Trim card
Browse files
README.md
CHANGED
|
@@ -77,18 +77,13 @@ unseen in training come from the same system at **6.17% EER**.
|
|
| 77 |
| SpoofRadar v1.0, 16 sets: pooled / mean EER | **4.04 / 1.65%** | 4.23 / 3.76% |
|
| 78 |
| Same-generator EER, MLAAD unseen models / unseen architectures | **6.17 / 15.00%** | 13.80 / 20.25% |
|
| 79 |
| Generator identification (MLAAD) / recording condition | **96.8 / 81.3%** | 95.4 / 75.9% |
|
| 80 |
-
| Acoustic model under an unseen vocoder (SpoofCeleb) | 69.8% | **84.7%** |
|
| 81 |
-
| One-step answer on partial fakes, HAD / PartialSpoof | 48.4 / 80.0% (reasoning: 97.6 / 89.2%) | **99.0 / 90.2%** |
|
| 82 |
-
| Genuine speech in languages unseen in training (XMAD-Bench) | scores shift towards *spoof* (see below) | **stable** |
|
| 83 |
|
| 84 |
**Use Plus** for detection and source verification on speech like the public benchmarks: it is better on 9 of the 14
|
| 85 |
-
Arena sets and on 10 of 11 source-verification sets, and much better on codec-based and recent generators.
|
| 86 |
-
partially edited recordings,
|
| 87 |
|
| 88 |
**Use Base** when you need a model trained on official training splits only (controlled comparisons, no training
|
| 89 |
-
data from Fake-or-Real, ADD or Codecfake)
|
| 90 |
-
attribution under an unseen vocoder, or for genuine speech in languages and domains far from the training data
|
| 91 |
-
without a domain-specific threshold.
|
| 92 |
|
| 93 |
## Model
|
| 94 |
|
|
@@ -165,9 +160,7 @@ The package reproduces the evaluation: on 400 recordings of SpoofCeleb (evaluati
|
|
| 165 |
original files, its scores correlate 0.9996 with the scores behind the tables below and give the same decision on
|
| 166 |
every recording (score differences up to 1.75 on a scale of ±20 come from bf16 arithmetic and batching).
|
| 167 |
|
| 168 |
-
**Threshold.** The label uses threshold 0 on the score.
|
| 169 |
-
languages, other recording chains) can shift towards *spoof* (see Limitations); for a new domain, set the threshold on
|
| 170 |
-
genuine speech of that domain. The demo maps the score to a probability calibrated on development data:
|
| 171 |
P(spoof) = sigmoid(0.930 · score − 0.872).
|
| 172 |
|
| 173 |
### Faster reasoning with vLLM
|
|
@@ -223,9 +216,8 @@ Every line of the official protocols ([speech_df_arena](https://github.com/Speec
|
|
| 223 |
| **Average** | | **1.79** | 97.73 | 4.28 |
|
| 224 |
| **Pooled** | 2,341,286 | **2.14** | | 4.43 |
|
| 225 |
|
| 226 |
-
From Base to Plus, 9 of the 14 sets improve
|
| 227 |
-
|
| 228 |
-
ASVspoof 5 shrinks from half of the training data to 8 of 211 balanced sources.
|
| 229 |
|
| 230 |
### Compared with the leaderboard
|
| 231 |
|
|
@@ -263,11 +255,6 @@ leaderboard (v1.0); ours computed with the same protocol files.
|
|
| 263 |
| DF Arena 500M V1 | Open-weight | 9.96 | 90.04 | 87.08 | 5.19 | 0.96 | 0.08 |
|
| 264 |
| GRL | Open-weight | 13.25 | 86.75 | 83.17 | 9.90 | 1.64 | 1.77 |
|
| 265 |
|
| 266 |
-
For Plus the pooled EER is far above the mean of its set EERs because one threshold does not fit every set: at the
|
| 267 |
-
pooled threshold, 92.9% of the genuine Russian audiobook recordings of XMAD-Bench (and 32.2 / 15.4% of the Spanish /
|
| 268 |
-
Arabic ones) are judged spoofed, although within each language the two classes are separated at ≤ 1.95% EER. Base
|
| 269 |
-
misclassifies at most 3.1% of the genuine recordings of any language.
|
| 270 |
-
|
| 271 |
### Beyond detection
|
| 272 |
|
| 273 |
Our released protocol ([VeriSpoof-Bench](https://huggingface.co/datasets/AustinXiao/VeriSpoof-Bench)); up to 10,000
|
|
@@ -293,31 +280,6 @@ trials per set, reasoning on 500 recordings per set.
|
|
| 293 |
| Source-verification reasoning, verdict EER (SpoofCeleb / STOPA / CoSG / LA19 cond.) | **18.40** / 14.35 / 21.80 / **24.55%** | 20.20 / **13.65 / 21.60** / 29.65% |
|
| 294 |
| Source-verification reasoning, accuracy on REVERSAL pairs (different systems, same attribute classes) | **0.75** | 0.42 |
|
| 295 |
|
| 296 |
-
## Limitations and disclosure
|
| 297 |
-
|
| 298 |
-
- **Overlap with the Arena sets.** Arena's LibriSeVoc set is the whole corpus, which includes the LibriSeVoc training
|
| 299 |
-
split we trained on (our EER 0.02 does not change the rank). For Fake-or-Real, ADD and Codecfake we trained on their
|
| 300 |
-
training splits; the Arena uses their test splits. Base has no training data from Fake-or-Real, ADD or Codecfake.
|
| 301 |
-
- **Model selection.** In an earlier development round, the choice of augmentation looked at ASVspoof 5 evaluation
|
| 302 |
-
results by attack.
