Black-Box Adversarial Attacks against Audio Forensics Models

Table 5

Score-only black-box attack success rate on original models and reinforced models.

Victim models	Original models	Reinforced models
ResNet	99	1
SEnet	100	28
AFnet	98	0
CNN-GRU	97	36
Average	98.5	16.25

The bold values are the best results from our proposed method.