{"id":"https://openalex.org/W2962818281","doi":"https://doi.org/10.1109/spw.2018.00016","title":"Black-Box Generation of Adversarial Text Sequences to Evade Deep Learning Classifiers","display_name":"Black-Box Generation of Adversarial Text Sequences to Evade Deep Learning Classifiers","publication_year":2018,"publication_date":"2018-05-01","ids":{"openalex":"https://openalex.org/W2962818281","doi":"https://doi.org/10.1109/spw.2018.00016","mag":"2962818281"},"language":"en","primary_location":{"id":"doi:10.1109/spw.2018.00016","doi":"https://doi.org/10.1109/spw.2018.00016","is_oa":true,"landing_page_url":"https://doi.org/10.1109/spw.2018.00016","pdf_url":"https://ieeexplore.ieee.org/ielx7/8420091/8424589/08424632.pdf","source":{"id":"https://openalex.org/S7407086408","display_name":"IEEE Security and Privacy Workshops (SPW)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE Security and Privacy Workshops (SPW)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://ieeexplore.ieee.org/ielx7/8420091/8424589/08424632.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101492873","display_name":"Ji Gao","orcid":"https://orcid.org/0000-0002-5976-2507","observed_orcids":["https://orcid.org/0000-0002-5976-2507"]},"institutions":[{"id":"https://openalex.org/I51556381","display_name":"University of Virginia","ror":"https://ror.org/0153tk833","country_code":"US","type":"education","lineage":["https://openalex.org/I51556381"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ji Gao","raw_affiliation_strings":["Department of Computer Science, University of Virginia; {jg6yd","Department of Computer Science, University of Virginia","{jg6yd"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Virginia; {jg6yd","institution_ids":["https://openalex.org/I51556381"]},{"raw_affiliation_string":"Department of Computer Science, University of Virginia","institution_ids":["https://openalex.org/I51556381"]},{"raw_affiliation_string":"{jg6yd","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016503379","display_name":"Jack Lanchantin","orcid":"https://orcid.org/0000-0003-0811-0944","observed_orcids":["https://orcid.org/0000-0003-0811-0944"]},"institutions":[{"id":"https://openalex.org/I51556381","display_name":"University of Virginia","ror":"https://ror.org/0153tk833","country_code":"US","type":"education","lineage":["https://openalex.org/I51556381"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jack Lanchantin","raw_affiliation_strings":["Department of Computer Science, University of Virginia; {jg6yd","Department of Computer Science, University of Virginia","{jg6yd"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Virginia; {jg6yd","institution_ids":["https://openalex.org/I51556381"]},{"raw_affiliation_string":"Department of Computer Science, University of Virginia","institution_ids":["https://openalex.org/I51556381"]},{"raw_affiliation_string":"{jg6yd","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047746948","display_name":"Mary Lou Soffa","orcid":"https://orcid.org/0000-0002-3665-7763","observed_orcids":["https://orcid.org/0000-0002-3665-7763"]},"institutions":[{"id":"https://openalex.org/I51556381","display_name":"University of Virginia","ror":"https://ror.org/0153tk833","country_code":"US","type":"education","lineage":["https://openalex.org/I51556381"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mary Lou Soffa","raw_affiliation_strings":["Department of Computer Science, University of Virginia; {jg6yd","Department of Computer Science, University of Virginia","{jg6yd"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Virginia; {jg6yd","institution_ids":["https://openalex.org/I51556381"]},{"raw_affiliation_string":"Department of Computer Science, University of Virginia","institution_ids":["https://openalex.org/I51556381"]},{"raw_affiliation_string":"{jg6yd","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101887931","display_name":"Yanjun Qi","orcid":"https://orcid.org/0000-0002-5796-7453","observed_orcids":["https://orcid.org/0000-0002-5796-7453","https://orcid.org/0009-0001-2178-4700"]},"institutions":[{"id":"https://openalex.org/I51556381","display_name":"University of Virginia","ror":"https://ror.org/0153tk833","country_code":"US","type":"education","lineage":["https://openalex.org/I51556381"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yanjun Qi","raw_affiliation_strings":["Department of Computer Science, University of Virginia; {jg6yd","Department of Computer Science, University of Virginia","{jg6yd"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Virginia; {jg6yd","institution_ids":["https://openalex.org/I51556381"]},{"raw_affiliation_string":"Department of Computer Science, University of Virginia","institution_ids":["https://openalex.org/I51556381"]},{"raw_affiliation_string":"{jg6yd","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I51556381"],"apc_list":null,"apc_paid":null,"fwci":21.3994,"has_fulltext":true,"cited_by_count":739,"citation_normalized_percentile":{"value":0.99454377,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"50","last_page":"56"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-text-generation","display_name":"adversarial text generation","score":0.703000009059906},{"id":"https://openalex.org/keywords/black-box-attacks","display_name":"black-box attacks","score":0.949999988079071},{"id":"https://openalex.org/keywords/text-perturbation","display_name":"text perturbation","score":0.6499999761581421},{"id":"https://openalex.org/keywords/spam-email-classification","display_name":"spam email classification","score":0.8610000014305115},{"id":"https://openalex.org/keywords/imdb-movie-reviews","display_name":"IMDB movie