{"total":35,"rows":[{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2112.06569","title":"Triangle Attack: A Query-efficient Decision-based Adversarial Attack","created":"2021-12-13","cited_by_count":48,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2402.15152","title":"On the Duality Between Sharpness-Aware Minimization and Adversarial Training","created":"2024-02-23","cited_by_count":24,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2103.00676","title":"Token-Modification Adversarial Attacks for Natural Language Processing: A Survey","created":"2021-03-01","cited_by_count":12,"area":null},{"id":"2202.13817","title":"Robust Textual Embedding against Word-level Adversarial Attacks","created":"2022-02-28","cited_by_count":12,"area":null},{"id":"2203.12709","title":"Adversarial Training for Improving Model Robustness? Look at Both Prediction and Interpretation","created":"2022-03-23","cited_by_count":12,"area":null},{"id":"2201.08193","title":"TextHacker: Learning based Hybrid Local Search Algorithm for Text Hard-label Adversarial Attack","created":"2022-01-20","cited_by_count":10,"area":null},{"id":"2406.19230","title":"Spiking Convolutional Neural Networks for Text Classification","created":"2024-06-27","cited_by_count":10,"area":null},{"id":"2302.05892","title":"TextDefense: Adversarial Text Detection based on Word Importance Entropy","created":"2023-02-12","cited_by_count":9,"area":null},{"id":"2303.07320","title":"Model-tuning Via Prompts Makes NLP Models Adversarially Robust","created":"2023-03-13","cited_by_count":9,"area":null},{"id":"2109.05698","title":"Detecting Textual Adversarial Examples through Randomized Substitution and Vote","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2302.02023","title":"TextShield: Beyond Successfully Detecting Adversarial Sentences in Text Classification","created":"2023-02-03","cited_by_count":8,"area":null},{"id":"2107.07970","title":"How Vulnerable Are Automatic Fake News Detection Methods to Adversarial Attacks?","created":"2021-07-16","cited_by_count":7,"area":null},{"id":"2401.12461","title":"Fast Adversarial Training against Textual Adversarial Attacks","created":"2024-01-23","cited_by_count":7,"area":null},{"id":"2304.08767","title":"Masked Language Model Based Textual Adversarial Example Detection","created":"2023-04-18","cited_by_count":5,"area":null},{"id":"2202.05758","title":"Using Random Perturbations to Mitigate Adversarial Attacks on Sentiment Analysis Models","created":"2022-02-11","cited_by_count":4,"area":null},{"id":"2504.08798","title":"Exploring Gradient-Guided Masked Language Model to Detect Textual Adversarial Attacks","created":"2025-04-08","cited_by_count":4,"area":null},{"id":"2305.04067","title":"The Best Defense is Attack: Repairing Semantics in Textual Adversarial Examples","created":"2023-05-06","cited_by_count":3,"area":null},{"id":"2305.18503","title":"From Adversarial Arms Race to Model-centric Evaluation: Motivating a Unified Automatic Robustness Evaluation Framework","created":"2023-05-29","cited_by_count":3,"area":null},{"id":"2403.18423","title":"SemRoDe: Macro Adversarial Training to Learn Representations That are Robust to Word-Level Attacks","created":"2024-03-27","cited_by_count":3,"area":null},{"id":"2508.11667","title":"Guided Perturbation Sensitivity (GPS): Detecting Adversarial Text via Embedding Stability and Word Importance","created":"2025-08-06","cited_by_count":2,"area":null},{"id":"2307.01225","title":"Alert-ME: An Explainability-Driven Defense Against Adversarial Examples in Transformer-Based Text Classification","created":"2023-07-03","cited_by_count":1,"area":null},{"id":"2507.10330","title":"Bridging Robustness and Generalization Against Word Substitution Attacks in NLP via the Growth Bound Matrix Approach","created":"2025-07-14","cited_by_count":1,"area":null},{"id":"2509.18836","title":"Bounded PCTL Model Checking of Large Language Model Outputs","created":"2025-09-23","cited_by_count":1,"area":null},{"id":"2306.01273","title":"VoteTRANS: Detecting Adversarial Text without Training by Voting on Hard Labels of Transformations","created":"2023-06-02","cited_by_count":0,"area":null},{"id":"2401.17196","title":"Single Word Change is All You Need: Using LLMs to Create Synthetic Training Examples for Text Classifiers","created":"2024-01-30","cited_by_count":0,"area":null},{"id":"2404.02931","title":"READ: Improving Relation Extraction from an ADversarial Perspective","created":"2024-04-02","cited_by_count":0,"area":null},{"id":"2404.11538","title":"GenFighter: A Generative and Evolutive Textual Attack Removal","created":"2024-04-17","cited_by_count":0,"area":null},{"id":"2508.05671","title":"DINA: A Dual Defense Framework Against Internal Noise and External Attacks in Natural Language Processing","created":"2025-08-04","cited_by_count":0,"area":null},{"id":"2509.20699","title":"Overcoming Black-box Attack Inefficiency with Hybrid and Dynamic Select Algorithms","created":"2025-09-25","cited_by_count":0,"area":null},{"id":"2606.13439","title":"S-GBT: Smooth Growth Bound Tensor for Certified Robustness Against Word Substitution Attacks in NLP","created":"2026-06-11","cited_by_count":0,"area":null},{"id":"2608.09510","title":"Build it, Break it, Repeat: Benchmarking and improving LLM-manipulated disinformation detection in social media posts","created":"2026-08-10","cited_by_count":0,"area":null}],"next_cursor":null}