{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,22]],"date-time":"2026-04-22T19:14:26Z","timestamp":1776885266365,"version":"3.51.2"},"publisher-location":"New York, NY, USA","reference-count":73,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,10,13]]},"DOI":"10.1145\/3733799.3762979","type":"proceedings-article","created":{"date-parts":[[2025,12,30]],"date-time":"2025-12-30T11:38:49Z","timestamp":1767094729000},"page":"206-217","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Seeing is Believing: Interpreting Behavioral Changes in Audio Deepfake Detectors Arising from Data Augmentation"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-6595-1834","authenticated-orcid":false,"given":"Boo","family":"Fullwood","sequence":"first","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9805-2217","authenticated-orcid":false,"given":"Fabian","family":"Monrose","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,12,30]]},"reference":[{"key":"e_1_3_3_2_2_2","doi-asserted-by":"crossref","unstructured":"2022. Deep learning for deepfakes creation and detection: A survey. Computer Vision and Image Understanding 223 (2022) 103525.","DOI":"10.1016\/j.cviu.2022.103525"},{"key":"e_1_3_3_2_3_2","unstructured":"Alexei Baevski Henry Zhou Abdelrahman Mohamed and Michael Auli. 2020. wav2vec 2.0: A Framework for Self-Supervised Learning of Speech Representations. arxiv:https:\/\/arXiv.org\/abs\/2006.11477\u00a0[cs.CL]"},{"key":"e_1_3_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-87784-1_37"},{"key":"e_1_3_3_2_5_2","doi-asserted-by":"crossref","unstructured":"Pierre Baldi S\u00f8ren Brunak Yves Chauvin Claus\u00a0AF Andersen and Henrik Nielsen. 2000. Assessing the accuracy of prediction algorithms for classification: an overview. Bioinformatics 16 5 (2000) 412\u2013424.","DOI":"10.1093\/bioinformatics\/16.5.412"},{"key":"e_1_3_3_2_6_2","unstructured":"Joseph\u00a0R Biden. 2023. Executive order on the safe secure and trustworthy development and use of artificial intelligence. (2023)."},{"key":"e_1_3_3_2_7_2","doi-asserted-by":"publisher","unstructured":"Carmen Bisogni Vincenzo Loia Michele Nappi and Chiara Pero. 2024. Acoustic features analysis for explainable machine learning-based audio spoofing detection. Computer Vision and Image Understanding 249 (2024) 104145. 10.1016\/j.cviu.2024.104145","DOI":"10.1016\/j.cviu.2024.104145"},{"key":"e_1_3_3_2_8_2","first-page":"2691","volume-title":"USENIX Security Symposium","author":"Blue Logan","year":"2022","unstructured":"Logan Blue, Kevin Warren, Hadi Abdullah, Cassidy Gibson, Luis Vargas, Jessica O\u2019Dell, Kevin Butler, and Patrick Traynor. 2022. Who are you (I really wanna know)? Detecting audio DeepFakes through vocal tract reconstruction. In USENIX Security Symposium. 2691\u20132708."},{"key":"e_1_3_3_2_9_2","doi-asserted-by":"crossref","unstructured":"Guangke Chen Sen Chen Lingling Fan Xiaoning Du Zhe Zhao Fu Song and Yang Liu. 2019. Who is Real Bob? Adversarial Attacks on Speaker Recognition Systems. IEEE Symposium on Security and Privacy (2019) 694\u2013711.","DOI":"10.1109\/SP40001.2021.00004"},{"key":"e_1_3_3_2_10_2","unstructured":"Minhao Cheng Simranjit Singh Patrick Chen Pin-Yu Chen Sijia Liu and Cho-Jui Hsieh. 2020. Sign-OPT: A Query-Efficient Hard-label Adversarial Attack. arxiv:https:\/\/arXiv.org\/abs\/1909.10773\u00a0[cs.LG]"},{"key":"e_1_3_3_2_11_2","doi-asserted-by":"crossref","unstructured":"Davide Chicco and Giuseppe Jurman. 2023. The Matthews correlation coefficient (MCC) should replace the ROC AUC as the standard metric for assessing binary classification. BioData Mining (2023).","DOI":"10.1186\/s13040-023-00322-4"},{"key":"e_1_3_3_2_12_2","doi-asserted-by":"crossref","unstructured":"Michael Chinen Felicia S.