Model Robustness with Text Classification: Semantic-preserving adversarial attacks
We propose algorithms to create adversarial attacks to assess model robustness in text classification problems. They can be used to create white box attacks and black box attacks while at the same time preserving the semantics and syntax of the original text. The attacks cause significant number of flips in white-box setting and same rule based can be used in black-box setting. In a black-box setting, the attacks created are able to reverse decisions of transformer based architectures.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial AttackClassificationGeneral Classificationtext-classificationText ClassificationSimilar Papers 제목 키워드 기반
Semantics-Preserving Adversarial Training
Adversarial training is a defense technique that improves adversarial robustness of a deep neural network (DNN) by including adversarial examples in the training data. In this paper, we identify an overlooked problem of …
Adversarial RobustnessGenerating Black-Box Adversarial Examples for Text Classifiers Using a Deep Reinforced Model
Recently, generating adversarial examples has become an important means of measuring robustness of a deep learning model. Adversarial examples help us identify the susceptibilities of the model and further counter those …
reinforcement-learningReinforcement LearningReinforcement Learning (RL)Sentiment Analysis+1Robustness of Misinformation Classification Systems to Adversarial Examples Through BeamAttack
We extend BeamAttack, an adversarial attack algorithm designed to evaluate the robustness of text classification systems through word-level modifications guided by beam search. Our extensions include support for word del…
Adversarial AttackMisinformationtext-classificationText ClassificationAGFT: Alignment-Guided Fine-Tuning for Zero-Shot Adversarial Robustness of Vision-Language Models
Pre-trained vision-language models (VLMs) exhibit strong zero-shot generalization but remain vulnerable to adversarial perturbations. Existing classification-guided adversarial fine-tuning methods often disrupt pre-train…
Zero-shot GeneralizationAdversarial RobustnessAdversarial Text Generation with Dynamic Contextual Perturbation
Adversarial attacks on Natural Language Processing (NLP) models expose vulnerabilities by introducing subtle perturbations to input text, often leading to misclassification while maintaining human readability. Existing m…
Adversarial TextText Generation