Before revision:  As the very beginning work in this direction of detecting adversarial samples for ASV, there is no reliable baseline for comparison.
After revision:  This effort is, to the best of our knowledge, among the first to pursue such a technical direction for detecting adversarial samples for ASV, there is no reliable baseline for comparison.