{"id":"https://openalex.org/W3184599456","doi":"https://doi.org/10.1109/access.2022.3148413","title":"A Differentiable Language Model Adversarial Attack on Text Classifiers","display_name":"A Differentiable Language Model Adversarial Attack on Text Classifiers","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W3184599456","doi":"https://doi.org/10.1109/access.2022.3148413","mag":"3184599456"},"language":"en","primary_location":{"id":"doi:10.1109/access.2022.3148413","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3148413","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09712314.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09712314.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047409045","display_name":"Ivan Fursov","orcid":"https://orcid.org/0000-0002-4599-0701"},"institutions":[{"id":"https://openalex.org/I125989756","display_name":"Skolkovo Institute of Science and Technology","ror":"https://ror.org/03f9nc143","country_code":"RU","type":"education","lineage":["https://openalex.org/I125989756"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Ivan Fursov","raw_affiliation_strings":["Skolkovo Institute of Science and Technology, Moscow, Russia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Skolkovo Institute of Science and Technology, Moscow, Russia","institution_ids":["https://openalex.org/I125989756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011905327","display_name":"Alexey Zaytsev","orcid":"https://orcid.org/0000-0002-1653-0204"},"institutions":[{"id":"https://openalex.org/I125989756","display_name":"Skolkovo Institute of Science and Technology","ror":"https://ror.org/03f9nc143","country_code":"RU","type":"education","lineage":["https://openalex.org/I125989756"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Alexey Zaytsev","raw_affiliation_strings":["Skolkovo Institute of Science and Technology, Moscow, Russia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Skolkovo Institute of Science and Technology, Moscow, Russia","institution_ids":["https://openalex.org/I125989756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011784224","display_name":"Pavel Burnyshev","orcid":"https://orcid.org/0000-0002-6794-2567"},"institutions":[{"id":"https://openalex.org/I125989756","display_name":"Skolkovo Institute of Science and Technology","ror":"https://ror.org/03f9nc143","country_code":"RU","type":"education","lineage":["https://openalex.org/I125989756"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Pavel Burnyshev","raw_affiliation_strings":["Skolkovo Institute of Science and Technology, Moscow, Russia","Huawei Noah's Ark Laboratory, Moscow, Russia"],"raw_orcid":"https://orcid.org/0000-0002-6794-2567","affiliations":[{"raw_affiliation_string":"Skolkovo Institute of Science and Technology, Moscow, Russia","institution_ids":["https://openalex.org/I125989756"]},{"raw_affiliation_string":"Huawei Noah's Ark Laboratory, Moscow, Russia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101125653","display_name":"Ekaterina Dmitrieva","orcid":null},"institutions":[{"id":"https://openalex.org/I118501908","display_name":"National Research University Higher School of Economics","ror":"https://ror.org/055f7t516","country_code":"RU","type":"education","lineage":["https://openalex.org/I118501908"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Ekaterina Dmitrieva","raw_affiliation_strings":["HSE University, Moscow, Russia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"HSE University, Moscow, Russia","institution_ids":["https://openalex.org/I118501908"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066231807","display_name":"Nikita Klyuchnikov","orcid":"https://orcid.org/0000-0001-5065-4000"},"institutions":[{"id":"https://openalex.org/I125989756","display_name":"Skolkovo Institute of Science and Technology","ror":"https://ror.org/03f9nc143","country_code":"RU","type":"education","lineage":["https://openalex.org/I125989756"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Nikita Klyuchnikov","raw_affiliation_strings":["Skolkovo Institute of Science and Technology, Moscow, Russia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Skolkovo Institute of Science and Technology, Moscow, Russia","institution_ids":["https://openalex.org/I125989756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065777566","display_name":"Andrey