\u00a0C. Lim Jan Skoglund Nikita Gureev Feargus O\u2019Gorman and Andrew Hines. 2020. ViSQOL v3: An Open Source Production Ready Objective Speech and Audio Metric. arxiv:https:\/\/arXiv.org\/abs\/2004.09584\u00a0[eess.AS]","DOI":"10.1109\/QoMEX48832.2020.9123150"},{"key":"e_1_3_3_2_13_2","doi-asserted-by":"crossref","unstructured":"Thien-Phuc Doan Long Nguyen-Vu Souhwan Jung and Kihun Hong. 2023. BTS-E: Audio Deepfake Detection Using Breathing-Talking-Silence Encoder. International Conference on Acoustics Speech and Signal Processing (2023) 1\u20135.","DOI":"10.1109\/ICASSP49357.2023.10095927"},{"key":"e_1_3_3_2_14_2","unstructured":"Alexey Dosovitskiy Lucas Beyer Alexander Kolesnikov Dirk Weissenborn Xiaohua Zhai Thomas Unterthiner Mostafa Dehghani Matthias Minderer Georg Heigold Sylvain Gelly Jakob Uszkoreit and Neil Houlsby. 2021. An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale. arxiv:https:\/\/arXiv.org\/abs\/2010.11929\u00a0[cs.CV]"},{"key":"e_1_3_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW60793.2023.00088"},{"key":"e_1_3_3_2_16_2","volume-title":"Interspeech","author":"Eom Youngsik","year":"2022","unstructured":"Youngsik Eom, Yeonghyeon Lee, Ji\u00a0Sub Um, and Hoi\u00a0Rin Kim. 2022. Anti-Spoofing Using Transfer Learning with Variational Information Bottleneck. In Interspeech."},{"key":"e_1_3_3_2_17_2","doi-asserted-by":"crossref","unstructured":"Hany Farid. 2022. Creating using misusing and detecting deep fakes. Journal of Online Trust and Safety 1 4 (2022).","DOI":"10.54501\/jots.v1i4.56"},{"key":"e_1_3_3_2_18_2","unstructured":"FCC. 2024. FCC Makes AI-Generated Voices in Robocalls Illegal. https:\/\/www.fcc.gov\/document\/fcc-makes-ai-generated-voices-robocalls-illegal. [Accessed 29-04-2024]."},{"key":"e_1_3_3_2_19_2","unstructured":"Joel Frank and Lea Sch\u00f6nherr. 2021. WaveFake: A dataset to facilitate audio DeepFake detection."},{"key":"e_1_3_3_2_20_2","unstructured":"John\u00a0J. Godfrey and Edward Holliman. 1993. Switchboard-1 Release 2 LDC97S62."},{"key":"e_1_3_3_2_21_2","doi-asserted-by":"publisher","DOI":"10.21437\/interspeech.2023-245"},{"key":"e_1_3_3_2_22_2","doi-asserted-by":"crossref","unstructured":"Yuan Gong Yu-An Chung and James Glass. 2021. AST: Audio Spectrogram Transformer. arxiv:https:\/\/arXiv.org\/abs\/2104.01778\u00a0[cs.SD]","DOI":"10.21437\/Interspeech.2021-698"},{"key":"e_1_3_3_2_23_2","doi-asserted-by":"crossref","unstructured":"Joshua Habgood-Coote. 2023. Deepfakes and the epistemic apocalypse. Synthese 201 3 (2023) 103.","DOI":"10.1007\/s11229-023-04097-3"},{"key":"e_1_3_3_2_24_2","doi-asserted-by":"crossref","unstructured":"Keith\u00a0Raymond Harris. 2022. Real fakes: The epistemology of online misinformation. Philosophy & Technology 35 3 (2022) 83.","DOI":"10.1007\/s13347-022-00581-9"},{"key":"e_1_3_3_2_25_2","doi-asserted-by":"crossref","unstructured":"Keith\u00a0Raymond Harris. 2024. AI or Your Lying Eyes: Some Shortcomings of Artificially Intelligent Deepfake Detectors. Philosophy & Technology 37 1 (2024) 7.","DOI":"10.1007\/s13347-024-00700-8"},{"key":"e_1_3_3_2_26_2","doi-asserted-by":"crossref","unstructured":"Wiebke Hutiri Oresiti Papakyriakopoulos and Alice Xiang. 2024. Not My Voice! A Taxonomy of Ethical and Safety Harms of Speech Generators. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2402.01708 (2024).","DOI":"10.1145\/3630106.3658911"},{"key":"e_1_3_3_2_27_2","unstructured":"Keith Ito and Linda Johnson. 2017. The LJ Speech Dataset. https:\/\/keithito.com\/LJ-Speech-Dataset\/."