{"id":"https://openalex.org/W3129468510","doi":"https://doi.org/10.1145/3442381.3450034","title":"A Targeted Attack on Black-Box Neural Machine Translation with Parallel Data Poisoning","display_name":"A Targeted Attack on Black-Box Neural Machine Translation with Parallel Data Poisoning","publication_year":2021,"publication_date":"2021-04-19","ids":{"openalex":"https://openalex.org/W3129468510","doi":"https://doi.org/10.1145/3442381.3450034","mag":"3129468510"},"language":"en","primary_location":{"id":"doi:10.1145/3442381.3450034","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3442381.3450034","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Web Conference 2021","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3442381.3450034","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001529504","display_name":"Chang Xu","orcid":"https://orcid.org/0000-0002-4756-0609"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chang Xu","raw_affiliation_strings":["University of Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100384886","display_name":"Jun Wang","orcid":"https://orcid.org/0000-0003-2177-9757"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Jun Wang","raw_affiliation_strings":["University of Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071179460","display_name":"Yuqing Tang","orcid":"https://orcid.org/0000-0002-5919-1804"},"institutions":[{"id":"https://openalex.org/I4210114444","display_name":"Meta (United States)","ror":"https://ror.org/01zbnvs85","country_code":"US","type":"company","lineage":["https://openalex.org/I4210114444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuqing Tang","raw_affiliation_strings":["Facebook AI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Facebook AI, USA","institution_ids":["https://openalex.org/I4210114444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113551755","display_name":"Francisco Guzm\u00e1n","orcid":null},"institutions":[{"id":"https://openalex.org/I4210114444","display_name":"Meta (United States)","ror":"https://ror.org/01zbnvs85","country_code":"US","type":"company","lineage":["https://openalex.org/I4210114444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Francisco Guzm\u00e1n","raw_affiliation_strings":["Facebook AI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Facebook AI, USA","institution_ids":["https://openalex.org/I4210114444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078824132","display_name":"Benjamin I. P. Rubinstein","orcid":"https://orcid.org/0000-0002-2947-6980"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Benjamin I. P. Rubinstein","raw_affiliation_strings":["University of Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078530959","display_name":"Trevor Cohn","orcid":"https://orcid.org/0000-0003-4363-1673"},"institutions":[{"id":"https://openalex.org/I165779595","display_name":"The University of Melbourne","ror":"https://ror.org/01ej9dk98","country_code":"AU","type":"education","lineage":["https://openalex.org/I165779595"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Trevor Cohn","raw_affiliation_strings":["University of Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Melbourne, Australia","institution_ids":["https://openalex.org/I165779595"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.6374,"has_fulltext":false,"cited_by_count":21,"citation_normalized_percentile":{"value":0.91834166,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"3638","last_page":"3650"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9861999750137329,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.9824000000953674,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7719250917434692},{"id":"https://openalex.org/keywords/machine-translation","display_name":"Machine translation","score":0.6543826460838318},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.6477261781692505},{"id":"https://openalex.org/keywords/translation","display_name":"Translation (biology)","score":0.5115945935249329},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3981655538082123}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7719250917434692},{"id":"https://openalex.org/C203005215","wikidata":"https://www.wikidata.org/wiki/Q79798","display_name":"Machine translation","level":2,"score":0.6543826460838318},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.6477261781692505},{"id":"https://openalex.org/C149364088","wikidata":"https://www.wikidata.org/wiki/Q185917","display_name":"Translation (biology)","level":4,"score":0.5115945935249329},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3981655538082123},{"id":"https://openalex.org/C105580179","wikidata":"https://www.wikidata.org/wiki/Q188928","display_name":"Messenger RNA","level":3,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3442381.3450034","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3442381.3450034","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Web Conference 