{"id":"https://openalex.org/W7136831784","doi":"https://doi.org/10.48550/arxiv.2603.12582","title":"RTD-Guard: A Black-Box Textual Adversarial Detection Framework via Replacement Token Detection","display_name":"RTD-Guard: A Black-Box Textual Adversarial Detection Framework via Replacement Token Detection","publication_year":2026,"publication_date":"2026-03-13","ids":{"openalex":"https://openalex.org/W7136831784","doi":"https://doi.org/10.48550/arxiv.2603.12582"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.12582","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12582","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.12582","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5129469217","display_name":"He Zhu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhu, He","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129436162","display_name":"Yanshu Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Yanshu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129540588","display_name":"Wen Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Wen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5104328511","display_name":"Haitian Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Haitian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7648000121116638,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7648000121116638,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.10019999742507935,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.015799999237060547,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9405999779701233},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.79830002784729},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.6801000237464905},{"id":"https://openalex.org/keywords/discriminator","display_name":"Discriminator","score":0.6315000057220459},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6029999852180481},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5311999917030334},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.48980000615119934}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9405999779701233},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8073999881744385},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.79830002784729},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.6801000237464905},{"id":"https://openalex.org/C2779803651","wikidata":"https://www.wikidata.org/wiki/Q5282088","display_name":"Discriminator","level":3,"score":0.6315000057220459},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6029999852180481},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5968000292778015},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5311999917030334},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.48980000615119934},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.42590001225471497},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.38269999623298645},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.35260000824928284},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.3521000146865845},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32440000772476196},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.30559998750686646},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.296099990606308},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.29190000891685486},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2806999981403351},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.2572000026702881}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.12582","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12582","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.12582","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.12582","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.6467522382736206,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Textual":[0],"adversarial":[1,24,69,79,113,134,159],"attacks":[2,80],"pose":[3],"a":[4,28,62,87,176],"serious":[5],"security":[6],"threat":[7],"to":[8,31,45,95],"Natural":[9],"Language":[10],"Processing":[11],"(NLP)":[12],"systems":[13],"by":[14,115,162],"introducing":[15],"imperceptible":[16],"perturbations":[17,77],"that":[18,75,86,155],"mislead":[19],"deep":[20],"learning":[21],"models.":[22],"While":[23],"example":[25],"detection":[26,170],"offers":[27],"lightweight":[29],"alternative":[30],"robust":[32],"training,":[33],"existing":[34,169],"methods":[35],"typically":[36],"rely":[37],"on":[38,150],"prior":[39],"knowledge":[40],"of":[41,121],"attacks,":[42],"white-box":[43],"access":[44],"the":[46,83,117,122],"victim":[47,123],"model,":[48],"or":[49,138,190],"numerous":[50],"queries,":[51],"which":[52],"severely":[53],"limits":[54],"their":[55],"practical":[56],"deployment.":[57],"This":[58],"paper":[59],"introduces":[60],"RTD-Guard,":[61],"novel":[63],"black-box":[64,146],"framework":[65],"for":[66,185],"detecting":[67],"textual":[68],"examples.":[70],"Our":[71],"key":[72],"insight":[73],"is":[74,93],"word-substitution":[76],"in":[78,188],"closely":[81],"resemble":[82],"\"replaced":[84],"tokens\"":[85],"Replaced":[88],"Token":[89],"Detection":[90],"(RTD)":[91],"discriminator":[92],"pre-trained":[94],"identify.":[96],"Leveraging":[97],"this,":[98],"RTD-Guard":[99,156],"employs":[100],"an":[101],"off-the-shelf":[102],"RTD":[103],"discriminator-without":[104],"fine-tuning-to":[105],"localize":[106],"suspicious":[107],"tokens,":[108],"masks":[109],"them,":[110],"and":[111,126,142,180],"detects":[112,158],"examples":[114],"observing":[116],"prediction":[118],"confidence":[119],"shift":[120],"model":[124,136,140],"before":[125],"after":[127],"intervention.":[128],"The":[129],"entire":[130],"process":[131],"requires":[132],"no":[133],"data,":[135],"tuning,":[137],"internal":[139],"access,":[141],"uses":[143],"only":[144],"two":[145],"queries.":[147],"Comprehensive":[148],"experiments":[149],"multiple":[151,173],"benchmark":[152],"datasets":[153],"demonstrate":[154],"effectively":[157],"texts":[160],"generated":[161],"diverse":[163],"state-of-the-art":[164],"attack":[165],"methods.":[166],"It":[167],"surpasses":[168],"baselines":[171],"across":[172],"metrics,":[174],"offering":[175],"highly":[177],"efficient,":[178],"practical,":[179],"resource-light":[181],"defense":[182],"mechanism-particularly":[183],"suited":[184],"real-world":[186],"deployment":[187],"resource-constrained":[189],"privacy-sensitive":[191],"environments.":[192]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-17T00:00:00"}