},{"key":"e_1_3_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N19-1357"},{"key":"e_1_3_3_2_29_2","doi-asserted-by":"crossref","unstructured":"Stylianos Karapantazis and Fotini-Niovi Pavlidou. 2009. VoIP: A comprehensive survey on a promising technology. Computer Networks 53 12 (2009) 2050\u20132090.","DOI":"10.1016\/j.comnet.2009.03.010"},{"key":"e_1_3_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179374"},{"key":"e_1_3_3_2_31_2","doi-asserted-by":"crossref","unstructured":"Piotr Kawa Marcin Plata Micha\u0142 Czuba Piotr Szyma\u0144ski and Piotr Syga. 2023. Improved DeepFake Detection Using Whisper Features. (2023).","DOI":"10.21437\/Interspeech.2023-1537"},{"key":"e_1_3_3_2_32_2","unstructured":"Zahra Khanjani Gabrielle Watson and Vandana\u00a0P. Janeja. 2021. How Deep Are the Fakes? Focusing on Audio Deepfake: A Survey. arxiv:https:\/\/arXiv.org\/abs\/2111.14203\u00a0[cs.SD]"},{"key":"e_1_3_3_2_33_2","unstructured":"Diederik\u00a0P. Kingma and Jimmy Ba. 2017. Adam: A Method for Stochastic Optimization. arxiv:https:\/\/arXiv.org\/abs\/1412.6980\u00a0[cs.LG]"},{"key":"e_1_3_3_2_34_2","doi-asserted-by":"crossref","unstructured":"Nils\u00a0C K\u00f6bis Barbora Dole\u017ealov\u00e1 and Ivan Soraperra. 2021. Fooled twice: People cannot detect deepfakes but think they can. Iscience 24 11 (2021).","DOI":"10.1016\/j.isci.2021.103364"},{"key":"e_1_3_3_2_35_2","unstructured":"Seth Layton Thiago De\u00a0Andrade Daniel Olszewski Kevin Warren Carrie Gates Kevin Butler and Patrick Traynor. 2024. Every Breath You Don\u2019t Take: Deepfake Speech Detection Using Breath. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2404.15143 (2024)."},{"key":"e_1_3_3_2_36_2","unstructured":"Tuan Duy\u00a0Nguyen Le Kah\u00a0Kuan Teh and Huy\u00a0Dat Tran. 2024. Continuous Learning of Transformer-based Audio Deepfake Detection. arxiv:https:\/\/arXiv.org\/abs\/2409.05924\u00a0[cs.SD] https:\/\/arxiv.org\/abs\/2409.05924"},{"key":"e_1_3_3_2_37_2","unstructured":"Lauren Leffer. 2024. AI Audio Deepfakes Are Quickly Outpacing Detection \u2014 scientificamerican.com. https:\/\/www.scientificamerican.com\/article\/ai-audio-deepfakes-are-quickly-outpacing-detection\/. [Accessed 29-04-2024]."},{"key":"e_1_3_3_2_38_2","unstructured":"Menglu Li Yasaman Ahmadiadli and Xiao-Ping Zhang. 2024. Audio Anti-Spoofing Detection: A Survey. arxiv:https:\/\/arXiv.org\/abs\/2404.13914\u00a0[cs.SD]"},{"key":"e_1_3_3_2_39_2","unstructured":"Yuang Li Min Zhang Mengxin Ren Miaomiao Ma Daimeng Wei and Hao Yang. 2024. Cross-Domain Audio Deepfake Detection: Dataset and Analysis. arxiv:https:\/\/arXiv.org\/abs\/2404.04904\u00a0[cs.SD]"},{"key":"e_1_3_3_2_40_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-61382-1_8"},{"key":"e_1_3_3_2_41_2","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN60899.2024.10650554"},{"key":"e_1_3_3_2_42_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP43922.2022.9747768"},{"key":"e_1_3_3_2_43_2","doi-asserted-by":"crossref","unstructured":"Brian\u00a0W Matthews. 1975. Comparison of the predicted and observed secondary structure of T4 phage lysozyme. Biochimica et Biophysica Acta (BBA)-Protein Structure 405 2 (1975) 442\u2013451.","DOI":"10.1016\/0005-2795(75)90109-9"},{"key":"e_1_3_3_2_44_2","doi-asserted-by":"publisher","DOI":"10.1145\/3543873.3587581"},{"key":"e_1_3_3_2_45_2","doi-asserted-by":"crossref","unstructured":"Nicolas\u00a0M. M\u00fcller Karla Pizzi and Jennifer Williams. 2022. Human Perception of Audio Deepfakes. 85\u201391.","DOI":"10.1145\/3552466.3556531"},{"key":"e_1_3_3_2_46_2","unstructured":"Shannon Murphy. 