{"id":"https://openalex.org/W4393565548","doi":"https://doi.org/10.3233/aic-230279","title":"Token-modification adversarial attacks for natural language processing: A survey","display_name":"Token-modification adversarial attacks for natural language processing: A survey","publication_year":2024,"publication_date":"2024-04-02","ids":{"openalex":"https://openalex.org/W4393565548","doi":"https://doi.org/10.3233/aic-230279"},"language":"en","primary_location":{"id":"doi:10.3233/aic-230279","is_oa":false,"landing_page_url":"https://doi.org/10.3233/aic-230279","pdf_url":null,"source":{"id":"https://openalex.org/S176303223","display_name":"AI Communications","issn_l":"0921-7126","issn":["0921-7126","1875-8452"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"AI Communications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102874827","display_name":"Tom Roth","orcid":"https://orcid.org/0000-0002-4445-7171"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]},{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Tom Roth","raw_affiliation_strings":["CSIRO\u2019s Data61, Sydney, NSW, Australia","University of Technology Sydney, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO\u2019s Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]},{"raw_affiliation_string":"University of Technology Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101863680","display_name":"Yansong Gao","orcid":"https://orcid.org/0000-0001-5783-2172"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Yansong Gao","raw_affiliation_strings":["CSIRO\u2019s Data61, Sydney, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO\u2019s Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yansong Gao","orcid":null},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yansong Gao","raw_affiliation_strings":["CSIRO\u2019s Data61, Sydney, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO\u2019s Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086357020","display_name":"Alsharif Abuadbba","orcid":"https://orcid.org/0000-0001-9695-7947"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Alsharif Abuadbba","raw_affiliation_strings":["CSIRO\u2019s Data61, Sydney, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO\u2019s Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086357020","display_name":"Alsharif Abuadbba","orcid":"https://orcid.org/0000-0001-9695-7947"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]},{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Alsharif Abuadbba","raw_affiliation_strings":["CSIRO\u2019s Data61, Sydney, NSW, Australia","University of Technology Sydney, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO\u2019s Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]},{"raw_affiliation_string":"University of Technology Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082256444","display_name":"\u202aSurya Nepal\u202c","orcid":"https://orcid.org/0000-0002-3289-6599"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Surya Nepal","raw_affiliation_strings":["CSIRO\u2019s Data61, Sydney, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO\u2019s Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082256444","display_name":"\u202aSurya Nepal\u202c","orcid":"https://orcid.org/0000-0002-3289-6599"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Surya Nepal","raw_affiliation_strings":["CSIRO\u2019s Data61, Sydney, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"CSIRO\u2019s Data61, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062908102","display_name":"Wei Liu","orcid":"https://orcid.org/0000-0003-2968-2888"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wei Liu","raw_affiliation_strings":["University of Technology Sydney, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"University of Technology Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062908102","display_name":"Wei Liu","orcid":"https://orcid.org/0000-0003-2968-2888"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Wei Liu","raw_affiliation_strings":["University of Technology Sydney, NSW, Australia"],"affiliations":[{"raw_affiliation_string":"University of Technology Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5062908102","https://openalex.org/A5082256444","https://openalex.org/A5086357020","https://openalex.org/A5101863680","https://openalex.org/A5102874827"],"corresponding_institution_ids":["https://openalex.org/I114017466","https://openalex.org/I1292875679","https://openalex.org/I42894916"],"apc_list":null,"apc_paid":null,"fwci":2.0254,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.87886552,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"37","issue":"4","first_page":"655","last_page":"676"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9896000027656555,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8797014951705933},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8521162271499634},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.8411905765533447},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.5301645398139954},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.5150010585784912},{"id":"https://openalex.org/keywords/natural-language","display_name":"Natural language","score":0.5017826557159424},{"id":"https://openalex.org/keywords/spark","display_name":"SPARK (programming language)","score":0.46218669414520264},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36700525879859924},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.35720133781433105},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.3520364761352539},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.18251243233680725}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8797014951705933},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8521162271499634},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.8411905765533447},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.5301645398139954},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.5150010585784912},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.5017826557159424},{"id":"https://openalex.org/C2781215313","wikidata":"https://www.wikidata.org/wiki/Q3493345","display_name":"SPARK (programming language)","level":2,"score":0.46218669414520264},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36700525879859924},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35720133781433105},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3520364761352539},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.18251243233680725},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C78458016","wikidata":"https://www.wikidata.org/wiki/Q840400","display_name":"Evolutionary biology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/aic-230279","is_oa":false,"landing_page_url":"https://doi.org/10.3233/aic-230279","pdf_url":null,"source":{"id":"https://openalex.org/S176303223","display_name":"AI Communications","issn_l":"0921-7126","issn":["0921-7126","1875-8452"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"AI Communications","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Quality Education","score":0.800000011920929,"id":"https://metadata.un.org/sdg/4"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":84,"referenced_works":["https://openalex.org/W2012833704","https://openalex.org/W2063678733","https://openalex.org/W2101105183","https://openalex.org/W2123442489","https://openalex.org/W2243397390","https://openalex.org/W2250539671","https://openalex.org/W2603766943","https://openalex.org/W2609368435","https://openalex.org/W2767891136","https://openalex.org/W2799007037","https://openalex.org/W2799194071","https://openalex.org/W2891177506","https://openalex.org/W2905526464","https://openalex.org/W2922293812","https://openalex.org/W2947469743","https://openalex.org/W2949128310","https://openalex.org/W2951652751","https://openalex.org/W2962718684","https://openalex.org/W2962782614","https://openalex.org/W2962818281","https://openalex.org/W2963341956","https://openalex.org/W2963834268","https://openalex.org/W2963859254","https://openalex.org/W2963969878","https://openalex.org/W2964232431","https://openalex.org/W2966491090","https://openalex.org/W2970641574","https://openalex.org/W2970863760","https://openalex.org/W2988194011","https://openalex.org/W2989473642","https://openalex.org/W2996851481","https://openalex.org/W2998277219","https://openalex.org/W3015001695","https://openalex.org/W3020242586","https://openalex.org/W3023553115","https://openalex.org/W3034287667","https://openalex.org/W3034649382","https://openalex.org/W3035736465","https://openalex.org/W3037540472","https://openalex.org/W3097996341","https://openalex.org/W3099126561","https://openalex.org/W3099729825","https://openalex.org/W3099852471","https://openalex.org/W3101449015","https://openalex.org/W3103934057","https://openalex.org/W3104208618","https://openalex.org/W3104254968","https://openalex.org/W3104423855","https://openalex.org/W3104570147","https://openalex.org/W3105604018","https://openalex.org/W3116387889","https://openalex.org/W3117433489","https://openalex.org/W3121309165","https://openalex.org/W3155188285","https://openalex.org/W3169948074","https://openalex.org/W3171502141","https://openalex.org/W3173968138","https://openalex.org/W3174226126","https://openalex.org/W3175663471","https://openalex.org/W3176393001","https://openalex.org/W3200185163","https://openalex.org/W3200913691","https://openalex.org/W3209492300","https://openalex.org/W3209506041","https://openalex.org/W3215457086","https://openalex.org/W3217604114","https://openalex.org/W4205150188","https://openalex.org/W4205758343","https://openalex.org/W4221158433","https://openalex.org/W4235505822","https://openalex.org/W4280591051","https://openalex.org/W4281564455","https://openalex.org/W4282963876","https://openalex.org/W4288089799","https://openalex.org/W4288953700","https://openalex.org/W4294831700","https://openalex.org/W4318960928","https://openalex.org/W4381199074","https://openalex.org/W4385573386","https://openalex.org/W4385734153","https://openalex.org/W4386566751","https://openalex.org/W4386576644","https://openalex.org/W6600577311","https://openalex.org/W6769627184"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119","https://openalex.org/W3089357417","https://openalex.org/W2894473080"],"abstract_inverted_index":{"Many":[0],"adversarial":[1],"attacks":[2],"target":[3],"natural":[4],"language":[5],"processing":[6],"systems,":[7],"most":[8],"of":[9,17,24,26,36,73],"which":[10,66],"succeed":[11],"through":[12],"modifying":[13],"the":[14,21,55,60,87,96],"individual":[15,97],"tokens":[16],"a":[18,33,39,44,81],"document.":[19],"Despite":[20],"apparent":[22],"uniqueness":[23],"each":[25],"these":[27],"attacks,":[28],"fundamentally":[29],"they":[30],"are":[31],"simply":[32],"distinct":[34],"configuration":[35],"four":[37],"components:":[38],"goal":[40],"function,":[41],"allowable":[42],"transformations,":[43],"search":[45],"method,":[46],"and":[47,71,89],"constraints.":[48],"In":[49],"this":[50],"survey,":[51],"we":[52],"systematically":[53],"present":[54],"different":[56],"components":[57],"used":[58],"throughout":[59],"literature,":[61],"using":[62],"an":[63],"attack-independent":[64],"framework":[65],"allows":[67],"for":[68,84],"easy":[69],"comparison":[70],"categorisation":[72],"components.":[74,99],"Our":[75],"work":[76],"aims":[77],"to":[78,86,90],"serve":[79],"as":[80],"comprehensive":[82],"guide":[83],"newcomers":[85],"field":[88],"spark":[91],"targeted":[92],"research":[93],"into":[94],"refining":[95],"attack":[98]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-04-15T08:11:43.952461","created_date":"2025-10-10T00:00:00"}