Self-supervised learning (SSL) speech backbones are the standard frontend for synthetic-speech detection, and layer-wise probing has established which layers carry the most signal. But analysis stops there: which of a layer’s twelve attention heads compute the spoof decision is unknown. We present the first head-level study of two frozen backbones, WavLM-base and Wav2Vec2-base, on ASVspoof 5. Per-head ablation shows that only a few heads carry the decision while others actively oppose it; removing those heads lowers equal error rate (EER) with no retraining, by 13% relative in WavLM and 22% in Wav2Vec2. We also find a probe-free signature: spoofed speech draws more focused attention than genuine speech, and this gap alone separates the two almost as well as the full representation, peaking at each backbone’s most discriminative layer. Finally, attack identity is decodable from every head, yet heads differ in what they do, not in what they know.
A head-level investigative study of self-supervised backbones for synthetic speech detection
IBERSPEECH 2026, 18-20 November 2026, Madrid, Spain
Type:
Conference
City:
Madrid
Date:
2026-11-18
Department:
Digital Security
Eurecom Ref:
9051
Copyright:
© ISCA. Personal use of this material is permitted. The definitive version of this paper was published in IBERSPEECH 2026, 18-20 November 2026, Madrid, Spain and is available at : http://dx.doi.org/10.21437/IberSPEECH.2026-21
PERMALINK : https://www.eurecom.fr/publication/9051