Probabilistic Verification of Voice Anti-Spoofing Models

Recent advances in generative models have amplified the risk of malicious misuse of speech synthesis technologies, enabling adversaries to impersonate target speakers and access sensitive resources. Although speech deepfake detection has progressed rapidly, most existing countermeasures lack formal robustness guarantees or fail to generalize to unseen generation techniques. We propose PV-VASM, a probabilistic framework for verifying the robustness of voice anti-spoofing models (VASMs). PV-VASM estimates the probability of misclassification under text-to-speech (TTS), voice cloning (VC), and parametric signal transformations. The approach is model-agnostic, builds on known concentration inequalities, and enables robustness verification against speech synthesis techniques and input perturbations. We improve existing high-confidence estimation methods with an adaptive selection mechanism without sacrificing their performance, and validate the framework across diverse experimental settings, demonstrating its effectiveness as a practical robustness verification tool.