audio stream fingerprinting (timestamps, RTP validation), anti-replay cache, unpredictable dynamic challenge (random phrase repetition), timing analysis.
The threat
the attacker replays a recording (the victim's voice or pre-recorded answers, static cloned messages) instead of speaking live, to pass a voice check or a challenge.
Angle mortWhy classic frameworks miss it
a simple is-a-voice-here check does not tell live speech from a recording; the reuse risk is invisible if the audio input is not profiled (timestamps, stream).
MitigationProposed approach
audio stream fingerprinting (timestamps, RTP validation), anti-replay cache, unpredictable dynamic challenge (random phrase repetition), timing analysis.
The proposed control
a previously-seen stream is refused, the challenge cannot be replayed.
Expected evidence
a replayed recording is rejected before any action.