A Classification-Guided Approach for Adversarial Attacks against Neural Machine Translation
Neural Machine Translation (NMT) models have been shown to be vulnerable to adversarial attacks, wherein carefully crafted perturbations of the input can mislead the target model. In this paper, we introduce ACT, a novel adversarial attack framework against NMT systems guided by a classifier. In our attack, the adversary aims to craft meaning-preserving adversarial examples whose translations in the target language by the NMT model belong to a different class than the original translations. Unlike previous attacks, our new approach has a more substantial effect on the translation by altering the overall meaning, which then leads to a different class determined by an oracle classifier. To evaluate the robustness of NMT models to our attack, we propose enhancements to existing black-box word-replacement-based attacks by incorporating output translations of the target NMT model and the output logits of a classifier within the attack process. Extensive experiments, including a comparison with existing untargeted attacks, show that our attack is considerably more successful in altering the class of the output translation and has more effect on the translation. This new paradigm can reveal the vulnerabilities of NMT systems by focusing on the class of translation rather than the mere translation quality as studied traditionally.
Code (1)
Tasks
Adversarial AttackMachine TranslationNMTTranslationSimilar Papers 제목 키워드 기반
The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey
Machine learning models have made many decision support systems to be faster, more accurate, and more efficient. However, applications of machine learning in network security face a more disproportionate threat of active…
BIG-bench Machine LearningClassificationGeneral ClassificationIntrusion Detection+1Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser
Neural networks are vulnerable to adversarial examples, which poses a threat to their application in security sensitive systems. We propose high-level representation guided denoiser (HGD) as a defense for image classific…
Adversarial AttackAdversarial Defenseimage-classificationImage Classification+1Time Traveling to Defend Against Adversarial Example Attacks in Image Classification
Adversarial example attacks have emerged as a critical threat to machine learning. Adversarial attacks in image classification abuse various, minor modifications to the image that confuse the image classification neural …
Classificationimage-classificationImage ClassificationAdversarial attacks against Bayesian forecasting dynamic models
The last decade has seen the rise of Adversarial Machine Learning (AML). This discipline studies how to manipulate data to fool inference engines, and how to protect those systems against such manipulation attacks. Exten…
regressionTime SeriesTime Series AnalysisTime Series ForecastingProtecting the Neural Networks against FGSM Attack Using Machine Unlearning
Machine learning is a powerful tool for building predictive models. However, it is vulnerable to adversarial attacks. Fast Gradient Sign Method (FGSM) attacks are a common type of adversarial attack that adds small pertu…
Image ClassificationAdversarial Attack