Targeted Adversarial Attacks against Neural Machine Translation
Not on the map. Why?
Abstract (arXiv)
Neural Machine Translation (NMT) systems are used in various applications. However, it has been shown that they are vulnerable to very small perturbations of their inputs, known as adversarial attacks. In this paper, we propose a new targeted adversarial attack against NMT models. In particular, our goal is to insert a predefined target keyword into the translation of the adversarial sentence while maintaining similarity between the original sentence and the perturbed one in the source domain. To this aim, we propose an optimization problem, including an adversarial loss term and a similarity term. We use gradient projection in the embedding space to craft an adversarial sentence. Experimental results show that our attack outperforms Seq2Sick, the other targeted adversarial attack against NMT models, in terms of success rate and decrease in translation quality. Our attack succeeds in inserting a keyword into the translation for more than 75% of sentences while similarity with the original sentence stays preserved.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Builds on 19 of its 21 references that are in the map. First posted on arXiv 2 Mar 2023.
Builds on
19 of 21 references.
References · 19
- 2017Attention Is All You Needcited by 60,361
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2014Neural Machine Translation by Jointly Learning to Align and Translatecited by 4,548
- 2018A Call for Clarity in Reporting BLEU Scorescited by 1,799
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
- 2019What do you learn from context? Probing for sentence structure in contextualized word representationscited by 438
- 2017Synthetic and Natural Noise Both Break Neural Machine Translationcited by 306
- 2018Marian: Fast Neural Machine Translation in C++cited by 203
- 2019Multilingual Universal Sentence Encoder for Semantic Retrievalcited by 193
- 2019Robust Neural Machine Translation with Doubly Adversarial Inputscited by 106
- 2018Seq2Sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examplescited by 94
7 more
- 2018On Adversarial Examples for Character-Level Neural Machine Translationcited by 85
- 2020Imitation Attacks and Defenses for Black-box Machine Translation Systemscited by 81
- 2020AdvAug: Robust Adversarial Augmentation for Neural Machine Translationcited by 67
- 2019On Evaluation of Adversarial Perturbations for Sequence-to-Sequence Modelscited by 56
- 2020Optimism in the Face of Adversity: Understanding and Improving Deep Learning through Adversarial Robustnesscited by 28
- 2023TransFool: An Adversarial Attack against Neural Machine Translation Modelscited by 12
- 2022Block-Sparse Adversarial Attack to Fool Transformer-Based Text Classifierscited by 9
Built on by
Citing papers per year: 2023: 3; 2024: 5; 2025: 1; 2026: 1.
10 papers.
- 2025Bridging the Linguistic Divide: A Survey on Leveraging Large Language Models for Machine Translationcited by 8
- 2023A Classification-Guided Approach for Adversarial Attacks against Neural Machine Translationcited by 4
- 2024Revisiting Character-level Adversarial Attacks for Language Modelscited by 4
- 2023Translate your gibberish: black-box adversarial attack on machine translation systemscited by 2
- 2024Vision-fused Attack: Advancing Aggressive and Stealthy Adversarial Text against Neural Machine Translationcited by 1
- 2023Machine Translation Models Stand Strong in the Face of Adversarial Attackscited by 0
- 2024BCAmirs at SemEval-2024 Task 4: Beyond Words: A Multimodal and Multilingual Exploration of Persuasion in Memescited by 0
- 2024Rethinking Targeted Adversarial Attacks For Neural Machine Translationcited by 0
- 2024NMT-Obfuscator Attack: Ignore a sentence in translation with only one wordcited by 0
- 2026When Minor Edits Matter: LLM-Driven Prompt Attack for Medical VLM Robustness in Ultrasoundcited by 0
- 2026When Minor Edits Matter: LLM-Driven Prompt Attack for Medical VLM Robustness in Ultrasound22 Mar 2026
- 2025Bridging the Linguistic Divide: A Survey on Leveraging Large Language Models for Machine Translation2 Apr 2025
- 2024NMT-Obfuscator Attack: Ignore a sentence in translation with only one word19 Nov 2024
- 2024Vision-fused Attack: Advancing Aggressive and Stealthy Adversarial Text against Neural Machine Translation8 Sep 2024
- 2024Rethinking Targeted Adversarial Attacks For Neural Machine Translation7 Jul 2024
- 2024Revisiting Character-level Adversarial Attacks for Language Models7 May 2024
- 2024BCAmirs at SemEval-2024 Task 4: Beyond Words: A Multimodal and Multilingual Exploration of Persuasion in Memes3 Apr 2024
- 2023Machine Translation Models Stand Strong in the Face of Adversarial Attacks10 Sep 2023
- 2023A Classification-Guided Approach for Adversarial Attacks against Neural Machine Translation29 Aug 2023
- 2023Translate your gibberish: black-box adversarial attack on machine translation systems20 Mar 2023