SENTRY: A Streaming Edge Network Trust Engine for Real-Time Audio Deepfake Detection

Authors: Chirantan Banerjee, Soumita Chatterjee, Bhargab B. Bhattacharya, Hafizur Rahaman

Published: 2026-10-17 05:22:59+00:00

Comment: 7 pages, 1 figure, 5 tables

AI Summary

SENTRY is a hardware-oriented, streaming trust engine for real-time audio deepfake detection at the network edge, designed to operate without GPUs or floating-point hardware. It achieves this by employing an integer lifting-wavelet front end and multiplier-free transforms, combined with a supervised gradient-boosted tree and an unsupervised Mahalanobis out-of-distribution detector.

Abstract

Real-time voice cloning has enabled large-scale streaming deepfake and vishing attacks, while existing Network Detection and Response (NDR) solutions rely on GPU-based post-processing that requires buffered audio and generalizes poorly to unseen speech synthesis models. This paper presents SENTRY, a hardware-oriented, streaming trust engine for inline deepfake detection at the network edge. SENTRY employs an integer lifting-wavelet front end together with a bank of multiplier-free transforms, including wavelet-packet envelopes, Walsh-Hadamard sequency profiles, waveform micro-statistics, and long-term spectral features, designed so that acoustic analysis needs only integer add, shift, compare and bitwise operations. A supervised gradient-boosted tree classifier is combined with an unsupervised Mahalanobis out-of-distribution detector trained solely on authentic speech, and their outputs are fused by a lightweight logistic layer to produce graduated LOG, CHALLENGE, or DROP actions. Under a closed-set protocol, SENTRY reaches 98.75% accuracy at a 1.25% equal-error rate (EER) on WaveFake, with perfect separation of HiFi-GAN and WaveGlow; its supervised track alone achieves an AUC of 0.9994 (fused: 0.9993). On ASVspoof 2019 LA (attacks A01-A06) over an 8 kHz mu-law telephony channel, it reaches 94.75% accuracy at a 5.05% EER, with a supervised-track AUC of 0.9948 (fused: 0.9884) and per-attack EERs below 7%. In our prototype, the feature front end runs as bit-exact integer code on one Arm Cortex-A53 core, and the classifier and fusion stage are synthesized for a Xilinx Zynq UltraScale+ MPSoC using no DSP slices, returning a decision 220 ns after a feature vector is ready. These results indicate that deepfake screening can be placed inline without GPUs or floating-point hardware; generalization to unseen generators is left to future work.

Key findings

SENTRY achieved 98.75% accuracy and 1.25% EER on WaveFake, perfectly separating HiFi-GAN and WaveGlow. On ASVspoof 2019 LA (A01–A06) over an 8 kHz telephony channel, it reached 94.75% accuracy and 5.05% EER. The system demonstrates that real-time deepfake screening can be placed inline without GPUs or floating-point hardware, with the feature front end running on an Arm Cortex-A53 and the classifier/fusion on a Xilinx Zynq UltraScale+ MPSoC using no DSP slices.

Approach

SENTRY uses an integer lifting-wavelet front end with multiplier-free transforms (wavelet-packet envelopes, Walsh-Hadamard sequency profiles, waveform micro-statistics, and long-term spectral features) that rely only on integer add, shift, compare, and bitwise operations. These features feed into a supervised gradient-boosted tree classifier and an unsupervised Mahalanobis out-of-distribution detector, whose outputs are fused by a logistic layer to provide real-time deepfake detection.

Datasets

WaveFake, ASVspoof 2019 LA (attacks A01–A06)

Model(s)

Gradient-boosted tree classifier, Mahalanobis out-of-distribution detector, Logistic decision layer

Author countries

India

← Previous