{"total":45,"rows":[{"id":"2104.13733","title":"Gradient-based Adversarial Attacks against Text Transformers","created":"2021-04-15","cited_by_count":234,"area":null},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2110.15317","title":"Bridge the Gap Between CV and NLP! A Gradient-based Textual Adversarial Attack Framework","created":"2021-10-28","cited_by_count":28,"area":null},{"id":"2109.04367","title":"Multi-granularity Textual Adversarial Attack with Behavior Cloning","created":"2021-09-09","cited_by_count":21,"area":null},{"id":"2109.05925","title":"Adversarial Examples for Evaluating Math Word Problem Solvers","created":"2021-09-13","cited_by_count":20,"area":null},{"id":"2109.02229","title":"Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack","created":"2021-09-06","cited_by_count":17,"area":null},{"id":"2109.04775","title":"A Strong Baseline for Query Efficient Attacks in a Black Box Setting","created":"2021-09-10","cited_by_count":16,"area":null},{"id":"2402.01806","title":"HQA-Attack: Toward High Quality Black-Box Hard-Label Adversarial Attack on Text","created":"2024-02-02","cited_by_count":16,"area":null},{"id":"2506.11113","title":"Breaking the Reviewer: Assessing the Vulnerability of Large Language Models in Automated Peer Review Under Textual Adversarial Attacks","created":"2025-06-08","cited_by_count":16,"area":null},{"id":"2103.00676","title":"Token-Modification Adversarial Attacks for Natural Language Processing: A Survey","created":"2021-03-01","cited_by_count":12,"area":null},{"id":"2202.13817","title":"Robust Textual Embedding against Word-level Adversarial Attacks","created":"2022-02-28","cited_by_count":12,"area":null},{"id":"2201.00768","title":"Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions","created":"2022-01-03","cited_by_count":11,"area":null},{"id":"2201.08193","title":"TextHacker: Learning based Hybrid Local Search Algorithm for Text Hard-label Adversarial Attack","created":"2022-01-20","cited_by_count":10,"area":null},{"id":"2205.00177","title":"Practice Makes a Solver Perfect: Data Augmentation for Math Word Problem Solvers","created":"2022-04-30","cited_by_count":9,"area":null},{"id":"2308.00319","title":"LimeAttack: Local Explainable Method for Textual Hard-Label Adversarial Attack","created":"2023-08-01","cited_by_count":9,"area":null},{"id":"2109.05698","title":"Detecting Textual Adversarial Examples through Randomized Substitution and Vote","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2111.01528","title":"Effective and Imperceptible Adversarial Textual Attack via Multi-objectivization","created":"2021-11-02","cited_by_count":5,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2304.08767","title":"Masked Language Model Based Textual Adversarial Example Detection","created":"2023-04-18","cited_by_count":5,"area":null},{"id":"2502.04643","title":"Confidence Elicitation: A New Attack Vector for Large Language Models","created":"2025-02-07","cited_by_count":5,"area":null},{"id":"2506.11111","title":"Evaluating and Improving Robustness in Large Language Models: A Survey and Future Directions","created":"2025-06-08","cited_by_count":5,"area":null},{"id":"2506.11844","title":"TrustGLM: Evaluating the Robustness of GraphLLMs Against Prompt, Text, and Structure Attacks","created":"2025-06-13","cited_by_count":5,"area":null},{"id":"2308.15246","title":"A Classification-Guided Approach for Adversarial Attacks against Neural Machine Translation","created":"2023-08-29","cited_by_count":4,"area":null},{"id":"2403.11833","title":"SSCAE -- Semantic, Syntactic, and Context-aware natural language Adversarial Examples generator","created":"2024-03-18","cited_by_count":4,"area":null},{"id":"2203.11199","title":"Distinguishing Non-natural from Natural Adversarial Samples for More Robust Pre-trained Language Model","created":"2022-03-19","cited_by_count":3,"area":null},{"id":"2211.15363","title":"On the Security Vulnerabilities of Text-to-SQL Models","created":"2022-11-28","cited_by_count":3,"area":null},{"id":"2403.18423","title":"SemRoDe: Macro Adversarial Training to Learn Representations That are Robust to Word-Level Attacks","created":"2024-03-27","cited_by_count":3,"area":null},{"id":"2210.14260","title":"Universal Evasion Attacks on Summarization Scoring","created":"2022-10-25","cited_by_count":2,"area":null},{"id":"2212.13989","title":"AdvCat: Domain-Agnostic Robustness Assessment for Cybersecurity-Critical Applications with Categorical Inputs","created":"2022-12-13","cited_by_count":2,"area":null},{"id":"2501.02654","title":"Tougher Text, Smarter Models: Raising the Bar for Adversarial Defence Benchmarks","created":"2025-01-05","cited_by_count":2,"area":null},{"id":"2204.04458","title":"Understanding, Detecting, and Separating Out-of-Distribution Samples and Adversarial Samples in Text Classification","created":"2022-04-09","cited_by_count":1,"area":null},{"id":"2207.01149","title":"RAF: Recursive Adversarial Attacks on Face Recognition Using Extremely Limited Queries","created":"2022-07-04","cited_by_count":1,"area":null},{"id":"2310.01452","title":"Fooling the Textual Fooler via Randomizing Latent Representations","created":"2023-10-02","cited_by_count":1,"area":null},{"id":"2403.16176","title":"Subspace Defense: Discarding Adversarial Perturbations by Learning a Subspace for Clean Signals","created":"2024-03-24","cited_by_count":1,"area":null},{"id":"2507.10330","title":"Bridging Robustness and Generalization Against Word Substitution Attacks in NLP via the Growth Bound Matrix Approach","created":"2025-07-14","cited_by_count":1,"area":null},{"id":"2508.10039","title":"Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries","created":"2025-08-10","cited_by_count":1,"area":null},{"id":"2411.12473","title":"NMT-Obfuscator Attack: Ignore a sentence in translation with only one word","created":"2024-11-19","cited_by_count":0,"area":null},{"id":"2603.10689","title":"Contract And Conquer: How to Provably Compute Adversarial Examples for a Black-Box Model?","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2603.10842","title":"PivotAttack: Rethinking the Search Trajectory in Hard-Label Text Attacks via Pivot Words","created":"2026-03-11","cited_by_count":0,"area":null},{"id":"2605.24958","title":"SEP-Attack: A Simple and Effective Paradigm for Transfer-Based Textual Adversarial Attack","created":"2026-05-24","cited_by_count":0,"area":null},{"id":"2606.13439","title":"S-GBT: Smooth Growth Bound Tensor for Certified Robustness Against Word Substitution Attacks in NLP","created":"2026-06-11","cited_by_count":0,"area":null},{"id":"2607.14101","title":"LBA: Textual Hard-Label Adversarial Attack under Low Query Budgets","created":"2026-05-05","cited_by_count":0,"area":null},{"id":"2608.29568","title":"OASIS: Optimizing Attacker Sequences for Hard-Label Black-Box Text Attacks","created":"2026-08-30","cited_by_count":0,"area":null}],"next_cursor":null}