓音与录音 英文题目:Hearing the Whispers: Black-Box Membership Inference Attacks on Finetuned TTS Models 一句话:论文把双条件查询与变长波形比较形式化为可评分范围与记忆诱发两条准则,用朗读查询加声纹与多层 WavLM 加动态规整的解耦表征实现说话人与记录两级审计,在三模型两数据集上达到 0.80 以上 AUC 而代价是记录级需影子模型与十次重复查询。 标签:#语音合成 | #生成模型 | #说话人验证 | #自监督学习 评分:7.5/10 | 创新 1.7/2 | 技术严谨 1.2/1.5 | 实验充分 1.3/1.5 | 清晰度 0.8/1 | 影响力 1.2/1.5 | 开源 0/1.5 | 可复现 0.3/0.5 | 工程/实践 1/1.5 👥 作者与机构 Kunlin Cai:University of California, Los Angeles University of Tennessee, Knoxville Equal contribution. Kaiyuan Zhang:University of California, Los Angeles University of Tennessee, Knoxville Equal contribution. Zihang Xiang:University of California, Los Angeles University of Tennessee, Knoxville Equal contribution. Jinghuai Zhang:University of California, Los Angeles University of Tennessee, Knoxville Equal contribution. Abeer Alwan:University of California, Los Angeles University of Tennessee, Knoxville Equal contribution. Fnu Suya:University of California, Los Angeles University of Tennessee, Knoxville Equal contribution. Yuan Tian:University of California, Los Angeles University of Tennessee, Knoxville Equal contribution. 💬 毒舌点评 把文本加参考语音双条件查询空间形式化并用可评分范围与记忆诱发解释朗读查询最强,表征上说话人级走全局声纹、记录级走多层帧特征加动态时间规整的解耦切中语音变长连续痛点。短板是记录级依赖同架构影子模型训练的轻量长短期记忆网络判别器,跨架构迁移未验证,防御评估停留在早停、输入扰动和差分隐私随机梯度下降的粗粒度尝试。 ...