Towards Generating Adversarial Examples on Combined Systems of Automatic Speaker Verification and Spoofing Countermeasure

Table 2

The performance of ASV-S, CM, and tandem systems.

System
	FGSM		PGD-100		FGSM		PGD-100
	FAR (%)	t-DCF	FAR (%)	t-DCF	FAR (%)	t-DCF	FAR (%)	t-DCF
ASV-S	20.1	—	23.4	—	46.4	—	82.9	—
CM	15.6	—	18.9	—	38.7	—	73.6	—
Tandem	10.2	0.213	14.3	0.369	32.5	0.675	69.9	0.852
System
	FGSM		PGD-100		FGSM		PGD-100
	FAR (%)	t-DCF	FAR (%)	t-DCF	FAR (%)	t-DCF	FAR (%)	t-DCF
ASV-S	64.2	—	92.4	—	91.0	—	97.3	—
CM	59.6	—	90.7	—	87.3	—	98.1	—
Tandem	55.4	0.807	87.1	0.964	81.0	0.928	96.7	1.000