AustinXiao commited on
Commit
8090288
·
verified ·
1 Parent(s): 036246f

Trim card

Browse files
Files changed (1) hide show
  1. README.md +6 -44
README.md CHANGED
@@ -77,18 +77,13 @@ unseen in training come from the same system at **6.17% EER**.
77
  | SpoofRadar v1.0, 16 sets: pooled / mean EER | **4.04 / 1.65%** | 4.23 / 3.76% |
78
  | Same-generator EER, MLAAD unseen models / unseen architectures | **6.17 / 15.00%** | 13.80 / 20.25% |
79
  | Generator identification (MLAAD) / recording condition | **96.8 / 81.3%** | 95.4 / 75.9% |
80
- | Acoustic model under an unseen vocoder (SpoofCeleb) | 69.8% | **84.7%** |
81
- | One-step answer on partial fakes, HAD / PartialSpoof | 48.4 / 80.0% (reasoning: 97.6 / 89.2%) | **99.0 / 90.2%** |
82
- | Genuine speech in languages unseen in training (XMAD-Bench) | scores shift towards *spoof* (see below) | **stable** |
83
 
84
  **Use Plus** for detection and source verification on speech like the public benchmarks: it is better on 9 of the 14
85
- Arena sets and on 10 of 11 source-verification sets, and much better on codec-based and recent generators. For
86
- partially edited recordings, use `explain()` rather than the one-step `detect()` score.
87
 
88
  **Use Base** when you need a model trained on official training splits only (controlled comparisons, no training
89
- data from Fake-or-Real, ADD or Codecfake), when you rely on the one-step score for partial edits, for acoustic-model
90
- attribution under an unseen vocoder, or for genuine speech in languages and domains far from the training data
91
- without a domain-specific threshold.
92
 
93
  ## Model
94
 
@@ -165,9 +160,7 @@ The package reproduces the evaluation: on 400 recordings of SpoofCeleb (evaluati
165
  original files, its scores correlate 0.9996 with the scores behind the tables below and give the same decision on
166
  every recording (score differences up to 1.75 on a scale of ±20 come from bf16 arithmetic and batching).
167
 
168
- **Threshold.** The label uses threshold 0 on the score. Scores of genuine speech far from the training data (other
169
- languages, other recording chains) can shift towards *spoof* (see Limitations); for a new domain, set the threshold on
170
- genuine speech of that domain. The demo maps the score to a probability calibrated on development data:
171
  P(spoof) = sigmoid(0.930 · score − 0.872).
172
 
173
  ### Faster reasoning with vLLM
@@ -223,9 +216,8 @@ Every line of the official protocols ([speech_df_arena](https://github.com/Speec
223
  | **Average** | | **1.79** | 97.73 | 4.28 |
224
  | **Pooled** | 2,341,286 | **2.14** | | 4.43 |
225
 
226
- From Base to Plus, 9 of the 14 sets improve and 3 get worse. Gains are largest where Plus added training data of the
227
- same corpus (Codecfake, Fake-or-Real, ADD); losses are on ASVspoof 5, ASVspoof 2021 DF and In-the-Wild, where
228
- ASVspoof 5 shrinks from half of the training data to 8 of 211 balanced sources.
229
 
230
  ### Compared with the leaderboard
231
 
@@ -263,11 +255,6 @@ leaderboard (v1.0); ours computed with the same protocol files.
263
  | DF Arena 500M V1 | Open-weight | 9.96 | 90.04 | 87.08 | 5.19 | 0.96 | 0.08 |
264
  | GRL | Open-weight | 13.25 | 86.75 | 83.17 | 9.90 | 1.64 | 1.77 |
265
 
266
- For Plus the pooled EER is far above the mean of its set EERs because one threshold does not fit every set: at the
267
- pooled threshold, 92.9% of the genuine Russian audiobook recordings of XMAD-Bench (and 32.2 / 15.4% of the Spanish /
268
- Arabic ones) are judged spoofed, although within each language the two classes are separated at ≤ 1.95% EER. Base
269
- misclassifies at most 3.1% of the genuine recordings of any language.
270
-
271
  ### Beyond detection
272
 
273
  Our released protocol ([VeriSpoof-Bench](https://huggingface.co/datasets/AustinXiao/VeriSpoof-Bench)); up to 10,000
@@ -293,31 +280,6 @@ trials per set, reasoning on 500 recordings per set.
293
  | Source-verification reasoning, verdict EER (SpoofCeleb / STOPA / CoSG / LA19 cond.) | **18.40** / 14.35 / 21.80 / **24.55%** | 20.20 / **13.65 / 21.60** / 29.65% |
294
  | Source-verification reasoning, accuracy on REVERSAL pairs (different systems, same attribute classes) | **0.75** | 0.42 |
295
 
