ASVspoof 2019: Future Horizons in Spoofed and Fake Audio Detection
Open accessAbstract
ASVspoof, now in its third edition, is a series of community-led challenges which promote the development of countermeasures to protect automatic speaker verification (ASV) from the threat of spoofing. Advances in the 2019 edition include: (i) a consideration of both logical access (LA) and physical access (PA) scenarios and the three major forms of spoofing attack, namely synthetic, converted and replayed speech; (ii) spoofing attacks generated with state-of-the-art neural acoustic and waveform models; (iii) an improved, controlled simulation of replay attacks; (iv) use of the tandem detection cost function (t-DCF) that reflects the impact of both spoofing and countermeasures upon ASV reliability. Even if ASV remains the core focus, in retaining the equal error rate (EER) as a secondary metric, ASYspoof also embraces the growing importance of fake audio detection. ASVspoof 2019 attracted the participation of 63 research teams, with more than half of these reporting systems that improve upon the performance of two baseline spoofing countermeasures. This paper describes the 2019 database, protocols and challenge results. It also outlines major findings which demonstrate the real progress made in protecting against the threat of spoofing and fake audio.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Attack Agnostic Dataset is a combination of two DeepFake datasets (FakeAVCeleb and WaveFake) and one spoofing dataset (ASVspoof 2019 LA subset).
“It is a combination of two DeepFake datasets - FakeAVCeleb [14] and WaveFake [18], and one dataset originally prepared for spoofing detection ASVspoof 2019 LA subset [19].”
From Attack Agnostic Dataset: Towards Generalization and Stabilization of Audio DeepFake Detection (2022) · cites this paper as [19]
Cited by
Sorted by citations
Deep learning for deepfakes creation and detection: A survey
Nguyen, T. T., Nguyen, Q. V. H., Nguyen, D. T., Nguyen, D. T., Huynh-The, T., Nahavandi, S., Nguyen, T. T., Pham, Q.-V., & Nguyen, C. M. (2022) · Computer Vision and Image Understanding · doi:10.1016/j.cviu.2022.103525 · Cited by 464 · see citing works
Does Audio Deepfake Detection Generalize?
Müller, N., Czempin, P., Diekmann, F., Froghyar, A., & Böttinger, K. (2022) · Interspeech 2022 · doi:10.21437/interspeech.2022-108 · Cited by 258 · see citing works
A Review of Modern Audio Deepfake Detection Methods: Challenges and Future Directions
Almutairi, Z., & Elgibreen, H. (2022) · Algorithms · doi:10.3390/a15050155 · Cited by 187 · see citing works
Evaluation of an Audio-Video Multimodal Deepfake Dataset using Unimodal and Multimodal Detectors
Khalid, H., Kim, M., Tariq, S., & Woo, S. S. (2021) · Proceedings of the 1st Workshop on Synthetic Multimedia - Audiovisual Deepfake Generation and Detection · doi:10.1145/3476099.3484315 · Cited by 110 · see citing works
A Comprehensive Review of DeepFake Detection Using Advanced Machine Learning and Fusion Methods
Gupta, G., Raja, K., Gupta, M., Jan, T., Whiteside, S. T., & Prasad, M. (2023) · Electronics · doi:10.3390/electronics13010095 · Cited by 99 · see citing works
Audio Deepfake Detection With Self-Supervised WavLM And Multi-Fusion Attentive Classifier
Guo, Y., Huang, H., Chen, X., Zhao, H., & Wang, Y. (2024) · ICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP) · doi:10.1109/icassp48485.2024.10447923 · Cited by 95 · see citing works
Do Deepfakes Feel Emotions? A Semantic Approach to Detecting Deepfakes Via Emotional Inconsistencies
Hosler, B., Salvi, D., Murray, A., Antonacci, F., Bestagini, P., Tubaro, S., & Stamm, M. C. (2021) · 2021 IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw53098.2021.00112 · Cited by 78 · see citing works
A Robust Audio Deepfake Detection System via Multi-View Feature
Yang, Y., Qin, H., Zhou, H., Wang, C., Guo, T., Han, K., & Wang, Y. (2024) · ICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP) · doi:10.1109/icassp48485.2024.10446560 · Cited by 61 · see citing works
Continual Learning for Fake Audio Detection
Ma, H., Yi, J., Tao, J., Bai, Y., Tian, Z., & Wang, C. (2021) · Interspeech 2021 · doi:10.21437/interspeech.2021-794 · Cited by 39 · see citing works
Attack Agnostic Dataset: Towards Generalization and Stabilization of Audio DeepFake Detection
Kawa, P., Plata, M., & Syga, P. (2022) · Interspeech 2022 · doi:10.21437/interspeech.2022-10078 · Cited by 33 · see citing works
What to remember: Self-adaptive continual learning for audio deepfake detection
Zhang, X., Yi, J., Wang, C., Zhang, C. Y., Zeng, S., & Tao, J. (2024) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v38i17.29929 · Cited by 32 · see citing works
Wang, X., Delgado, H., Tak, H., Jung, J.-W., Shim, H.-J., Todisco, M., Kukanov, I., Liu, X., Sahidullah, M., Kinnunen, T., et al. (2026) · Computer Speech & Language · doi:10.1016/j.csl.2025.101825 · Cited by 30 · see citing works
Self-citationABC-CapsNet: Attention based Cascaded Capsule Network for Audio Deepfake Detection
Wani, T. M., Gulzar, R., & Amerini, I. (2024) · 2024 IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw63382.2024.00253 · Cited by 14 · see citing works
Tahaoglu, G. (2025) · Applied Sciences · doi:10.3390/app15179685 · Cited by 11 · see citing works
- Authors
- Todisco, M., Wang, X., Vestman, V., Sahidullah, M., Delgado, H., Nautsch, A., Yamagishi, J., Evans, N., Kinnunen, T., & Lee, K. A.
- Affiliations
- EURECOM (FR)
- National Institute of Informatics (JP)
- University of Eastern Finland (FI)
- Institute for Infocomm Research (SG)
- ORCID
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2019
- Pages
- 1008-1012
- ISSN
- 2308-457X (ISSN-L)
- arXiv
- 1904.05441
- OpenAlex
- W2936802426
- Cited by
- 688
- References
- 0
- Citations by year
- 2026: 91 · 2025: 116 · 2024: 97 · 2023: 101 · 2022: 105 · 2021: 91 · 2020: 70 · 2019: 17
- FWCI
- 27.07
- Type
- conference paper
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- Interspeech (USB) (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- HAL (submittedVersion, other-oa)
- Graduate School and Research Center in Digital Science (EURECOM) (submittedVersion)
- Edinburgh Research Explorer (University of Edinburgh) (submittedVersion, other-oa)
- arXiv (Cornell University)
- Funders
- Nvidia
- Itä-Suomen Yliopisto
- Agence Nationale de la Recherche
- Ministry of Education, Culture, Sports, Science and Technology (18H04112, 17H04687, 16H06302, 18H04120, 18KT0051, CREST, 16K16096)
- China Scholarship Council
- Japan Society for the Promotion of Science (16K16096, JPMJCR18A6, 18H04120, 18H04112, CREST, 16H06302, 17H04687, 18KT0051)
- Core Research for Evolutional Science and Technology (JPMJCR18A6)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Speech Recognition and Synthesis
- Physical Sciences › Computer Science › Signal Processing › Biometric Identification and Security
- Physical Sciences › Computer Science › Signal Processing › Speech and Audio Processing
- Keywords
- ASVspoof 2019, anti-spoofing, speaker verification, replay attacks, synthetic speech, spoofing countermeasures
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review