{"total":17,"rows":[{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2405.02764","title":"Assessing Adversarial Robustness of Large Language Models: An Empirical Study","created":"2024-05-04","cited_by_count":21,"area":null},{"id":"2402.01806","title":"HQA-Attack: Toward High Quality Black-Box Hard-Label Adversarial Attack on Text","created":"2024-02-02","cited_by_count":16,"area":null},{"id":"2103.00676","title":"Token-Modification Adversarial Attacks for Natural Language Processing: A Survey","created":"2021-03-01","cited_by_count":12,"area":null},{"id":"2202.13817","title":"Robust Textual Embedding against Word-level Adversarial Attacks","created":"2022-02-28","cited_by_count":12,"area":null},{"id":"2201.08193","title":"TextHacker: Learning based Hybrid Local Search Algorithm for Text Hard-label Adversarial Attack","created":"2022-01-20","cited_by_count":10,"area":null},{"id":"2107.11275","title":"A Differentiable Language Model Adversarial Attack on Text Classifiers","created":"2021-07-23","cited_by_count":9,"area":null},{"id":"2109.07403","title":"BERT is Robust! A Case Against Synonym-Based Adversarial Examples in Text Classification","created":"2021-09-15","cited_by_count":9,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2107.07610","title":"Self-Supervised Contrastive Learning with Adversarial Perturbations for Defending Word Substitution-based Attacks","created":"2021-07-15","cited_by_count":4,"area":null},{"id":"2203.11199","title":"Distinguishing Non-natural from Natural Adversarial Samples for More Robust Pre-trained Language Model","created":"2022-03-19","cited_by_count":3,"area":null},{"id":"2208.08029","title":"A Context-Aware Approach for Textual Adversarial Attack through Probability Difference Guided Beam Search","created":"2022-08-17","cited_by_count":1,"area":null},{"id":"2508.10039","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","created":"2025-08-10","cited_by_count":1,"area":null},{"id":"2110.05748","title":"SEPP: Similarity Estimation of Predicted Probabilities for Defending and Detecting Adversarial Text","created":"2021-10-12","cited_by_count":0,"area":null},{"id":"2603.10842","title":"PivotAttack: Rethinking the Search Trajectory in Hard-Label Text Attacks via Pivot Words","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2605.24958","title":"SEP-Attack: A Simple and Effective Paradigm for Transfer-Based Textual Adversarial Attack","created":"2026-05-24","cited_by_count":0,"area":null},{"id":"2608.29568","title":"OASIS: Optimizing Attacker Sequences for Hard-Label Black-Box Text Attacks","created":"2026-08-30","cited_by_count":0,"area":null}],"next_cursor":null}