|
| 303 |
-
- **Comparison with a snapshot.** The leaderboard has not accepted submissions since 14 Apr 2026; the ranking above is
|
| 304 |
-
ours, computed with the board's pooled-EER rule, not an official entry.
|
| 305 |
-
- **Weak sets.** ADD 2022 track 1 (8.65), ASVspoof 2021 LA (3.44) and ASVspoof 5 (3.40, worse than Base's 2.59); also
|
| 306 |
-
worse than Base on In-the-Wild (1.90 vs 1.20) and ASVspoof 2021 DF (1.24 vs 0.97).
|
| 307 |
-
- **Calibration on unseen languages and domains.** The added data shift Plus's scores on genuine speech it was not
|
| 308 |
-
trained on (XMAD-Bench, above) without making the classes less separable. Set the threshold on genuine speech of
|
| 309 |
-
the target domain, or compare with Base.
|
| 310 |
-
- **One-step answer on partial fakes.** The one-step answer is near chance on HAD (48.4%) and 80.0% on PartialSpoof;
|
| 311 |
-
the decision after reasoning reaches 97.6% and 89.2%. Use `explain()` when partial edits are possible.
|
| 312 |
-
- **Acoustic-model attribution** under a vocoder unseen in training is weaker than Base (69.8 vs 84.7%).
|
| 313 |
-
- **Fixed window.** Only the first 8 s are heard; partial spoofs later in long recordings are missed (the demo slides
|
| 314 |
-
the window over the first 60 s).
|
| 315 |
-
- **Reasoning** uses fixed line templates; observations are coarse classes (bandwidth class accuracy 64–91%). The
|
| 316 |
-
localization line names the right kind of recording (bona fide, whole spoof or partial spoof) on 84% of ASVspoof 2019
|
| 317 |
-
LA recordings (Base: 85%); some whole-utterance spoofs are described as partly synthesized, while the decision stays
|
| 318 |
-
correct (99.0%).
|
| 319 |
-
- Single training seed.
|
| 320 |
-
|
| 321 |
## Intended use
|
| 322 |
|
| 323 |
Research on audio deepfake detection, source tracing and explainable forensics. Not intended as the only basis for
|
|
|
|
| 77 |
| SpoofRadar v1.0, 16 sets: pooled / mean EER | **4.04 / 1.65%** | 4.23 / 3.76% |
|
| 78 |
| Same-generator EER, MLAAD unseen models / unseen architectures | **6.17 / 15.00%** | 13.80 / 20.25% |
|
| 79 |
| Generator identification (MLAAD) / recording condition | **96.8 / 81.3%** | 95.4 / 75.9% |
|
|
|
|
|
|
|
|
|
|
| 80 |
|
| 81 |
**Use Plus** for detection and source verification on speech like the public benchmarks: it is better on 9 of the 14
|
| 82 |
+
Arena sets and on 10 of 11 source-verification sets, and much better on codec-based and recent generators. On
|
| 83 |
+
partially edited recordings, `explain()` gives the decision after reasoning (97.6% on HAD, 89.2% on PartialSpoof).
|
| 84 |
|
| 85 |
**Use Base** when you need a model trained on official training splits only (controlled comparisons, no training
|
| 86 |
+
data from Fake-or-Real, ADD or Codecfake).
|
|
|
|
|
|
|
| 87 |
|
| 88 |
## Model
|
| 89 |
|
|
|
|
| 160 |
original files, its scores correlate 0.9996 with the scores behind the tables below and give the same decision on
|
| 161 |
every recording (score differences up to 1.75 on a scale of ±20 come from bf16 arithmetic and batching).
|
| 162 |
|
| 163 |
+
**Threshold.** The label uses threshold 0 on the score. The demo maps the score to a probability calibrated on development data:
|
|
|
|
|
|
|
| 164 |
P(spoof) = sigmoid(0.930 · score − 0.872).
|
| 165 |
|
| 166 |
### Faster reasoning with vLLM
|
|
|
|
| 216 |
| **Average** | | **1.79** | 97.73 | 4.28 |
|
| 217 |
| **Pooled** | 2,341,286 | **2.14** | | 4.43 |
|
| 218 |
|
| 219 |
+
From Base to Plus, 9 of the 14 sets improve, most where Plus added training data of the same corpus (Codecfake,
|
| 220 |
+
Fake-or-Real, ADD).
|
|
|
|
| 221 |
|
| 222 |
### Compared with the leaderboard
|
| 223 |
|
|
|
|
| 255 |
| DF Arena 500M V1 | Open-weight | 9.96 | 90.04 | 87.08 | 5.19 | 0.96 | 0.08 |
|
| 256 |
| GRL | Open-weight | 13.25 | 86.75 | 83.17 | 9.90 | 1.64 | 1.77 |
|
| 257 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 258 |
### Beyond detection
|
| 259 |
|
| 260 |
Our released protocol ([VeriSpoof-Bench](https://huggingface.co/datasets/AustinXiao/VeriSpoof-Bench)); up to 10,000
|
|
|
|
| 280 |
| Source-verification reasoning, verdict EER (SpoofCeleb / STOPA / CoSG / LA19 cond.) | **18.40** / 14.35 / 21.80 / **24.55%** | 20.20 / **13.65 / 21.60** / 29.65% |
|
| 281 |
| Source-verification reasoning, accuracy on REVERSAL pairs (different systems, same attribute classes) | **0.75** | 0.42 |
|
| 282 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 283 |
## Intended use
|
| 284 |
|
| 285 |
Research on audio deepfake detection, source tracing and explainable forensics. Not intended as the only basis for
|