2024. Deepfake CFO Video Calls Result in $25M in Damages \u2014 trendmicro.com. Trend Micro."},{"key":"e_1_3_3_2_47_2","doi-asserted-by":"crossref","unstructured":"Nicolas\u00a0M. M\u00fcller Pavel Czempin Franziska Dieckmann Adam Froghyar and Konstantin B\u00f6ttinger. 2022. Does Audio Deepfake Detection Generalize? arxiv:https:\/\/arXiv.org\/abs\/2203.16263\u00a0[cs.SD]","DOI":"10.21437\/Interspeech.2022-108"},{"key":"e_1_3_3_2_48_2","unstructured":"Security News. 2019. Unusual CEO Fraud via Deepfake Audio Steals US $243 000 From UK Company."},{"key":"e_1_3_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2015.7178964"},{"key":"e_1_3_3_2_50_2","doi-asserted-by":"publisher","DOI":"10.21437\/Interspeech.2019-2680"},{"key":"e_1_3_3_2_51_2","doi-asserted-by":"publisher","DOI":"10.1109\/IS262782.2024.10704095"},{"key":"e_1_3_3_2_52_2","doi-asserted-by":"crossref","unstructured":"Michael\u00a0I Posner Mary\u00a0J Nissen and Raymond\u00a0M Klein. 1976. Visual dominance: an information-processing account of its origins and significance. Psychological review 83 2 (1976) 157.","DOI":"10.1037\/0033-295X.83.2.157"},{"key":"e_1_3_3_2_53_2","unstructured":"Zengyi Qin Wenliang Zhao Xumin Yu and Xin Sun. 2024. OpenVoice: Versatile Instant Voice Cloning. arxiv:https:\/\/arXiv.org\/abs\/2312.01479\u00a0[cs.SD]"},{"key":"e_1_3_3_2_54_2","unstructured":"Alec Radford Jong\u00a0Wook Kim Tao Xu Greg Brockman Christine McLeavey and Ilya Sutskever. 2022. Robust Speech Recognition via Large-Scale Weak Supervision. arxiv:https:\/\/arXiv.org\/abs\/2212.04356\u00a0[eess.AS]"},{"key":"e_1_3_3_2_55_2","volume-title":"Phonetics: Transcription, production, acoustics, and perception","author":"Reetz Henning","year":"2020","unstructured":"Henning Reetz and Allard Jongman. 2020. Phonetics: Transcription, production, acoustics, and perception. John Wiley & Sons."},{"key":"e_1_3_3_2_56_2","doi-asserted-by":"publisher","DOI":"10.1109\/SPED.2019.8906599"},{"key":"e_1_3_3_2_57_2","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939778"},{"key":"e_1_3_3_2_58_2","doi-asserted-by":"crossref","unstructured":"Ramprasaath\u00a0R. Selvaraju Michael Cogswell Abhishek Das Ramakrishna Vedantam Devi Parikh and Dhruv Batra. 2019. Grad-CAM: Visual Explanations from Deep Networks via Gradient-Based Localization. International Journal of Computer Vision 128 2 (Oct. 2019) 336\u2013359.","DOI":"10.1007\/s11263-019-01228-7"},{"key":"e_1_3_3_2_59_2","unstructured":"Tsu-Hsien Shih Chin-Yuan Yeh and Ming-Syan Chen. 2024. Does Audio Deepfake Detection Rely on Artifacts? IEEE Conference on Acoustics Speech and Signal Processing (2024)."},{"key":"e_1_3_3_2_60_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23351"},{"key":"e_1_3_3_2_61_2","unstructured":"Hemlata Tak Jose Patino Massimiliano Todisco Andreas Nautsch Nicholas Evans and Anthony Larcher. 2021. End-to-end anti-spoofing with RawNet2. arxiv:https:\/\/arXiv.org\/abs\/2011.01108\u00a0[eess.AS]"},{"key":"e_1_3_3_2_62_2","unstructured":"Hemlata Tak Massimiliano Todisco Xin Wang Jee weon Jung Junichi Yamagishi and Nicholas Evans. 2022. Automatic speaker verification spoofing and deepfake detection using wav2vec 2.0 and data augmentation. arxiv:https:\/\/arXiv.org\/abs\/2202.12233\u00a0[eess.AS]"},{"key":"e_1_3_3_2_63_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.1999.758101"},{"key":"e_1_3_3_2_64_2","unstructured":"Ashish Vaswani Noam Shazeer Niki Parmar Jakob Uszkoreit Llion Jones Aidan\u00a0N. Gomez Lukasz Kaiser and Illia Polosukhin. 