{"id":"https://openalex.org/W4385562585","doi":"https://doi.org/10.1145/3580305.3599461","title":"PAT: Geometry-Aware Hard-Label Black-Box Adversarial Attacks on Text","display_name":"PAT: Geometry-Aware Hard-Label Black-Box Adversarial Attacks on Text","publication_year":2023,"publication_date":"2023-08-04","ids":{"openalex":"https://openalex.org/W4385562585","doi":"https://doi.org/10.1145/3580305.3599461"},"language":"en","primary_location":{"id":"doi:10.1145/3580305.3599461","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3580305.3599461","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024079930","display_name":"Muchao Ye","orcid":"https://orcid.org/0009-0006-9112-8895"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muchao Ye","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0009-0006-9112-8895","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006335513","display_name":"Jinghui Chen","orcid":"https://orcid.org/0000-0002-1486-4526"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jinghui Chen","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0000-0002-1486-4526","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091132390","display_name":"Chenglin Miao","orcid":"https://orcid.org/0000-0002-9646-7099"},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chenglin Miao","raw_affiliation_strings":["Iowa State University, Ames, IA, USA"],"raw_orcid":"https://orcid.org/0000-0002-9646-7099","affiliations":[{"raw_affiliation_string":"Iowa State University, Ames, IA, USA","institution_ids":["https://openalex.org/I173911158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029498141","display_name":"Han Liu","orcid":"https://orcid.org/0000-0001-6921-2050"},"institutions":[{"id":"https://openalex.org/I27357992","display_name":"Dalian University of Technology","ror":"https://ror.org/023hj5876","country_code":"CN","type":"education","lineage":["https://openalex.org/I27357992"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Han Liu","raw_affiliation_strings":["Dalian University of Technology, Dalian, China"],"raw_orcid":"https://orcid.org/0000-0001-6921-2050","affiliations":[{"raw_affiliation_string":"Dalian University of Technology, Dalian, China","institution_ids":["https://openalex.org/I27357992"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100428026","display_name":"Ting Wang","orcid":"https://orcid.org/0000-0003-4927-5833"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ting Wang","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0000-0003-4927-5833","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001030192","display_name":"Fenglong Ma","orcid":"https://orcid.org/0000-0002-4999-0303"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fenglong Ma","raw_affiliation_strings":["The Pennsylvania State University, University Park, PA, USA"],"raw_orcid":"https://orcid.org/0000-0002-4999-0303","affiliations":[{"raw_affiliation_string":"The Pennsylvania State University, University Park, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3093","last_page":"3104"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9869999885559082,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9684000015258789,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9015758633613586},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.7453145384788513},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7267160415649414},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.6567227840423584},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5821718573570251},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4344608187675476},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42634305357933044},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.19142165780067444}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9015758633613586},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.7453145384788513},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7267160415649414},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.6567227840423584},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5821718573570251},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4344608187675476},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42634305357933044},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.19142165780067444},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3580305.3599461","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3580305.3599461","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5071890890","display_name":"Collaborative Research: PPoSS: LARGE: Principles and Infrastructure of Extreme Scale Edge Learning for Computational Screening and Surveillance for Health Care","funder_award_id":"2119331","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7501644542","display_name":"III: Small: Usable Interpretability","funder_award_id":"1951729","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8138580079","display_name":"CAREER: Trustworthy Machine Learning from Untrusted Models","funder_award_id":"1953893","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1832693441","https://openalex.org/W2064675550","https://openalex.org/W2113459411","https://openalex.org/W2163455955","https://openalex.org/W2194775991","https://openalex.org/W2520774990","https://openalex.org/W2747329762","https://openalex.org/W2799194071","https://openalex.org/W2896457183","https://openalex.org/W2922293812","https://openalex.org/W2949128310","https://openalex.org/W2952186591","https://openalex.org/W2963542245","https://openalex.org/W2963857521","https://openalex.org/W3015625436","https://openalex.org/W3117433489","https://openalex.org/W3158360872","https://openalex.org/W3205696278","https://openalex.org/W4290944423"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4385437088","https://openalex.org/W3009622996","https://openalex.org/W3037859390"],"abstract_inverted_index":{"Despite":[0],"a":[1,63,122],"plethora":[2],"of":[3,26,159,171],"prior":[4],"explorations,":[5],"conducting":[6],"text":[7,154],"adversarial":[8,65,78,155],"attacks":[9,156],"in":[10,92,121,157,179],"practical":[11],"settings":[12],"is":[13,30],"still":[14],"challenging":[15],"with":[16,143],"the":[17,23,27,35,41,49,54,77,93,132,138,169],"following":[18],"constraints:":[19],"black":[20],"box":[21],"--":[22,34],"inner":[24],"structure":[25],"victim":[28],"model":[29],"unknown;":[31],"hard":[32],"label":[33],"attacker":[36],"only":[37],"has":[38],"access":[39],"to":[40,52,85,97],"top-1":[42],"prediction":[43],"results;":[44],"and":[45,79,82,113,135,146,163],"semantic":[46,87,164],"preservation":[47],"-":[48],"perturbation":[50,133],"needs":[51],"preserve":[53],"original":[55,106,139],"semantics.":[56,140],"In":[57,101],"this":[58,127],"paper,":[59],"we":[60,167],"present":[61],"PAT,":[62],"novel":[64],"attack":[66,161],"method":[67],"employed":[68],"under":[69],"all":[70],"these":[71],"constraints.":[72],"Specifically,":[73],"PAT":[74,104,151,172],"explicitly":[75],"models":[76,148],"non-adversarial":[80],"prototypes":[81],"incorporates":[83],"them":[84],"measure":[86],"changes":[88],"for":[89,118],"replacement":[90],"selection":[91],"hard-label":[94],"black-box":[95],"setting":[96],"generate":[98],"high-quality":[99],"samples.":[100],"each":[102],"iteration,":[103],"finds":[105],"words":[107,117],"that":[108,150],"can":[109],"be":[110],"replaced":[111],"back":[112],"selects":[114],"better":[115],"candidate":[116],"perturbed":[119],"positions":[120],"geometry-aware":[123],"manner":[124],"guided":[125],"by":[126],"estimation,":[128],"which":[129],"maximally":[130],"improves":[131],"construction":[134],"minimally":[136],"impacts":[137],"Extensive":[141],"evaluation":[142],"benchmark":[144],"datasets":[145],"state-of-the-art":[147],"shows":[149],"outperforms":[152],"existing":[153],"terms":[158],"both":[160],"effectiveness":[162],"preservation.":[165],"Moreover,":[166],"validate":[168],"efficacy":[170],"against":[173],"industry-leading":[174],"natural":[175],"language":[176],"processing":[177],"platforms":[178],"real-world":[180],"settings.":[181]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}