首个评估语音模型交互隐私能力的基准,解决用户间信息泄露问题。
VoxPrivacy: A Benchmark for Evaluating Interactional Privacy of Speech Language Models
- 构建三阶难度评测体系,检验模型区分用户并保护隐私的能力。
- 9个模型在32小时数据上平均准确率仅50%,多数表现接近随机。
- 提供4000小时训练集和微调模型,推动更安全的语音助手发展。
随着语音语言模型从个人设备转向智能家居等多用户场景,模型需能区分用户以合理管理信息流。若缺乏此能力,可能将某用户的私密日程泄露给他人,这种隐私缺陷称为交互隐私失效。因此,生成与说话人相关的回应成为安全部署的关键。现有基准仅测试对话能力或识别说话人,忽视模型是否根据身份调整响应;隐私评估多聚焦全局敏感数据(如银行密码),却忽略上下文敏感信息(如私人预约)。为此,我们提出VoxPrivacy,首个专门评估语音模型交互隐私的基准。该基准包含三个递增难度层级,从响应保密指令到主动保护隐私。我们在32小时双语数据集上评估9个语音模型,发现多数开源模型在条件隐私决策上准确率仅约50%(接近随机),即使强闭源系统在主动隐私推断上也表现不足。在真人录制的Real-VoxPrivacy子集上验证结果,合成数据中的失败现象同样存在。最后,通过在新4000小时训练集上微调,我们显著提升隐私保护能力且保持模型鲁棒性。为支持后续研究,我们公开VoxPrivacy基准、大规模训练集及微调模型。
原文摘要 · Abstract (English)
As Speech Language Models (SLMs) transition from personal devices to shared, multi-user environments such as smart homes, a new challenge emerges: the model is expected to distinguish between users to manage information flow appropriately. Without this capability, an SLM could reveal one user's confidential schedule to another, a privacy failure we term interactional privacy. Thus, the ability to generate speaker-aware responses becomes essential for SLM safe deployment. Current SLM benchmarks test dialogue ability but overlook speaker identity. Multi-speaker benchmarks check who said what without assessing whether SLMs adapt their responses. Privacy benchmarks focus on globally sensitive data (e.g., bank passwords) while neglecting contextual privacy-sensitive information (e.g., a user's private appointment). To address this gap, we introduce VoxPrivacy, the first benchmark designed to evaluate interactional privacy in SLMs. VoxPrivacy spans three tiers of increasing difficulty, from following direct secrecy commands to proactively protecting privacy. Our evaluation of nine SLMs on a 32-hour bilingual dataset reveals a widespread vulnerability: most open-source models perform close to random chance (around 50% accuracy) on conditional privacy decisions, while even strong closed-source systems fall short on proactive privacy inference. We further validate these findings on Real-VoxPrivacy, a human-recorded subset, confirming that failures observed on synthetic data persist in real speech. Finally, we demonstrate a viable path forward: by fine-tuning on a new 4,000-hour training set, we improve privacy-preserving abilities while maintaining robustness. To support future work, we release the VoxPrivacy benchmark, the large-scale training set, and the fine-tuned model to foster the development of safer and more context-aware SLMs.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。