Recent breakthroughs in text-to-speech (TTS) voice cloning have raised serious privacy concerns, allowing highly accurate vocal identity replication from just a few seconds of reference audio, while retaining the speaker’s vocal authenticity. In this paper, we introduce CloneShield, a universal time-domain adversarial perturbation framework specifically designed to defend against zero-shot voice cloning. Our method provides protection that is robust across speakers and utterances, without requiring any prior knowledge of the synthesized text. We formulate perturbation generation as a multi-objective optimization problem, and propose Multi-Gradient Descent Algorithm (MGDA) to ensure the robust protection across diverse ut terances. To preserve natural auditory perception for users, we decompose the adversarial perturbation via Mel-spectrogram representations and fine-tune it for each sample. This design ensures imperceptibility while maintaining strong degra dation effects on zero-shot cloned outputs. Experiments on three state-of-the-art zero-shot TTS systems, five benchmark datasets and evaluations from 60 human listeners demonstrate that our method preserves near-original audio quality in protected inputs (PESQ = 3.90, SRS = 0.93) while substantially degrading both speaker similarity and speech quality in cloned samples (PESQ = 1.07, SRS = 0.08). The source code is available at https://github.com/.......
We inject imperceptible perturbations to disrupt the unauthorized voice replication. The system consists of ❶Universal protective perturbation generation via multi-objective optimization. ❷Perceptual-frequency domain refinement/fine-tune using mel-spectrogram decomposition. ❸Real-world deployment scenarios showcasing how the perturbation thwarts unauthorized voice replication.
These samples are undefended and protected samples from LibriTTS dataset of speaker 4446, LibriSpeech dataset of speaker 458 and CommonVoice dataset of speaker 38024670, respectively.
| Method | Sample 1 | Sample 2 | Sample 3 | |
|---|---|---|---|---|
| Original | ||||
| Protected | Voicebox | |||
| AudioSeal | ||||
| Timbre Watermarking | ||||
| CloneShield(YourTTS) | ||||
| CloneShield(XTTSv2) | ||||
| CloneShield(IndexTTS) |
These are synthesized speech from advanced zero-shot TTS models.
| Models | Method | Sample 1 | Sample 2 | Sample 3 |
|---|---|---|---|---|
| YourTTS | clean | |||
| CloneShield | ||||
| Voicebox | ||||
| AudioSeal | ||||
| Timbre Watermarking | ||||
| XTTSv2 | clean | |||
| CloneShield | ||||
| Voicebox | ||||
| AudioSeal | ||||
| Timbre Watermarking | ||||
| IndexTTS | clean | |||
| CloneShield | ||||
| Voicebox | ||||
| AudioSeal | ||||
| Timbre Watermarking |