Legend:
Original Audio: Normal noisy input to the model, x
Initial Model Output: Normal model behavior f (x), i.e., ŷ
Attacked Audio: Original audio plus a perturbation convolved with the same RIR: x + r ∗ δ
Attacked Model Output: f (x + r ∗ δ)
Original Audio
Initial Model Output
Attacked Audio
Attacked Model Output
Original Audio
Initial Model Output
Attacked Audio
Attacked Model Output
Original Audio
Initial Model Output
Attacked Audio
Attacked Model Output