{"id":"https://openalex.org/W7167623190","doi":"https://doi.org/10.48550/arxiv.2607.03456","title":"SentAttack: A Sentence-Level Black-Box Adversarial Attack Method for Dense Retrieval Models","display_name":"SentAttack: A Sentence-Level Black-Box Adversarial Attack Method for Dense Retrieval Models","publication_year":2026,"publication_date":"2026-07-03","ids":{"openalex":"https://openalex.org/W7167623190","doi":"https://doi.org/10.48550/arxiv.2607.03456"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.03456","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.03456","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.03456","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138637087","display_name":"Luping Wei","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wei, Luping","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084244959","display_name":"Yamin Hu","orcid":"https://orcid.org/0000-0002-6077-8709"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Yamin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125397776","display_name":"Sihan Shang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shang, Sihan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114514359","display_name":"Shiyin Wang","orcid":"https://orcid.org/0009-0004-7206-4975"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Shiyin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5140175966","display_name":"Wenjian Luo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luo, Wenjian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.2874000072479248,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.2874000072479248,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.12110000103712082,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.10419999808073044,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7621999979019165},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6043999791145325},{"id":"https://openalex.org/keywords/ranking","display_name":"Ranking (information retrieval)","score":0.4936999976634979},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.46939998865127563},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.45899999141693115},{"id":"https://openalex.org/keywords/encode","display_name":"ENCODE","score":0.4235999882221222}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7621999979019165},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7621999979019165},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6043999791145325},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5397999882698059},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.4936999976634979},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.46939998865127563},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.45899999141693115},{"id":"https://openalex.org/C66746571","wikidata":"https://www.wikidata.org/wiki/Q1134833","display_name":"ENCODE","level":3,"score":0.4235999882221222},{"id":"https://openalex.org/C146599234","wikidata":"https://www.wikidata.org/wiki/Q511093","display_name":"Centroid","level":2,"score":0.414900004863739},{"id":"https://openalex.org/C2777530160","wikidata":"https://www.wikidata.org/wiki/Q41796","display_name":"Sentence","level":2,"score":0.4092000126838684},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38190001249313354},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.37459999322891235},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36309999227523804},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.31189998984336853},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C164866538","wikidata":"https://www.wikidata.org/wiki/Q367351","display_name":"Cluster (spacecraft)","level":2,"score":0.2599000036716461}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.03456","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.03456","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.03456","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.03456","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.608073890209198,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Retrieval-Augmented":[0],"Generation":[1],"(RAG)":[2],"systems":[3],"typically":[4],"consist":[5],"of":[6,152],"a":[7,16,72,84,109,160],"dense":[8],"retrieval":[9,14,99],"(DR)":[10],"model":[11,19,121],"for":[12,21,78,107],"initial":[13,150],"and":[15,104,124,162],"neural":[17],"ranking":[18,105],"(NRM)":[20],"re-ranking.Existing":[22],"robustness":[23],"studies":[24],"in":[25],"RAG":[26,95],"mainly":[27],"focus":[28],"on":[29,34,178,185],"NRMs,":[30],"while":[31],"adversarial":[32,75,153,176],"attacks":[33,54,177],"DR":[35,59,79,111,120,179],"models":[36,60],"are":[37,47,55,137],"mostly":[38],"limited":[39],"to":[40,49,57,100,122,128,147],"word-level":[41,53],"perturbations.For":[42],"low-ranked":[43,186],"target":[44,130,141,187],"documents":[45,103,126],"that":[46,172],"irrelevant":[48],"the":[50,87,93,113,118,129,140,144],"query,":[51,131],"simple":[52],"insufficient":[56],"mislead":[58],"into":[61],"substantially":[62],"promoting":[63],"their":[64],"rankings.To":[65],"solve":[66],"these":[67,157],"problems,":[68],"we":[69],"propose":[70],"SentAttack,":[71],"sentence-level":[73],"black-box":[74,94],"attack":[76],"method":[77],"models.SentAttack":[80],"is":[81],"designed":[82],"as":[83],"two-stage":[85],"method.In":[86],"first":[88],"stage,":[89,115],"SentAttack":[90,116,173],"interacts":[91],"with":[92,139,166,181],"system":[96],"via":[97],"iterative":[98],"collect":[101],"ranked":[102],"information":[106],"training":[108],"surrogate":[110,119],"model.In":[112],"second":[114],"uses":[117],"encode":[123],"cluster":[125,134],"relevant":[127],"yielding":[132],"multiple":[133],"centroids.These":[135],"centroids":[136],"concatenated":[138],"document":[142],"at":[143],"sentence":[145],"level":[146],"form":[148],"an":[149],"set":[151],"candidates.SentAttack":[154],"then":[155],"optimizes":[156],"candidates":[158],"using":[159],"query-":[161],"centroid-guided":[163],"objective":[164],"combined":[165],"gradient-guided":[167],"beam":[168],"search.Extensive":[169],"experiments":[170],"demonstrate":[171],"outperforms":[174],"existing":[175],"models,":[180],"especially":[182],"strong":[183],"performance":[184],"documents.":[188]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-08T00:00:00"}