paper-with-me

Papers

RockNER: A Simple Method to Create Adversarial Examples for Evaluating the Robustness of Named Entity Recognition Models

2021-09-12 · EMNLP 2021 11 · Bill Yuchen Lin, Wenyang Gao, Jun Yan, Ryan Moreno, Xiang Ren

To audit the robustness of named entity recognition (NER) models, we propose RockNER, a simple yet effective method to create natural adversarial examples. Specifically, at the entity level, we replace target entities with other entities of the same semantic class in Wikidata; at the context level, we use pre-trained language models (e.g., BERT) to generate word substitutions. Together, the two levels of attack produce natural adversarial examples that result in a shifted distribution from the training data on which our target models have been trained. We apply the proposed method to the OntoNotes dataset and create a new benchmark named OntoRock for evaluating the robustness of existing NER models via a systematic evaluation protocol. Our experiments and analysis reveal that even the best model has a significant performance drop, and these models seem to memorize in-domain entity patterns instead of reasoning from the context. Our work also studies the effects of a few simple data augmentation methods to improve the robustness of NER models.

📄 PDF Abstract BibTeX arXiv:2109.05620

Code (1)

INK-USC/RockNER 공식 구현

Tasks

Data Augmentationnamed-entity-recognitionNamed Entity RecognitionNamed Entity Recognition (NER)NER

Similar Papers 제목 키워드 기반

Towards Evaluating the Robustness of Neural Networks

2016-08-16 · Nicholas Carlini, David Wagner

Neural networks provide state-of-the-art results for most machine learning tasks. Unfortunately, neural networks are vulnerable to adversarial examples: given an input $x$ and any target classification $t$, it is possibl…

Adversarial Attack

SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustness

2022-07-25 · Jindong Gu, Hengshuang Zhao, Volker Tresp, Philip Torr

Deep neural network-based image classifications are vulnerable to adversarial perturbations. The image classifications can be easily fooled by adding artificial small and imperceptible perturbations to input images. As o…

Adversarial AttackSegmentationSemantic Segmentation

Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods

2017-05-20 · Nicholas Carlini, David Wagner

Neural networks are known to be vulnerable to adversarial examples: inputs that are close to natural inputs but classified incorrectly. In order to better understand the space of adversarial examples, we survey ten recen…

Selection of Source Images Heavily Influences the Effectiveness of Adversarial Attacks

2021-06-14 · Utku Ozbulak, Esla Timothy Anzaku, Wesley De Neve, Arnout Van Messem

Although the adoption rate of deep neural networks (DNNs) has tremendously increased in recent years, a solution for their vulnerability against adversarial examples has not yet been found. As a result, substantial resea…

Benchmarking

Bypassing Detection of URL-based Phishing Attacks Using Generative Adversarial Deep Neural Networks

2020-03-16 · DOI: 10.1145/3375708.3380315 2020 3 · Ahmed AlEroud†, George Karabatis

The URL components of web addresses are frequently used in creating phishing detection techniques. Typically, machine learning techniques are widely used to identify anomalous patterns in URLs as signs of possible phishi…

BIG-bench Machine Learning