Rethinking Targeted Adversarial Attacks For Neural Machine Translation
Targeted adversarial attacks are widely used to evaluate the robustness of neural machine translation systems. Unfortunately, this paper first identifies a critical issue in the existing settings of NMT targeted adversarial attacks, where their attacking results are largely overestimated. To this end, this paper presents a new setting for NMT targeted adversarial attacks that could lead to reliable attacking results. Under the new setting, it then proposes a Targeted Word Gradient adversarial Attack (TWGA) method to craft adversarial examples. Experimental results demonstrate that our proposed setting could provide faithful attacking results for targeted adversarial attacks on NMT systems, and the proposed TWGA method can effectively attack such victim NMT systems. In-depth analyses on a large-scale dataset further illustrate some valuable findings. 1 Our code and data are available at https://github.com/wujunjie1998/TWGA.
Code (1)
Tasks
Adversarial AttackMachine TranslationNMTTranslationSimilar Papers 제목 키워드 기반
Targeted Adversarial Attacks against Neural Machine Translation
Neural Machine Translation (NMT) systems are used in various applications. However, it has been shown that they are vulnerable to very small perturbations of their inputs, known as adversarial attacks. In this paper, we …
Adversarial AttackMachine TranslationNMTSentence+1A Targeted Attack on Black-Box Neural Machine Translation with Parallel Data Poisoning
As modern neural machine translation (NMT) systems have been widely deployed, their security vulnerabilities require close scrutiny. Most recently, NMT systems have been found vulnerable to targeted attacks which cause t…
Data PoisoningMachine TranslationNMTTranslationA Classification-Guided Approach for Adversarial Attacks against Neural Machine Translation
Neural Machine Translation (NMT) models have been shown to be vulnerable to adversarial attacks, wherein carefully crafted perturbations of the input can mislead the target model. In this paper, we introduce ACT, a novel…
Adversarial AttackMachine TranslationNMTTranslationPutting words into the system's mouth: A targeted attack on neural machine translation using monolingual data poisoning
Neural machine translation systems are known to be vulnerable to adversarial test inputs, however, as we show in this paper, these systems are also vulnerable to training attacks. Specifically, we propose a poisoning att…
Data PoisoningMachine TranslationMisinformationNMT+1PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks
Imperceptible adversarial attacks have recently attracted increasing research interests. Existing methods typically incorporate external modules or loss terms other than a simple $l_p$-norm into the attack process to ach…