CloneShield:

A Framework for Universal Perturbation Against Zero-Shot Voice Cloning

Anonymity

Abstract:

Recent breakthroughs in text-to-speech (TTS) voice cloning have raised serious privacy concerns, allowing highly accurate vocal identity replication from just a few seconds of reference audio, while retaining the speaker’s vocal authenticity. In this paper, we introduce CloneShield, a universal time-domain adversarial perturbation framework specifically designed to defend against zero-shot voice cloning. Our method provides protection that is robust across speakers and utterances, without requiring any prior knowledge of the synthesized text. We formulate perturbation generation as a multi-objective optimization problem, and propose Multi-Gradient Descent Algorithm (MGDA) to ensure the robust protection across diverse ut terances. To preserve natural auditory perception for users, we decompose the adversarial perturbation via Mel-spectrogram representations and fine-tune it for each sample. This design ensures imperceptibility while maintaining strong degra dation effects on zero-shot cloned outputs. Experiments on three state-of-the-art zero-shot TTS systems, five benchmark datasets and evaluations from 60 human listeners demonstrate that our method preserves near-original audio quality in protected inputs (PESQ = 3.90, SRS = 0.93) while substantially degrading both speaker similarity and speech quality in cloned samples (PESQ = 1.07, SRS = 0.08). The source code is available at https://github.com/.......

CloneShield Workflow

CloneShield Framework Diagram

Figure 1: Overview of our CLONESHIELD framework.

We inject imperceptible perturbations to disrupt the unauthorized voice replication. The system consists of ❶Universal protective perturbation generation via multi-objective optimization. ❷Perceptual-frequency domain refinement/fine-tune using mel-spectrogram decomposition. ❸Real-world deployment scenarios showcasing how the perturbation thwarts unauthorized voice replication.

Original and Protected Speech

These samples are undefended and protected samples from LibriTTS dataset of speaker 4446, LibriSpeech dataset of speaker 458 and CommonVoice dataset of speaker 38024670, respectively.

Method Sample 1 Sample 2 Sample 3
Original
Protected Voicebox
AudioSeal
Timbre Watermarking
CloneShield(YourTTS)
CloneShield(XTTSv2)
CloneShield(IndexTTS)

Synthesized Speech based on Zero-shot

These are synthesized speech from advanced zero-shot TTS models.

Models Method Sample 1 Sample 2 Sample 3
YourTTS clean
CloneShield
Voicebox
AudioSeal
Timbre Watermarking
XTTSv2 clean
CloneShield
Voicebox
AudioSeal
Timbre Watermarking
IndexTTS clean
CloneShield
Voicebox
AudioSeal
Timbre Watermarking