Spoofing Speaker Verification System by Adversarial Examples Leveraging the Generalized Speaker Difference

Figure 4

Maximum noise rate for generalized relevancy based attack and multifactor based attack. The ordinate value represents the quantity in this range.