296
- ## Limitations and disclosure
297
-
298
- - **Overlap with the Arena sets.** Arena's LibriSeVoc set is the whole corpus, which includes the LibriSeVoc training
299
- split we trained on (our EER 0.02 does not change the rank). For Fake-or-Real, ADD and Codecfake we trained on their
300
- training splits; the Arena uses their test splits. Base has no training data from Fake-or-Real, ADD or Codecfake.
301
- - **Model selection.** In an earlier development round, the choice of augmentation looked at ASVspoof 5 evaluation
302
- results by attack.
303
- - **Comparison with a snapshot.** The leaderboard has not accepted submissions since 14 Apr 2026; the ranking above is
304
- ours, computed with the board's pooled-EER rule, not an official entry.
305
- - **Weak sets.** ADD 2022 track 1 (8.65), ASVspoof 2021 LA (3.44) and ASVspoof 5 (3.40, worse than Base's 2.59); also
306
- worse than Base on In-the-Wild (1.90 vs 1.20) and ASVspoof 2021 DF (1.24 vs 0.97).
307
- - **Calibration on unseen languages and domains.** The added data shift Plus's scores on genuine speech it was not
308
- trained on (XMAD-Bench, above) without making the classes less separable. Set the threshold on genuine speech of
309
- the target domain, or compare with Base.
310
- - **One-step answer on partial fakes.** The one-step answer is near chance on HAD (48.4%) and 80.0% on PartialSpoof;
311
- the decision after reasoning reaches 97.6% and 89.2%. Use `explain()` when partial edits are possible.
312
- - **Acoustic-model attribution** under a vocoder unseen in training is weaker than Base (69.8 vs 84.7%).
313
- - **Fixed window.** Only the first 8 s are heard; partial spoofs later in long recordings are missed (the demo slides
314
- the window over the first 60 s).
315
- - **Reasoning** uses fixed line templates; observations are coarse classes (bandwidth class accuracy 64–91%). The
316
- localization line names the right kind of recording (bona fide, whole spoof or partial spoof) on 84% of ASVspoof 2019
317
- LA recordings (Base: 85%); some whole-utterance spoofs are described as partly synthesized, while the decision stays
318
- correct (99.0%).
319
- - Single training seed.
320
-
321
  ## Intended use
322
 
323
  Research on audio deepfake detection, source tracing and explainable forensics. Not intended as the only basis for
 
77
  | SpoofRadar v1.0, 16 sets: pooled / mean EER | **4.04 / 1.65%** | 4.23 / 3.76% |
78
  | Same-generator EER, MLAAD unseen models / unseen architectures | **6.17 / 15.00%** | 13.80 / 20.25% |
79
  | Generator identification (MLAAD) / recording condition | **96.8 / 81.3%** | 95.4 / 75.9% |
 
 
 
80
 
81
  **Use Plus** for detection and source verification on speech like the public benchmarks: it is better on 9 of the 14
82
+ Arena sets and on 10 of 11 source-verification sets, and much better on codec-based and recent generators. On
83
+ partially edited recordings, `explain()` gives the decision after reasoning (97.6% on HAD, 89.2% on PartialSpoof).
84
 
85
  **Use Base** when you need a model trained on official training splits only (controlled comparisons, no training
86
+ data from Fake-or-Real, ADD or Codecfake).
 
 
87
 
88
  ## Model
89
 
 
160
  original files, its scores correlate 0.9996 with the scores behind the tables below and give the same decision on
161
  every recording (score differences up to 1.75 on a scale of ±20 come from bf16 arithmetic and batching).
162
 
163
+ **Threshold.** The label uses threshold 0 on the score. The demo maps the score to a probability calibrated on development data:
 
 
164
  P(spoof) = sigmoid(0.930 · score − 0.872).
165
 
166
  ### Faster reasoning with vLLM
 
216
  | **Average** | | **1.79** | 97.73 | 4.28 |
217
  | **Pooled** | 2,341,286 | **2.14** | | 4.43 |
218
 
219
+ From Base to Plus, 9 of the 14 sets improve, most where Plus added training data of the same corpus (Codecfake,
220
+ Fake-or-Real, ADD).
 
221
 
222
  ### Compared with the leaderboard
223
 
 
255
  | DF Arena 500M V1 | Open-weight | 9.96 | 90.04 | 87.08 | 5.19 | 0.96 | 0.08 |
256
  | GRL | Open-weight | 13.25 | 86.75 | 83.17 | 9.90 | 1.64 | 1.77 |
257
 
 
 
 
 
 
258
  ### Beyond detection
259
 
260
  Our released protocol ([VeriSpoof-Bench](https://huggingface.co/datasets/AustinXiao/VeriSpoof-Bench)); up to 10,000
 
280
  | Source-verification reasoning, verdict EER (SpoofCeleb / STOPA / CoSG / LA19 cond.) | **18.40** / 14.35 / 21.80 / **24.55%** | 20.20 / **13.65 / 21.60** / 29.65% |
281
  | Source-verification reasoning, accuracy on REVERSAL pairs (different systems, same attribute classes) | **0.75** | 0.42 |
282
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
283
  ## Intended use
284
 
285
  Research on audio deepfake detection, source tracing and explainable forensics. Not intended as the only basis for