RAT: Reference-Augmented Training for ASV Anti-Spoofing

Vojtěch Staněk, Anton Firc, Jakub Reš, Kamil Malinka
6/9/2026
cs.SDcs.AIcs.CR

No official code found. Best implementation: Security-FIT/RAT (1 star, Apache-2.0, last commit 2026-02-20).

Abstract

We introduce a spoofing countermeasure architecture conditioned on speaker-reference recordings, but observe that it converges to a solution that effectively ignores the reference during inference. Surprisingly, training with a reference channel induces invariance that improves deepfake detection, even when the reference is absent or mismatched during inference. Based on this observation, we propose a Reference-Augmented Training (RAT) strategy. RAT yields improved detection performance compared to single-utterance baselines, even when the reference recording is replaced with a zero vector at inference. Through rigorous analysis, we demonstrate that the optimization process rapidly diminishes the reference contributions, leading to inference largely independent of the reference channel. Using RAT, we achieve state-of-the-art 2.57% EER and 0.074 minDCF on the ASVspoof 5 benchmark with a single detector, surpassing even large ensemble systems.

View on arXivView PDF

Code Implementations(1)

Security-FIT/RATCommunity77%
Apache-2.0

Reference-Augmented Training for ASV Anti-spoofing

10Feb 20, 20268 months agoApache-2.0

Similar Papers

Cite this paper

@article{stank2026rat,
  title  = {RAT: Reference-Augmented Training for ASV Anti-Spoofing},
  author = {Vojtěch Staněk and Anton Firc and Jakub Reš and Kamil Malinka},
  year   = {2026},
  eprint = {2606.10908},
  archivePrefix = {arXiv},
  url    = {http://arxiv.org/abs/2606.10908v1}
}

Add a badge to your README

Shows whether official code is linked for this paper.

Code of Paper badge
[![Code of Paper](https://codeofpaper.com/badge/2606.10908.svg)](https://codeofpaper.com/paper/2606.10908)

Discussion