ReinforceBug: A Framework to Generate Adversarial Textual Examples
Not on the map. Why?
Abstract (arXiv)
Adversarial Examples (AEs) generated by perturbing original training examples are useful in improving the robustness of Deep Learning (DL) based models. Most prior works, generate AEs that are either unconscionable due to lexical errors or semantically or functionally deviant from original examples. In this paper, we present ReinforceBug, a reinforcement learning framework, that learns a policy that is transferable on unseen datasets and generates utility-preserving and transferable (on other models) AEs. Our results show that our method is on average 10% more successful as compared to the state-of-the-art attack TextFooler. Moreover, the target models have on average 73.64% confidence in the wrong prediction, the generated AEs preserve the functional equivalence and semantic similarity (83.38% ) to their original counterparts, and are transferable on other models with an average success rate of 46%.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 15 of its 44 references that are in the map. First posted on arXiv 11 Mar 2021.
Builds on
15 of 44 references.
References · 15
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 663
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 488
- 2018Universal Sentence Encodercited by 485
- 2018Generating Natural Language Adversarial Examplescited by 422
- 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 411
- 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 376
- 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 341
- 2017Generating Natural Adversarial Examplescited by 182
Built on by
Citing papers per year: 2023: 1.
1 paper.