reviews","score":0.7269999980926514}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8348535299301147},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7561154365539551},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.7365266680717468},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.724848747253418},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.704289436340332},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.6223400831222534},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5200580954551697},{"id":"https://openalex.org/C180932941","wikidata":"https://www.wikidata.org/wiki/Q997233","display_name":"White box","level":2,"score":0.49417927861213684},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3324155807495117}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/spw.2018.00016","doi":"https://doi.org/10.1109/spw.2018.00016","is_oa":true,"landing_page_url":"https://doi.org/10.1109/spw.2018.00016","pdf_url":"https://ieeexplore.ieee.org/ielx7/8420091/8424589/08424632.pdf","source":{"id":"https://openalex.org/S7407086408","display_name":"IEEE Security and Privacy Workshops (SPW)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE Security and Privacy Workshops (SPW)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1801.04354","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/1801.04354","pdf_url":"https://arxiv.org/pdf/1801.04354","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.1801.04354","doi":"https://doi.org/10.48550/arxiv.1801.04354","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1801.04354","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1109/spw.2018.00016","doi":"https://doi.org/10.1109/spw.2018.00016","is_oa":true,"landing_page_url":"https://doi.org/10.1109/spw.2018.00016","pdf_url":"https://ieeexplore.ieee.org/ielx7/8420091/8424589/08424632.pdf","source":{"id":"https://openalex.org/S7407086408","display_name":"IEEE Security and Privacy Workshops (SPW)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE Security and Privacy Workshops (SPW)","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2962818281.pdf","grobid_xml":"https://content.openalex.org/works/W2962818281.grobid-xml"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W3805906","https://openalex.org/W1423339008","https://openalex.org/W1498436455","https://openalex.org/W1647671624","https://openalex.org/W1673923490","https://openalex.org/W1932198206","https://openalex.org/W1945616565","https://openalex.org/W2034031845","https://openalex.org/W2064675550","https://openalex.org/W2112796928","https://openalex.org/W2113459411","https://openalex.org/W2117130368","https://openalex.org/W2133564696","https://openalex.org/W2151298633","https://openalex.org/W2160536005","https://openalex.org/W2170240176","https://openalex.org/W2170973209","https://openalex.org/W2180612164","https://openalex.org/W2250539671","https://openalex.org/W2251939518","https://openalex.org/W2274565976","https://openalex.org/W2296452361","https://openalex.org/W2344365922","https://openalex.org/W2516574342","https://openalex.org/W2525778437","https://openalex.org/W2528914598","https://openalex.org/W2609368435","https://openalex.org/W2735135478","https://openalex.org/W2951807304","https://openalex.org/W2963207607","https://openalex.org/W2964153729","https://openalex.org/W2964167098","https://openalex.org/W2964308564","https://openalex.org/W4235765578","https://openalex.org/W6629815555"],"related_works":["https://openalex.org/W3105507000","https://openalex.org/W4416069063","https://openalex.org/W2609368435","https://openalex.org/W2974122258","https://openalex.org/W3004000656","https://openalex.org/W4400269290","https://openalex.org/W4404498972","https://openalex.org/W3026228083","https://openalex.org/W3132424333","https://openalex.org/W2979445021"],"abstract_inverted_index":{"Although":[0],"various":[1],"techniques":[2],"have":[3],"been":[4,18],"proposed":[5],"to":[6,20,39,54,64,70,86,92,128,135],"generate":[7,41],"adversarial":[8,146],"samples":[9],"for":[10],"white-box":[11],"attacks":[12],"on":[13,103,130,137],"text,":[14],"little":[15],"attention":[16],"has":[17],"paid":[19],"a":[21,26,35,46,51,56,78,149],"black-box":[22,47],"attack,":[23],"which":[24],"is":[25],"more":[27],"realistic":[28],"scenario.":[29],"In":[30],"this":[31],"paper,":[32],"we":[33],"present":[34],"novel":[36,61],"algorithm,":[37],"DeepWordBug,":[38],"effectively":[40],"small":[42],"text":[43,57,106],"perturbations":[44],"in":[45,90],"setting":[48],"that":[49,73,119,143],"forces":[50],"deep-learning":[52,150],"classifier":[53,76],"misclassify":[55],"input.":[58],"We":[59,100],"develop":[60],"scoring":[62],"strategies":[63],"find":[65],"the":[66,74,87,94,98,123,144],"most":[67],"important":[68],"words":[69,89],"modify":[71],"such":[72],"deep":[75,156],"makes":[77],"wrong":[79],"prediction.":[80],"Simple":[81],"character-level":[82],"transformations":[83],"are":[84],"applied":[85],"highest-ranked":[88],"order":[91],"minimize":[93],"edit":[95],"distance":[96],"of":[97],"perturbation.":[99],"evaluated":[101],"DeepWordBug":[102,120],"two":[104],"real-world":[105],"datasets:":[107],"Enron":[108,131],"spam":[109],"emails":[110],"and":[111,132],"IMDB":[112],"movie":[113],"reviews.":[114],"Our":[115,139],"experimental":[116],"results":[117,140],"indicate":[118],"can":[121,152],"reduce":[122],"classification":[124],"accuracy":[125],"from":[126,133,148],"99%":[127],"40%":[129],"87%":[134],"26%":[136],"IMDB.":[138],"strongly":[141],"demonstrate":[142],"generated":[145],"sequences":[147],"model":[151],"similarly":[153],"evade":[154],"other":[155],"models.":[157]},"counts_by_year":[{"year":2026,"cited_by_count":53},{"year":2025,"cited_by_count":99},{"year":2024,"cited_by_count":97},{"year":2023,"cited_by_count":137},{"year":2022,"cited_by_count":111},{"year":2021,"cited_by_count":117},{"year":2020,"cited_by_count":84},{"year":2019,"cited_by_count":28},{"year":2018,"cited_by_count":12},{"year":2017,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2019-07-30T00:00:00"}