2023. Attention Is All You Need. arXiv:https:\/\/arXiv.org\/abs\/1706.03762"},{"key":"e_1_3_3_2_65_2","doi-asserted-by":"crossref","unstructured":"Christina\u00a0P. Walker Daniel\u00a0S. Schiff and Kaylyn\u00a0Jackson Schiff. 2024. Merging AI Incidents Research with Political Misinformation Research: Introducing the Political Deepfakes Incidents Database. AAAI Conference on Artificial Intelligence 38 21 (Mar. 2024) 23053\u201323058.","DOI":"10.1609\/aaai.v38i21.30349"},{"key":"e_1_3_3_2_66_2","first-page":"1406","volume-title":"International Conference on Acoustics, Speech and Signal Processing","author":"Wang Chenglong","year":"2024","unstructured":"Chenglong Wang, Jiayi He, Jiangyan Yi, Jianhua Tao, Chu\u00a0Yuan Zhang, and Xiaohui Zhang. 2024. Multi-Scale Permutation Entropy for Audio Deepfake Detection. In International Conference on Acoustics, Speech and Signal Processing. 1406\u20131410."},{"key":"e_1_3_3_2_67_2","doi-asserted-by":"crossref","unstructured":"Shu Wang Kun Sun and Qi Li. 2023. Compensating Removed Frequency Components: Thwarting Voice Spectrum Reduction Attacks. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2308.09546 (2023).","DOI":"10.14722\/ndss.2024.23150"},{"key":"e_1_3_3_2_68_2","doi-asserted-by":"crossref","unstructured":"Xin Wang and Junich Yamagishi. 2021. A Comparative Study on Recent Neural Spoofing Countermeasures for Synthetic Speech Detection. arxiv:https:\/\/arXiv.org\/abs\/2103.11326\u00a0[eess.AS]","DOI":"10.21437\/Interspeech.2021-702"},{"key":"e_1_3_3_2_69_2","first-page":"235","volume-title":"Proceedings of the ACM SIGSAC Conference on Computer and Communications Security","author":"Wenger Emily","year":"2021","unstructured":"Emily Wenger, Max Bronckers, Christian Cianfarani, Jenna Cryan, Angela Sha, Haitao Zheng, and Ben\u00a0Y Zhao. 2021. \"Hello, It\u2019s Me\": Deep Learning-based Speech Synthesis Attacks in the Real World. In Proceedings of the ACM SIGSAC Conference on Computer and Communications Security. 235\u2013251."},{"key":"e_1_3_3_2_70_2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D19-1002"},{"key":"e_1_3_3_2_71_2","doi-asserted-by":"publisher","DOI":"10.21437\/Interspeech.2023-1383"},{"key":"e_1_3_3_2_72_2","doi-asserted-by":"publisher","DOI":"10.1145\/3383219.3383232"},{"key":"e_1_3_3_2_73_2","unstructured":"Jiangyan Yi Chenglong Wang Jianhua Tao Xiaohui Zhang Chu\u00a0Yuan Zhang and Yan Zhao. 2023. Audio Deepfake Detection: A Survey. arxiv:https:\/\/arXiv.org\/abs\/2308.14970\u00a0[cs.SD]"},{"key":"e_1_3_3_2_74_2","doi-asserted-by":"publisher","unstructured":"Ning Yu Long Chen Tao Leng Zigang Chen and Xiaoyin Yi. 2024. An explainable deepfake of speech detection method with spectrograms and waveforms. Journal of Information Security and Applications 81 (2024) 103720. 10.1016\/j.jisa.2024.103720","DOI":"10.1016\/j.jisa.2024.103720"}],"event":{"name":"AISec '25: Proceedings of the 2025 Workshop on Artificial Intelligence and Security","location":"Taipei , Taiwan","acronym":"AISec '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 18th ACM Workshop on Artificial Intelligence and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3733799.3762979","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,30]],"date-time":"2025-12-30T11:51:44Z","timestamp":1767095504000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3733799.3762979"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10,13]]},"references-count":73,"alternative-id":["10.1145\/3733799.3762979","10.1145\/3733799"],"URL":"https:\/\/doi.org\/10.1145\/3733799.3762979","relation":{},"subject":[],"published":{"date-parts":[[2025,10,13]]},"assertion":[{"value":"2025-12-30","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}