{"id":"https://openalex.org/W7162452921","doi":"https://doi.org/10.48550/arxiv.2605.24958","title":"SEP-Attack: A Simple and Effective Paradigm for Transfer-Based Textual Adversarial Attack","display_name":"SEP-Attack: A Simple and Effective Paradigm for Transfer-Based Textual Adversarial Attack","publication_year":2026,"publication_date":"2026-05-24","ids":{"openalex":"https://openalex.org/W7162452921","doi":"https://doi.org/10.48550/arxiv.2605.24958"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.24958","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.24958","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.24958","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137017387","display_name":"Han Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Han","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137080308","display_name":"Zhi Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Zhi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137069423","display_name":"Xiaotong Zhang","orcid":"https://orcid.org/0009-0000-0956-2788"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Xiaotong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137017748","display_name":"Feng Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Feng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137067429","display_name":"Xiaoming Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Xiaoming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137035668","display_name":"Wei Wang","orcid":"https://orcid.org/0000-0002-4002-2648"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137037970","display_name":"Fenglong Ma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Fenglong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137061285","display_name":"Hong Yu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Hong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8057000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8057000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.07970000058412552,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.022600000724196434,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9046000242233276},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.6654999852180481},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.5957000255584717},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5001999735832214},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.46560001373291016},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.4625999927520752},{"id":"https://openalex.org/keywords/word","display_name":"Word (group theory)","score":0.4595000147819519},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.4327000081539154}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9046000242233276},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7822999954223633},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.6654999852180481},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6164000034332275},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.5957000255584717},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.553600013256073},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5001999735832214},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.46560001373291016},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.4625999927520752},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.4595000147819519},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.4327000081539154},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33219999074935913},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.31709998846054077},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.29010000824928284},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.289000004529953},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.28700000047683716},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.2840000092983246},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.2743000090122223},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2727000117301941},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.27090001106262207},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.27070000767707825},{"id":"https://openalex.org/C41426520","wikidata":"https://www.wikidata.org/wiki/Q1192065","display_name":"Point estimation","level":2,"score":0.266400009393692}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.24958","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.24958","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.24958","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.24958","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7236460447311401}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Despite":[0],"the":[1,32,38,90,102,136,144,148,163],"strong":[2],"performance":[3],"of":[4,61,66,104,165],"deep":[5],"neural":[6],"networks":[7],"in":[8,37,120],"modern":[9],"Web":[10],"and":[11,129,142,158],"language":[12],"applications,":[13],"they":[14],"remain":[15],"vulnerable":[16],"to":[17,58,95,114,124],"adversarial":[18,25,83,131,151],"attacks,":[19],"especially":[20],"transferable":[21,150],"attacks":[22,36],"that":[23],"generate":[24,96,130],"examples":[26],"using":[27],"surrogate":[28,98],"models":[29],"without":[30],"accessing":[31],"victim":[33],"model.":[34],"Transferable":[35],"text":[39],"domain":[40],"are":[41,122],"still":[42],"under-explored,":[43],"with":[44,54],"only":[45],"a":[46,75,111],"few":[47],"studies":[48],"addressing":[49],"this":[50],"challenging":[51],"issue,":[52],"often":[53],"suboptimal":[55],"results":[56],"due":[57],"equal":[59],"treatment":[60],"submodels":[62],"or":[63],"inaccurate":[64],"estimation":[65],"importance":[67,127],"scores.":[68],"To":[69],"address":[70],"these":[71,107],"challenges,":[72],"we":[73,88,109,134],"propose":[74],"simple":[76],"yet":[77],"effective":[78],"paradigm":[79],"for":[80,139],"transfer-based":[81],"textual":[82],"attack,":[84],"named":[85],"SEP-Attack.":[86],"Specifically,":[87],"employ":[89],"Determinantal":[91],"Point":[92],"Process":[93],"(DPP)":[94],"diverse":[97],"ensemble":[99],"weights,":[100,108],"representing":[101],"transferability":[103,137],"submodels.":[105],"Using":[106],"introduce":[110],"new":[112],"metric":[113],"evaluate":[115],"prediction":[116],"confidence":[117],"scores,":[118],"which":[119],"turn":[121],"used":[123],"calculate":[125],"word":[126],"scores":[128],"candidates.":[132],"Finally,":[133],"quantify":[135],"score":[138],"each":[140],"candidate":[141],"select":[143],"top":[145],"ones":[146],"as":[147],"final":[149],"examples.":[152],"Experiments":[153],"conducted":[154],"on":[155],"four":[156],"datasets":[157],"two":[159],"real-world":[160],"APIs":[161],"validate":[162],"efficacy":[164],"SEP-Attack,":[166],"significantly":[167],"outperforming":[168],"state-of-the-art":[169],"baselines.":[170]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-27T00:00:00"}
