Black-Box Adversarial Attacks against Audio Forensics Models

Table 4

Detection accuracy of original models and reinforced models on original examples (%).

Victim models	Original models	Reinforced models
ResNet	99.90	94.12
SEnet	99.85	99.57
AFnet	99.57	99.38
CNN-GRU	99.96	99.27
Average	99.82	98.09