2021","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2011.00675","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2011.00675","pdf_url":"https://arxiv.org/pdf/2011.00675","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3442381.3450034","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3442381.3450034","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Web Conference 2021","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.8199999928474426,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":61,"referenced_works":["https://openalex.org/W630532510","https://openalex.org/W1546773937","https://openalex.org/W1902237438","https://openalex.org/W2007562169","https://openalex.org/W2124807415","https://openalex.org/W2146729596","https://openalex.org/W2151298633","https://openalex.org/W2160289821","https://openalex.org/W2169200297","https://openalex.org/W2183341477","https://openalex.org/W2251654371","https://openalex.org/W2402124760","https://openalex.org/W2408141691","https://openalex.org/W2419539795","https://openalex.org/W2496235729","https://openalex.org/W2525778437","https://openalex.org/W2595715041","https://openalex.org/W2613904329","https://openalex.org/W2748789698","https://openalex.org/W2766108848","https://openalex.org/W2767899794","https://openalex.org/W2773493195","https://openalex.org/W2774423163","https://openalex.org/W2811010710","https://openalex.org/W2889326796","https://openalex.org/W2903035303","https://openalex.org/W2903193068","https://openalex.org/W2922293812","https://openalex.org/W2933138175","https://openalex.org/W2944815030","https://openalex.org/W2951467133","https://openalex.org/W2952468927","https://openalex.org/W2953830716","https://openalex.org/W2954226438","https://openalex.org/W2962713901","https://openalex.org/W2962784628","https://openalex.org/W2963343288","https://openalex.org/W2963403868","https://openalex.org/W2963532001","https://openalex.org/W2963661177","https://openalex.org/W2963823140","https://openalex.org/W2963888996","https://openalex.org/W2964043980","https://openalex.org/W2970279348","https://openalex.org/W2970295111","https://openalex.org/W2970686691","https://openalex.org/W2970858854","https://openalex.org/W2971045947","https://openalex.org/W2982756474","https://openalex.org/W2998277219","https://openalex.org/W3016622506","https://openalex.org/W3035016936","https://openalex.org/W3035367371","https://openalex.org/W3035577668","https://openalex.org/W3094300879","https://openalex.org/W3099729825","https://openalex.org/W3105425516","https://openalex.org/W3107826490","https://openalex.org/W3158635868","https://openalex.org/W4298140072","https://openalex.org/W4385245566"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W3011059803","https://openalex.org/W4396701345","https://openalex.org/W2883671469","https://openalex.org/W2728761353"],"abstract_inverted_index":{"As":[0],"modern":[1],"neural":[2],"machine":[3],"translation":[4],"(NMT)":[5],"systems":[6,20,93,161],"have":[7,21],"been":[8,22],"widely":[9],"deployed,":[10],"their":[11,103],"security":[12],"vulnerabilities":[13],"require":[14],"close":[15],"scrutiny.":[16],"Most":[17],"recently,":[18],"NMT":[19,92,141],"found":[23],"vulnerable":[24],"to":[25,31,75,123,191],"targeted":[26,52,88,117,136],"attacks":[27,40,89,171],"which":[28],"cause":[29],"them":[30],"produce":[32],"specific,":[33],"unsolicited,":[34],"and":[35,73,147],"even":[36,157],"harmful":[37],"translations.":[38],"These":[39],"are":[41,54,94,155,172],"usually":[42],"exploited":[43],"in":[44,138],"a":[45,57,99],"white-box":[46],"setting,":[47],"where":[48],"adversarial":[49],"inputs":[50],"causing":[51],"translations":[53],"discovered":[55],"for":[56],"known":[58],"target":[59,69],"system.":[60],"However,":[61],"this":[62,83,110],"approach":[63],"is":[64,71],"less":[65],"viable":[66],"when":[67],"the":[68,76,125,132,135,144,148,159,170],"system":[70],"black-box":[72,91],"unknown":[74],"adversary":[77],"(e.g.,":[78,184],"secured":[79],"commercial":[80],"systems).":[81],"In":[82],"paper,":[84],"we":[85,187],"show":[86,108],"that":[87,109],"on":[90,97,158],"feasible,":[95],"based":[96],"poisoning":[98,137,182],"small":[100],"fraction":[101],"of":[102,119,134,168],"parallel":[104,165],"training":[105,127,142,146],"data.":[106,128],"We":[107,129],"attack":[111],"can":[112],"be":[113],"realised":[114],"practically":[115],"via":[116],"corruption":[118],"web":[120],"documents":[121],"crawled":[122],"form":[124],"system\u2019s":[126],"then":[130],"analyse":[131],"effectiveness":[133],"two":[139],"common":[140],"scenarios:":[143],"from-scratch":[145],"pre-train":[149],"&":[150],"fine-tune":[151],"paradigm.":[152],"Our":[153],"results":[154],"alarming:":[156],"state-of-the-art":[160],"trained":[162],"with":[163],"massive":[164],"data":[166],"(tens":[167],"millions),":[169],"still":[173],"successful":[174],"(over":[175],"50%":[176],"success":[177],"rate)":[178],"under":[179],"surprisingly":[180],"low":[181],"budgets":[183],"0.006%).":[185],"Lastly,":[186],"discuss":[188],"potential":[189],"defences":[190],"counter":[192],"such":[193],"attacks.":[194]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":2}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}