Kravchenko","orcid":"https://orcid.org/0000-0002-9066-7743"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Andrey Kravchenko","raw_affiliation_strings":["University of Oxford, Oxford, U.K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Oxford, Oxford, U.K","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103157023","display_name":"Ekaterina Artemova","orcid":"https://orcid.org/0000-0001-8689-7514"},"institutions":[{"id":"https://openalex.org/I118501908","display_name":"National Research University Higher School of Economics","ror":"https://ror.org/055f7t516","country_code":"RU","type":"education","lineage":["https://openalex.org/I118501908"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Ekaterina Artemova","raw_affiliation_strings":["Huawei Noah&#x2019;s Ark Laboratory, Moscow, Russia","HSE University, Moscow, Russia"],"raw_orcid":"https://orcid.org/0000-0001-8689-7514","affiliations":[{"raw_affiliation_string":"Huawei Noah&#x2019;s Ark Laboratory, Moscow, Russia","institution_ids":[]},{"raw_affiliation_string":"HSE University, Moscow, Russia","institution_ids":["https://openalex.org/I118501908"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108043630","display_name":"Evgenia Komleva","orcid":"https://orcid.org/0000-0003-1139-0457"},"institutions":[{"id":"https://openalex.org/I125989756","display_name":"Skolkovo Institute of Science and Technology","ror":"https://ror.org/03f9nc143","country_code":"RU","type":"education","lineage":["https://openalex.org/I125989756"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Evgenia Komleva","raw_affiliation_strings":["Skolkovo Institute of Science and Technology, Moscow, Russia"],"raw_orcid":"https://orcid.org/0000-0003-1139-0457","affiliations":[{"raw_affiliation_string":"Skolkovo Institute of Science and Technology, Moscow, Russia","institution_ids":["https://openalex.org/I125989756"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088950452","display_name":"Evgeny Burnaev","orcid":"https://orcid.org/0000-0001-8424-0690"},"institutions":[{"id":"https://openalex.org/I125989756","display_name":"Skolkovo Institute of Science and Technology","ror":"https://ror.org/03f9nc143","country_code":"RU","type":"education","lineage":["https://openalex.org/I125989756"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Evgeny Burnaev","raw_affiliation_strings":["Skolkovo Institute of Science and Technology, Moscow, Russia","Artificial Intelligence Research Institute (AIRI), Moscow, Russia"],"raw_orcid":"https://orcid.org/0000-0001-8424-0690","affiliations":[{"raw_affiliation_string":"Skolkovo Institute of Science and Technology, Moscow, Russia","institution_ids":["https://openalex.org/I125989756"]},{"raw_affiliation_string":"Artificial Intelligence Research Institute (AIRI), Moscow, Russia","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":2.6359,"has_fulltext":true,"cited_by_count":21,"citation_normalized_percentile":{"value":0.90904864,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"10","issue":null,"first_page":"17966","last_page":"17976"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9750999808311462,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.963699996471405,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8399198651313782},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7232802510261536},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6858752965927124},{"id":"https://openalex.org/keywords/differentiable-function","display_name":"Differentiable function","score":0.6020286679267883},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.5764732956886292},{"id":"https://openalex.org/keywords/sentence","display_name":"Sentence","score":0.5708447098731995},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.545903742313385},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.5065680742263794},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.49559271335601807},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4801049530506134},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.46538984775543213},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.42488011717796326},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.419108510017395},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.16497880220413208}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8399198651313782},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7232802510261536},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6858752965927124},{"id":"https://openalex.org/C202615002","wikidata":"https://www.wikidata.org/wiki/Q783507","display_name":"Differentiable