{"id":"https://openalex.org/W7163004052","doi":"https://doi.org/10.48550/arxiv.2605.30366","title":"Escaping the Linearity Trap: Manifold Detours for Black-Box Adversarial Attacks on Singing Audio Deepfake Detection","display_name":"Escaping the Linearity Trap: Manifold Detours for Black-Box Adversarial Attacks on Singing Audio Deepfake Detection","publication_year":2026,"publication_date":"2026-05-18","ids":{"openalex":"https://openalex.org/W7163004052","doi":"https://doi.org/10.48550/arxiv.2605.30366"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.30366","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30366","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.30366","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137558194","display_name":"Yifan Liao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liao, Yifan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137532604","display_name":"Yule Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Yule","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137595152","display_name":"Zhen Sun","orcid":"https://orcid.org/0009-0007-8101-9692"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sun, Zhen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137533994","display_name":"Zongmin Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Zongmin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137529132","display_name":"Yupeng He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Yupeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137582031","display_name":"Jiaheng Wei","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wei, Jiaheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062424202","display_name":"Xinhu Zheng","orcid":"https://orcid.org/0000-0002-9898-5543"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zheng, Xinhu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137537372","display_name":"Xinlei He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Xinlei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5078999996185303,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5078999996185303,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.14030000567436218,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.07580000162124634,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6197999715805054},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5026000142097473},{"id":"https://openalex.org/keywords/linearity","display_name":"Linearity","score":0.501800000667572},{"id":"https://openalex.org/keywords/mars-exploration-program","display_name":"Mars Exploration Program","score":0.47380000352859497},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.4228000044822693},{"id":"https://openalex.org/keywords/manifold","display_name":"Manifold (fluid mechanics)","score":0.392300009727478},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.38089999556541443},{"id":"https://openalex.org/keywords/robot","display_name":"Robot","score":0.3797000050544739},{"id":"https://openalex.org/keywords/satellite","display_name":"Satellite","score":0.36880001425743103}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7900999784469604},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6197999715805054},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5091000199317932},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5026000142097473},{"id":"https://openalex.org/C77170095","wikidata":"https://www.wikidata.org/wiki/Q1753188","display_name":"Linearity","level":2,"score":0.501800000667572},{"id":"https://openalex.org/C83260615","wikidata":"https://www.wikidata.org/wiki/Q6773121","display_name":"Mars Exploration Program","level":2,"score":0.47380000352859497},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.4228000044822693},{"id":"https://openalex.org/C529865628","wikidata":"https://www.wikidata.org/wiki/Q1790740","display_name":"Manifold (fluid mechanics)","level":2,"score":0.392300009727478},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.38089999556541443},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.3797000050544739},{"id":"https://openalex.org/C19269812","wikidata":"https://www.wikidata.org/wiki/Q26540","display_name":"Satellite","level":2,"score":0.36880001425743103},{"id":"https://openalex.org/C2776608160","wikidata":"https://www.wikidata.org/wiki/Q4785462","display_name":"Natural (archaeology)","level":2,"score":0.3619999885559082},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.3555999994277954},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.35249999165534973},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.34279999136924744},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.32510000467300415},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.32179999351501465},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.31040000915527344},{"id":"https://openalex.org/C2780023022","wikidata":"https://www.wikidata.org/wiki/Q1338171","display_name":"Compensation (psychology)","level":2,"score":0.299699991941452},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.29159998893737793},{"id":"https://openalex.org/C65155139","wikidata":"https://www.wikidata.org/wiki/Q5380912","display_name":"Envelope (radar)","level":3,"score":0.28760001063346863},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.2822999954223633},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.27129998803138733},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.26579999923706055},{"id":"https://openalex.org/C40969351","wikidata":"https://www.wikidata.org/wiki/Q3516228","display_name":"Word error rate","level":2,"score":0.2651999890804291},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.25940001010894775},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.2572000026702881}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.30366","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30366","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.30366","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.30366","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Recent":[0],"Singing":[1],"Voice":[2],"Synthesis":[3],"(SVS)":[4],"advances":[5],"enable":[6],"highly":[7],"realistic":[8],"but":[9],"potentially":[10],"malicious":[11],"AI":[12],"covers,":[13],"making":[14],"singing":[15],"voice":[16],"deepfake":[17],"detection":[18],"(SVDD)":[19],"crucial.":[20],"Self-Supervised":[21],"Learning":[22],"(SSL)-based":[23],"detectors":[24,103],"achieve":[25],"state-of-the-art":[26],"performance":[27],"by":[28,137],"fine-tuning":[29],"speech":[30],"SSL":[31,146],"backbones":[32],"to":[33,101,129,134],"capture":[34],"singing-specific":[35],"spoof":[36,77],"artifacts.":[37],"Existing":[38],"adversarial":[39],"attacks":[40,64,84],"often":[41],"fail":[42],"against":[43],"SSL-SVDD,":[44,92],"creating":[45],"a":[46,105,124,139],"false":[47],"impression":[48],"of":[49,122],"inherent":[50],"robustness.":[51],"We":[52],"reveal":[53],"this":[54,93],"stems":[55],"from":[56,143,152],"two":[57],"challenges.":[58],"First,":[59],"at":[60,80],"the":[61,81,86,110,144,153,159,165,172,176,179,185,207],"objective":[62],"level,":[63,83],"optimize":[65],"cross-entropy":[66],"on":[67,184],"local":[68],"surrogates,":[69],"crossing":[70],"surrogate-specific":[71],"boundaries":[72],"rather":[73],"than":[74],"suppressing":[75],"shared":[76],"evidence.":[78],"Second,":[79],"method":[82],"follow":[85],"surrogate's":[87],"dominant":[88],"gradient":[89],"direction.":[90],"In":[91],"aligns":[94],"with":[95],"fine-tuned":[96,154],"artifact-sensitive":[97],"directions,":[98],"limiting":[99],"transferability":[100],"unseen":[102],"-":[104],"geometric":[106],"failure":[107],"we":[108,117],"term":[109],"Linearity":[111,160],"Trap.":[112],"To":[113],"properly":[114],"evaluate":[115],"robustness,":[116],"propose":[118],"MARS":[119,132,157,189],"(Meta-Adversarial":[120],"Regression":[121],"Semantics),":[123],"transfer-based":[125],"black-box":[126],"framework":[127],"tailored":[128],"SSL-SVDD.":[130],"Structurally,":[131],"shifts":[133],"hypothesis-evidence":[135],"manipulation":[136],"constructing":[138],"natural":[140,180],"semantic":[141,181],"anchor":[142,151],"pre-trained":[145],"space":[147],"and":[148,202],"an":[149],"artifact":[150],"space.":[155],"Algorithmically,":[156],"escapes":[158],"Trap":[161],"via":[162],"bi-level":[163],"optimization:":[164],"inner":[166],"stage":[167,174],"induces":[168],"tangential":[169],"exploration,":[170],"while":[171],"outer":[173],"guides":[175],"audio":[177],"toward":[178],"manifold.":[182],"Experiments":[183],"CtrSVDD":[186],"benchmark":[187],"show":[188],"improves":[190],"Attack":[191],"Success":[192],"Rate":[193],"(ASR)":[194],"in":[195],"in-distribution":[196],"transfer":[197,200],"(13%),":[198],"out-of-distribution":[199],"(10%),":[201],"cross-task":[203],"evaluation":[204],"(36%),":[205],"highlighting":[206],"urgent":[208],"need":[209],"for":[210],"robust":[211],"SVDD":[212],"systems.":[213]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-02T00:00:00"}