Fig. 2From: Towards the universal defense for query-based audio adversarial attacks on speech recognition systemQuery-based attack: setting a target, for the first time \({x^\mathrm{{*}}}\mathrm{{ = }}x\), if \(x^*\) can be transcribed as a target, the AE is true, else false, adjust the \(\delta\) carefully, and perform the next query. Repeat this process until \(x^*\) can be transcribed as the targetBack to article page