function","level":2,"score":0.6020286679267883},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.5764732956886292},{"id":"https://openalex.org/C2777530160","wikidata":"https://www.wikidata.org/wiki/Q41796","display_name":"Sentence","level":2,"score":0.5708447098731995},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.545903742313385},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.5065680742263794},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.49559271335601807},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4801049530506134},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.46538984775543213},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.42488011717796326},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.419108510017395},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.16497880220413208},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C165801399","wikidata":"https://www.wikidata.org/wiki/Q25428","display_name":"Voltage","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2022.3148413","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3148413","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09712314.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:e2f229a2859e4828bfbb901ea2a2a829","is_oa":true,"landing_page_url":"https://doaj.org/article/e2f229a2859e4828bfbb901ea2a2a829","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 10, Pp 17966-17976 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2022.3148413","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2022.3148413","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09712314.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.7799999713897705,"id":"https://metadata.un.org/sdg/4","display_name":"Quality Education"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3184599456.pdf","grobid_xml":"https://content.openalex.org/works/W3184599456.grobid-xml"},"referenced_works_count":91,"referenced_works":["https://openalex.org/W1821462560","https://openalex.org/W1945616565","https://openalex.org/W2163455955","https://openalex.org/W2170240176","https://openalex.org/W2251939518","https://openalex.org/W2547875792","https://openalex.org/W2552767274","https://openalex.org/W2609368435","https://openalex.org/W2735135478","https://openalex.org/W2799194071","https://openalex.org/W2803831897","https://openalex.org/W2885318751","https://openalex.org/W2890719433","https://openalex.org/W2890969459","https://openalex.org/W2896457183","https://openalex.org/W2905526464","https://openalex.org/W2908442265","https://openalex.org/W2915238810","https://openalex.org/W2926587947","https://openalex.org/W2932893307","https://openalex.org/W2947415936","https://openalex.org/W2949128310","https://openalex.org/W2949676527","https://openalex.org/W2950606982","https://openalex.org/W2950733407","https://openalex.org/W2962700793","https://openalex.org/W2962782614","https://openalex.org/W2962818281","https://openalex.org/W2962982907","https://openalex.org/W2963083752","https://openalex.org/W2963100531","https://openalex.org/W2963178695","https://openalex.org/W2963206148","https://openalex.org/W2963207607","https://openalex.org/W2963389226","https://openalex.org/W2963403868","https://openalex.org/W2963600562","https://openalex.org/W2963809642","https://openalex.org/W2963823140","https://openalex.org/W2963834268","https://openalex.org/W2963859254","https://openalex.org/W2964153729","https://openalex.org/W2965373594","https://openalex.org/W2966149470","https://openalex.org/W2996851481","https://openalex.org/W2998277219","https://openalex.org/W2998604177","https://openalex.org/W3004786215","https://openalex.org/W3010186808","https://openalex.org/W3012613466","https://openalex.org/W3013371788","https://openalex.org/W3013520104","https://openalex.org/W3015001695","https://openalex.org/W3023553115","https://openalex.org/W3027211216","https://openalex.org/W3034397670","https://openalex.org/W3035441470","https://openalex.org/W3037045905","https://openalex.org/W3037109418","https://openalex.org/W3087231533","https://openalex.org/W3099126561","https://openalex.org/W3100202075","https://openalex.org/W3101449015","https://openalex.org/W3104423855","https://openalex.org/W3105604018","https://openalex.org/W3116387889","https://openalex.org/W4288594304","https://openalex.org/W4288953700","https://openalex.org/W6637162671","https://openalex.org/W6638523607","https://openalex.org/W6640425456","https://openalex.org/W6685053522","https://openalex.org/W6691459498","https://openalex.org/W6729448088","https://openalex.org/W6729756640","https://openalex.org/W6734716764","https://openalex.org/W6737220129","https://openalex.org/W6739901393","https://openalex.org/W6741419198","https://openalex.org/W6752083044","https://openalex.org/W6753579488","https://openalex.org/W6755007375","https://openalex.org/W6763636181","https://openalex.org/W6765039553","https://openalex.org/W6766673545","https://openalex.org/W6768492035","https://openalex.org/W6772640148","https://openalex.org/W6773410612","https://openalex.org/W6774596189","https://openalex.org/W6775067480","https://openalex.org/W6782926819"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W3008339103","https://openalex.org/W2404647514","https://openalex.org/W1667647204","https://openalex.org/W4247536566","https://openalex.org/W3119814709","https://openalex.org/W4246396837","https://openalex.org/W2482350142","https://openalex.org/W3176240006","https://openalex.org/W3126451824"],"abstract_inverted_index":{"Transformer":[0],"models":[1,39,60,228],"play":[2],"a":[3,71,79,84,148,156,171,182,195],"crucial":[4],"role":[5],"in":[6,15,99,140],"state":[7],"of":[8,18,26,36,58,64,74,91,134,198,213,255],"the":[9,16,88,123,135,189,211,214,218,239,245,252],"art":[10],"solutions":[11],"to":[12,47,53,78,87,110,115,160,210,224,236],"problems":[13,200],"arising":[14],"field":[17],"natural":[19],"language":[20,158,216],"processing":[21],"(NLP).":[22],"They":[23],"have":[24],"billions":[25],"parameters":[27],"and":[28,55,131,175,205],"are":[29,102,137,222,229],"typically":[30],"considered":[31],"as":[32],"black":[33],"boxes.":[34],"Robustness":[35],"huge":[37],"Transformer-based":[38],"for":[40,201,247],"NLP":[41,199],"is":[42,61,114,234,243],"an":[43,62,65,75,176],"important":[44],"question":[45],"due":[46,209],"their":[48],"wide":[49],"adoption.":[50],"One":[51],"way":[52],"understand":[54],"improve":[56],"robustness":[57],"these":[59],"exploration":[63],"adversarial":[66,95,162,220],"attack":[67,191,250],"scenario:":[68],"check":[69],"if":[70],"small":[72],"perturbation":[73],"input":[76],"invisible":[77],"human":[80,206],"eye":[81],"can":[82],"fool":[83],"model.":[85,185],"Due":[86],"discrete":[89],"nature":[90],"textual":[92],"data,":[93],"gradient-based":[94],"methods,":[96],"widely":[97],"used":[98],"computer":[100],"vision,":[101],"not":[103,121,230,244],"applicable":[104],"per":[105],"se.":[106],"The":[107,128],"standard":[108],"strategy":[109],"overcome":[111],"this":[112,144],"issue":[113],"develop":[116],"token-level":[117],"transformations,":[118],"which":[119,242],"do":[120],"take":[122],"whole":[124],"sentence":[125,136],"into":[126],"account.":[127],"semantic":[129],"meaning":[130],"grammatical":[132],"correctness":[133],"often":[138],"lost":[139],"such":[141],"approaches":[142],"In":[143],"paper,":[145],"we":[146],"propose":[147],"new":[149],"black-box":[150],"sentence-level":[151],"attack.":[152],"Our":[153,249],"method":[154],"fine-tunes":[155],"pre-trained":[157],"model":[159],"generate":[161],"examples.":[163],"A":[164],"proposed":[165,190,240],"differentiable":[166],"loss":[167],"function":[168],"depends":[169],"on":[170,194,258],"substitute":[172],"classifier":[173],"score":[174],"approximate":[177],"edit":[178],"distance":[179],"computed":[180,203],"via":[181],"deep":[183],"learning":[184],"We":[186],"show":[187],"that":[188],"outperforms":[192],"competitors":[193],"diverse":[196],"set":[197],"both":[202],"metrics":[204],"evaluation.":[207],"Moreover,":[208],"usage":[212],"fine-tuned":[215],"model,":[217],"generated":[219],"examples":[221],"hard":[223],"detect,":[225],"thus":[226],"current":[227],"robust.":[231],"Hence,":[232],"it":[233],"difficult":[235],"defend":[237],"from":[238],"attack,":[241,265,269],"case":[246],"others.":[248],"demonstrates":[251],"highest":[253],"decrease":[254],"classification":[256],"accuracy":[257],"all":[259],"datasets(on":[260],"AG":[261],"news:":[262],"0.95":[263],"without":[264],"0.89":[266],"under":[267,271],"SamplingFool":[268],"0.82":[270],"DILMA":[272],"attack).":[273]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}
