Black-Box Adversarial Attacks against Audio Forensics Models

Table 2

Adversarial attack success rate on score-only black-box models (%).

Victim models	Proposed method
ResNet	99.6
SEnet	99.9
AFnet	98.9
CNN-GRU	97.9