{"id":"https://openalex.org/W7133219418","doi":"https://doi.org/10.52202/075280-2235","title":"HQA-Attack: Toward High Quality Black-Box Hard-Label Adversarial Attack on Text","display_name":"HQA-Attack: Toward High Quality Black-Box Hard-Label Adversarial Attack on Text","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W7133219418","doi":"https://doi.org/10.52202/075280-2235"},"language":"en","primary_location":{"id":"doi:10.52202/075280-2235","doi":"https://doi.org/10.52202/075280-2235","is_oa":false,"landing_page_url":"https://doi.org/10.52202/075280-2235","pdf_url":null,"source":{"id":"https://openalex.org/S4363606243","display_name":"neural information processing systems","issn_l":"1049-5258","issn":["1049-5258"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Advances in Neural Information Processing Systems 36","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2402.01806","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5146700856","display_name":"Han Liu","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Han Liu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127789619","display_name":"Zhi Xu","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhi Xu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134153967","display_name":"Xiaotong Zhang","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiaotong Zhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127863103","display_name":"Feng Zhang","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Feng Zhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139773735","display_name":"Fenglong Ma","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fenglong Ma","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111502820","display_name":"Hongyang Chen","orcid":"https://orcid.org/0009-0004-4540-5287","observed_orcids":["https://orcid.org/0009-0004-4540-5287"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hongyang Chen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5157504002","display_name":"Hong Yu","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hong Yu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5127821385","display_name":"Xiaotong Zhang","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xianchao Zhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9487,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.79235931,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"51347","last_page":"51358"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/black-box-attacks","display_name":"black-box attacks","score":0.6769999861717224},{"id":"https://openalex.org/keywords/text-classification","display_name":"text classification","score":0.8610000014305115},{"id":"https://openalex.org/keywords/adversarial-examples","display_name":"adversarial examples","score":0.6380000114440918},{"id":"https://openalex.org/keywords/natural-language-processing-security","display_name":"natural language processing security","score":0.6480000019073486}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6384000182151794},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.6039999723434448},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5748999714851379},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45010000467300415},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3253999948501587},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.30809998512268066},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2736999988555908},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.27070000767707825},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.2590000033378601},{"id":"https://openalex.org/C90673727","wikidata":"https://www.wikidata.org/wiki/Q901718","display_name":"Product (mathematics)","level":2,"score":0.25589999556541443},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.25519999861717224}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.52202/075280-2235","doi":"https://doi.org/10.52202/075280-2235","is_oa":false,"landing_page_url":"https://doi.org/10.52202/075280-2235","pdf_url":null,"source":{"id":"https://openalex.org/S4363606243","display_name":"neural information processing systems","issn_l":"1049-5258","issn":["1049-5258"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Advances in Neural Information Processing Systems 36","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2402.01806","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2402.01806","pdf_url":"https://arxiv.org/pdf/2402.01806","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2402.01806","doi":"https://doi.org/10.48550/arxiv.2402.01806","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2402.01806","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2402.01806","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2402.01806","pdf_url":"https://arxiv.org/pdf/2402.01806","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G11042728","display_name":null,"funder_award_id":"62206038","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1288713985","display_name":null,"funder_award_id":"62106035","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1675944683","display_name":null,"funder_award_id":"DUT20RC(3)066","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G214390051","display_name":null,"funder_award_id":"DUT20RC(3) 040","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G391097201","display_name":null,"funder_award_id":"2022PI0AC01","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G414079634","display_name":null,"funder_award_id":"61972065","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G5811024370","display_name":null,"funder_award_id":"61972065","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7554543229","display_name":null,"funder_award_id":"2022YFB4500300","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G7607137348","display_name":null,"funder_award_id":"DUT20RC","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G7980169782","display_name":null,"funder_award_id":"DUT20RC(3)040","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7133219418.pdf","grobid_xml":"https://content.openalex.org/works/W7133219418.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Black-box":[0],"hard-label":[1,114],"adversarial":[2,78,109,123,157,171],"attack":[3,115],"on":[4,30,50,208],"text":[5,14,210],"is":[6,17,27,33],"a":[7,41,89,99,182],"practical":[8],"and":[9,20,22,39,67,84,168,197,218],"challenging":[10],"task,":[11],"as":[12,133,135],"the":[13,24,36,51,64,112,139,145,149,156,160,165,170,177,193,199,225],"data":[15],"space":[16],"inherently":[18],"discrete":[19],"non-differentiable,":[21],"only":[23,40],"predicted":[25],"label":[26],"accessible.":[28],"Research":[29],"this":[31],"problem":[32],"still":[34],"in":[35,88],"embryonic":[37],"stage":[38],"few":[42],"methods":[43,48],"are":[44,73],"available.":[45],"Nevertheless,":[46],"existing":[47],"rely":[49],"complex":[52],"heuristic":[53],"algorithm":[54],"or":[55],"unreliable":[56],"gradient":[57],"estimation":[58],"strategy,":[59],"which":[60,162],"probably":[61],"fall":[62],"into":[63],"local":[65],"optimum":[66],"inevitably":[68],"consume":[69],"numerous":[70],"queries,":[71],"thus":[72,137,190],"difficult":[74],"to":[75,104,153,202],"craft":[76],"satisfactory":[77],"examples":[79,110],"with":[80,159],"high":[81,106],"semantic":[82,166],"similarity":[83,167],"low":[85],"perturbation":[86,140],"rate":[87],"limited":[90],"query":[91,200],"budget.":[92],"To":[93],"alleviate":[94],"above":[95],"issues,":[96],"we":[97],"propose":[98],"simple":[100],"yet":[101],"effective":[102],"framework":[103],"generate":[105],"quality":[107],"textual":[108],"under":[111],"black-box":[113],"scenarios,":[116],"named":[117],"HQA-Attack.":[118],"Specifically,":[119],"after":[120],"initializing":[121],"an":[122],"example":[124,158],"randomly,":[125],"HQA-attack":[126],"first":[127],"constantly":[128],"substitutes":[129],"original":[130],"words":[131,152],"back":[132],"many":[134],"possible,":[136],"shrinking":[138],"rate.":[141],"Then":[142],"it":[143,180],"leverages":[144],"synonym":[146,184,195],"set":[147,196],"of":[148],"remaining":[150],"changed":[151,188],"further":[154],"optimize":[155],"direction":[161],"can":[163],"improve":[164],"satisfy":[169],"condition":[172],"simultaneously.":[173],"In":[174],"addition,":[175],"during":[176],"optimizing":[178],"procedure,":[179],"searches":[181],"transition":[183],"word":[185],"for":[186],"each":[187],"word,":[189],"avoiding":[191],"traversing":[192],"whole":[194],"reducing":[198],"number":[201],"some":[203],"extent.":[204],"Extensive":[205],"experimental":[206],"results":[207],"five":[209],"classification":[211],"datasets,":[212],"three":[213],"natural":[214],"language":[215],"inference":[216],"datasets":[217],"two":[219],"real-world":[220],"APIs":[221],"have":[222],"shown":[223],"that":[224],"proposed":[226],"HQA-Attack":[227],"method":[228],"outperforms":[229],"other":[230],"strong":[231],"baselines":[232],"significantly.":[233]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-10-12T09:40:04.860316","created_date":"2026-03-03T00:00:00"}