Fig. 5From: Towards the universal defense for query-based audio adversarial attacks on speech recognition systemk and \(\delta\): the mean k number of the \(0.1\%\) percentile of the datasets as a function of kBack to article page