DeMark: A Query-Free Black-Box Attack for Quality-Preserving Audio Watermark Removal

arXiv:2609.34003 · cs.CR · Submitted 2026-09-27 · Read on arXiv

cs.CR

Submitted: 2026-09-27

Updated: 2026-09-27

Terminology

• Speech Enhancement — 33× in this paper
• Signal Processing — 9× in this paper
• Robustness — 7× in this paper · explained in 5 episodes
• Attack Success Rate — 4× in this paper
• Generative Model — 4× in this paper · explained in 2 episodes
• Generative Models — 4× in this paper · explained in 3 episodes
• Diffusion Model — 3× in this paper · explained in 8 episodes
• Generalization — 3× in this paper · explained in 13 episodes
• Ablation — 2× in this paper · explained in 1 episode
• Attack Success Rate (ASR) — 2× in this paper · explained in 2 episodes
• Verification — 2× in this paper · explained in 2 episodes
• Ablation Studies — 1× in this paper · explained in 1 episode
• Ablation study — 1× in this paper · explained in 1 episode
• Adversarial Attacks — 1× in this paper · explained in 1 episode
• Benchmarking — 1× in this paper · explained in 4 episodes
• Computational Biology — 1× in this paper · explained in 2 episodes
• Embeddings — 1× in this paper · explained in 2 episodes
• Provenance — 1× in this paper · explained in 4 episodes
• Two-Stage Framework — 1× in this paper · explained in 2 episodes
• Two-Stage Optimization — 1× in this paper · explained in 2 episodes
• alpha — 1× in this paper · explained in 1 episode

Sources

• WavMark: Watermarking for Audio Generation
• Learning to Evade: Adaptive Attacks on Audio Watermarking
• MetricGAN+: An Improved Version of MetricGAN for Speech Enhancement
• BigVGAN: A Universal Neural Vocoder with Large-Scale Training
• HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removal
• Detecting Voice Cloning Attacks via Timbre Watermarking
• MP-SENet: A Speech Enhancement Model with Parallel Denoising of Magnitude and Phase Spectra
• NISQA: A Deep CNN-Self-Attention Model for Multidimensional Speech Quality Prediction with Crowdsourced Datasets
• Deep Audio Watermarks are Shallow: Limitations of Post-Hoc Watermarking Techniques for Speech
• A Comprehensive Real-World Assessment of Audio Watermarking Algorithms: Will They Survive Neural Codecs?
• Self Voice Conversion as an Attack against Neural Audio Watermarking
• SEGAN: Speech Enhancement Generative Adversarial Network
• EARS: An Anechoic Fullband Speech Dataset Benchmarked for Speech Enhancement and Dereverberation
• Proactive Detection of Voice Cloning with Localized Watermarking
• UTMOS: UTokyo-SaruLab System for VoiceMOS Challenge 2022
• Diffiner: A Versatile Diffusion-based Generative Refiner for Speech Enhancement
• SoK: How Robust is Audio Watermarking in Generative AI models?
• Audio Pirates: Black-box Audio Watermark Removal via Diffusion Priors

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs