{"id":"https://openalex.org/W4415443929","doi":"https://doi.org/10.1109/tdsc.2025.3624268","title":"Alert-ME: An Explainability-Driven Defense Against Adversarial Examples in Transformer-Based Text Classification","display_name":"Alert-ME: An Explainability-Driven Defense Against Adversarial Examples in Transformer-Based Text Classification","publication_year":2025,"publication_date":"2025-10-22","ids":{"openalex":"https://openalex.org/W4415443929","doi":"https://doi.org/10.1109/tdsc.2025.3624268"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2025.3624268","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3624268","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089776133","display_name":"Bushra Sabir","orcid":"https://orcid.org/0000-0003-4303-5169"},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Bushra Sabir","raw_affiliation_strings":["CSIROs Data61, Eveleigh, NSW, Australia","School of Computer Science, The University of Adelaide, Australia"],"raw_orcid":"https://orcid.org/0000-0003-4303-5169","affiliations":[{"raw_affiliation_string":"CSIROs Data61, Eveleigh, NSW, Australia","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"School of Computer Science, The University of Adelaide, Australia","institution_ids":["https://openalex.org/I5681781"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101863680","display_name":"Yansong Gao","orcid":"https://orcid.org/0000-0001-5783-2172"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]},{"id":"https://openalex.org/I4210102982","display_name":"Centre for Research in Engineering Surface Technology","ror":"https://ror.org/018q3fa22","country_code":"IE","type":"other","lineage":["https://openalex.org/I4210102982"]},{"id":"https://openalex.org/I4210159203","display_name":"Western Australian Marine Science Institution","ror":"https://ror.org/05vtzry32","country_code":"AU","type":"facility","lineage":["https://openalex.org/I4210159203"]}],"countries":["AU","IE"],"is_corresponding":false,"raw_author_name":"Yansong Gao","raw_affiliation_strings":["Department of Computer Science, Software Engineering, University of Western Australia, Crawley, WA, Australia","CREST - The Centre for Research on Engineering Software Technologies, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Software Engineering, University of Western Australia, Crawley, WA, Australia","institution_ids":["https://openalex.org/I177877127","https://openalex.org/I4210159203"]},{"raw_affiliation_string":"CREST - The Centre for Research on Engineering Software Technologies, Australia","institution_ids":["https://openalex.org/I4210102982"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086357020","display_name":"Alsharif Abuadbba","orcid":"https://orcid.org/0000-0001-9695-7947"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Alsharif Abuadbba","raw_affiliation_strings":["CSIROs Data61, Eveleigh, NSW, Australia","CSIROs Data61, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9695-7947","affiliations":[{"raw_affiliation_string":"CSIROs Data61, Eveleigh, NSW, Australia","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"CSIROs Data61, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103075476","display_name":"Muhammad Ali Babar","orcid":"https://orcid.org/0000-0001-9696-3626"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]},{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"M. Ali Babar","raw_affiliation_strings":["School of Computer Science, University of Adelaide, Adelaide, SA, Australia","Deparment of Computer Science and Software Engineering, The University of Western Australia, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9696-3626","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Adelaide, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]},{"raw_affiliation_string":"Deparment of Computer Science and Software Engineering, The University of Western Australia, Australia","institution_ids":["https://openalex.org/I177877127"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.11220035,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"2","first_page":"2085","last_page":"2099"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9894000291824341,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9894000291824341,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8004999756813049},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6478000283241272},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4893999993801117},{"id":"https://openalex.org/keywords/natural-language","display_name":"Natural language","score":0.4742000102996826},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4708000123500824},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.46560001373291016},{"id":"https://openalex.org/keywords/transparency","display_name":"Transparency (behavior)","score":0.44769999384880066},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.382099986076355}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.848800003528595},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8004999756813049},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6478000283241272},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5472999811172485},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4893999993801117},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.4742000102996826},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4708000123500824},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.46560001373291016},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.44769999384880066},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.39320001006126404},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.382099986076355},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.3531000018119812},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.33730000257492065},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.301800012588501},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.29589998722076416},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.28940001130104065},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.2847999930381775},{"id":"https://openalex.org/C44359876","wikidata":"https://www.wikidata.org/wiki/Q5338467","display_name":"Edit distance","level":2,"score":0.2689000070095062},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2630000114440918},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.2590000033378601},{"id":"https://openalex.org/C2779791154","wikidata":"https://www.wikidata.org/wiki/Q258040","display_name":"Model transformation","level":3,"score":0.2563999891281128},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.25380000472068787},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.25279998779296875}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3624268","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3624268","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W2081580037","https://openalex.org/W2166391512","https://openalex.org/W2250539671","https://openalex.org/W2282821441","https://openalex.org/W2493916176","https://openalex.org/W2800788706","https://openalex.org/W2883364792","https://openalex.org/W2905526464","https://openalex.org/W2918408501","https://openalex.org/W2949128310","https://openalex.org/W2962818281","https://openalex.org/W2963341956","https://openalex.org/W2973136764","https://openalex.org/W2979826702","https://openalex.org/W2982054702","https://openalex.org/W2996851481","https://openalex.org/W2999309192","https://openalex.org/W3035441470","https://openalex.org/W3085753079","https://openalex.org/W3101449015","https://openalex.org/W3104423855","https://openalex.org/W3105604018","https://openalex.org/W3127569499","https://openalex.org/W3155936402","https://openalex.org/W3168586460","https://openalex.org/W3169965252","https://openalex.org/W3176196997","https://openalex.org/W3197868468","https://openalex.org/W3204619801","https://openalex.org/W3213226566","https://openalex.org/W4211137019","https://openalex.org/W4230405732","https://openalex.org/W4239025696","https://openalex.org/W4251372957","https://openalex.org/W4285049279","https://openalex.org/W4285116762","https://openalex.org/W4285204696","https://openalex.org/W4285266418","https://openalex.org/W4285550464","https://openalex.org/W4313196990","https://openalex.org/W4321786089","https://openalex.org/W4383221565","https://openalex.org/W4385245566","https://openalex.org/W4392849751"],"related_works":[],"abstract_inverted_index":{"Transformer-based":[0],"Text":[1],"Classifiers":[2],"(TTC),":[3],"exemplified":[4],"by":[5,287],"models":[6],"like":[7,255],"BERT,":[8],"Roberta,":[9],"T5,":[10],"and":[11,48,77,83,114,136,147,159,171,188,201,206,212,230,258,265,275,285,290,339],"GPT,":[12],"have":[13],"showcased":[14],"impressive":[15],"proficiency":[16],"in":[17,226,234,239,247],"Natural":[18],"Language":[19],"Processing":[20],"(NLP).":[21],"Nonetheless,":[22],"their":[23],"vulnerability":[24],"to":[25,36,59,117,143,215],"adversarial":[26,103,299],"examples":[27,104,300],"(AEs)":[28],"presents":[29],"a":[30,53,140],"substantial":[31],"security":[32,141],"concern.":[33],"Existing":[34],"efforts":[35],"fortify":[37],"model":[38,115],"robustness":[39],"either":[40],"entail":[41],"high":[42],"computational":[43,346],"costs":[44],"or":[45],"lack":[46],"transparency":[47],"interpretability.":[49],"This":[50],"paper":[51],"introduces":[52],"holistic":[54],"framework":[55,132,156,177],"calledExplainability-drivenDetection,Identification,":[56],"andTransformation":[57],"(EDIT)":[58],"address":[60],"the":[61,92,119,131,134,311],"shortcomings":[62],"of":[63,85,190,204,307,321,332,341],"prevailing":[64],"inference-time":[65],"defenses.":[66],"(i)":[67],"EDIT":[68,100,196,309,326],"employs":[69],"explainability":[70],"methodologies":[71],"(e.g.,":[72],"attention":[73],"maps,":[74],"integrated":[75],"gradients)":[76],"frequency":[78],"features":[79],"for":[80,122,139,313],"automated":[81],"detection":[82],"identification":[84,251],"perturbed":[86,124],"words":[87],"while":[88,344],"providing":[89],"insights":[90],"into":[91,301],"model's":[93],"decision-making":[94],"process.":[95],"(ii)":[96],"Building":[97],"upon":[98],"detection,":[99],"purifies":[101],"detected":[102],"through":[105],"an":[106,198,305,317,328],"optimal":[107],"transformation":[108,295],"mechanism":[109],"that":[110,195],"utilizes":[111],"pre-trained":[112],"embeddings":[113],"feedback":[116],"find":[118],"best":[120],"replacements":[121],"identified":[123],"words.":[125],"(iii)":[126],"To":[127],"integrate":[128],"human":[129,150,314],"intelligence,":[130],"automates":[133],"process":[135],"triggers":[137],"alerts":[138,324],"analyst":[142],"ensure":[144],"secure":[145],"safeguards":[146],"enable":[148],"proactive":[149],"feedback.":[151],"We":[152,173],"comprehensively":[153],"evaluate":[154],"our":[155,176,220],"on":[157,162],"BERT":[158],"ROBERTA,":[160],"trained":[161],"four":[163,216],"SOTA":[164,180,217],"text":[165],"classification":[166],"datasets:":[167],"IMDB,":[168],"YELP,":[169],"AGNEWS,":[170],"SST2.":[172],"also":[174,237],"assess":[175],"against":[178],"seven":[179],"Word":[181],"Substitution":[182],"Attacks":[183],"(WSA)":[184],"at":[185],"character,":[186],"word,":[187],"multi-levels":[189],"granularity.":[191],"The":[192,250],"results":[193],"show":[194],"achieves":[197,327],"average":[199,318,329],"F-score":[200],"balanced":[202,227],"accuracy":[203,228,306,320,331],"89.69%":[205],"89.70%,":[207],"respectively,":[208],"across":[209,334],"all":[210,335,343],"datasets":[211],"classifiers.":[213],"Compared":[214],"inference":[218],"defenses,":[219],"detector":[221],"is":[222],"1.22":[223],"times":[224,232,245,262,268,272,277],"better":[225,233,263],"(BAL_ACC)":[229],"1.33":[231],"F1-Score.":[235,279],"It":[236,280],"excels":[238],"operational":[240],"efficiency,":[241,347],"being":[242],"about":[243],"83":[244],"faster":[246],"feature":[248],"extraction.":[249],"module":[252,296],"outperforms":[253],"techniques":[254],"ReplaceScore,":[256],"FreqScore,":[257],"ExplainScore,":[259],"achieving":[260],"1.125":[261],"BAL_ACC":[264],"Recall,":[266],"1.142":[267],"higher":[269],"AUC,":[270],"1.120":[271],"greater":[273],"Precision,":[274],"1.149":[276],"improved":[278],"significantly":[281],"reduces":[282],"false":[283],"positives":[284],"negatives":[286],"approximately":[288],"1.537":[289],"1.172":[291],"times,":[292],"respectively.":[293],"Our":[294],"effectively":[297],"converts":[298],"non-adversarial":[302],"counterparts":[303],"with":[304,316],"91%.":[308],"identifies":[310],"necessity":[312],"intervention":[315],"median":[319,330],"89%.":[322],"With":[323],"integrated,":[325],"90%":[333],"evaluated":[336],"datasets,":[337],"models,":[338],"types":[340],"attacks,":[342],"maintaining":[345],"averaging":[348],"6.94":[349],"seconds.":[350]},"counts_by_year":[],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-24T00:00:00"}