Generating Textual Adversaries with Minimal Perturbation
Many word-level adversarial attack approaches for textual data have been proposed in recent studies. However, due to the massive search space consisting of combinations of candidate words, the existing approaches face the problem of preserving the semantics of texts when crafting adversarial counterparts. In this paper, we develop a novel attack strategy to find adversarial texts with high similarity to the original texts while introducing minimal perturbation. The rationale is that we expect the adversarial texts with small perturbation can better preserve the semantic meaning of original texts. Experiments show that, compared with state-of-the-art attack approaches, our approach achieves higher success rates and lower perturbation rates in four benchmark datasets.
Code (1)
Tasks
Adversarial AttackSimilar Papers 제목 키워드 기반
Generating Natural Adversarial Examples
Due to their complex nature, it is hard to characterize the ways in which machine learning models can misbehave or be exploited when deployed. Recent work on adversarial examples, i.e. inputs with minor perturbations tha…
Adversarial Attackimage-classificationImage ClassificationMachine Translation+2Adv-OLM: Generating Textual Adversaries via OLM
Deep learning models are susceptible to adversarial examples that have imperceptible perturbations in the original input, resulting in adversarial attacks against these models. Analysis of these attacks on the state of t…
Sentencetext-classificationText ClassificationEnhancing Resilience of Deep Learning Networks by Means of Transferable Adversaries
Artificial neural networks in general and deep learning networks in particular established themselves as popular and powerful machine learning algorithms. While the often tremendous sizes of these networks are beneficial…
Extend Adversarial Policy Against Neural Machine Translation via Unknown Token
Generating adversarial examples contributes to mainstream neural machine translation~(NMT) robustness. However, popular adversarial policies are apt for fixed tokenization, hindering its efficacy for common character per…
Machine TranslationNMTReinforcement Learning (RL)TranslationTowards Robust Toxic Content Classification
Toxic content detection aims to identify content that can offend or harm its recipients. Automated classifiers of toxic content need to be robust against adversaries who deliberately try to bypass filters. We propose a m…
ClassificationDenoisingGeneral Classification