@article{isbertreallyrobustnaturallanguageattack,
  title = {Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment},
  author = {Di Jin and Zhijing Jin and Joey Tianyi Zhou and Peter Szolovits},
  year = {2019},
  eprint = {1907.11932},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/1907.11932v6},
}