It is also effective under other attack classes, and can mitigate the adversarial effect in wordpiece models by 21%, character-only models by 19%, and in word, and word+char models by over 4.5% .
these gains do not consistently translate in all other settings, as lower WER is necessary but not sufficient.