Before revision:  As the very beginning work in this direction of detecting adversarial samples for ASV, there is no reliable baseline for comparison.
After revision:  As the very beginning work in this direction of detecting adversarial samples for ASV, and hence there is a lack of established baselines for comparison.