Targeted Adversarial Attacks against Neural Machine Translation
Neural Machine Translation (NMT) systems are used in various applications. However, it has been shown that they are vulnerable to very small perturbations of their inputs, known as adversarial attacks. In this paper, we propose a new targeted adversarial attack against NMT models. In particular, our goal is to insert a predefined target keyword into the translation of the adversarial sentence while maintaining similarity between the original sentence and the perturbed one in the source domain. To this aim, we propose an optimization problem, including an adversarial loss term and a similarity term. We use gradient projection in the embedding space to craft an adversarial sentence. Experimental results show that our attack outperforms Seq2Sick, the other targeted adversarial attack against NMT models, in terms of success rate and decrease in translation quality. Our attack succeeds in inserting a keyword into the translation for more than 75% of sentences while similarity with the original sentence stays preserved.
Code (1)
Tasks
Adversarial AttackMachine TranslationNMTSentenceTranslationSimilar Papers 제목 키워드 기반
A Classification-Guided Approach for Adversarial Attacks against Neural Machine Translation
Neural Machine Translation (NMT) models have been shown to be vulnerable to adversarial attacks, wherein carefully crafted perturbations of the input can mislead the target model. In this paper, we introduce ACT, a novel…
Adversarial AttackMachine TranslationNMTTranslationRethinking Targeted Adversarial Attacks For Neural Machine Translation
Targeted adversarial attacks are widely used to evaluate the robustness of neural machine translation systems. Unfortunately, this paper first identifies a critical issue in the existing settings of NMT targeted adversar…
Adversarial AttackMachine TranslationNMTTranslationPutting words into the system's mouth: A targeted attack on neural machine translation using monolingual data poisoning
Neural machine translation systems are known to be vulnerable to adversarial test inputs, however, as we show in this paper, these systems are also vulnerable to training attacks. Specifically, we propose a poisoning att…
Data PoisoningMachine TranslationMisinformationNMT+1A Targeted Attack on Black-Box Neural Machine Translation with Parallel Data Poisoning
As modern neural machine translation (NMT) systems have been widely deployed, their security vulnerabilities require close scrutiny. Most recently, NMT systems have been found vulnerable to targeted attacks which cause t…
Data PoisoningMachine TranslationNMTTranslationOn Configurable Defense against Adversarial Example Attacks
Machine learning systems based on deep neural networks (DNNs) have gained mainstream adoption in many applications. Recently, however, DNNs are shown to be vulnerable to adversarial example attacks with slight perturbati…