mlsanityData to 7 Oct 2026

Semantic Stealth: Adversarial Text Attacks on NLP Using Several Methods

arXiv 2404.05159 ↗First posted 8 Apr 2024cs.CL cs.CR cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

In various real-world applications such as machine translation, sentiment analysis, and question answering, a pivotal role is played by NLP models, facilitating efficient communication and decision-making processes in domains ranging from healthcare to finance. However, a significant challenge is posed to the robustness of these natural language processing models by text adversarial attacks. These attacks involve the deliberate manipulation of input text to mislead the predictions of the model while maintaining human interpretability. Despite the remarkable performance achieved by state-of-the-art models like BERT in various natural language processing tasks, they are found to remain vulnerable to adversarial perturbations in the input text. In addressing the vulnerability of text classifiers to adversarial attacks, three distinct attack mechanisms are explored in this paper using the victim model BERT: BERT-on-BERT attack, PWWS attack, and Fraud Bargain's Attack (FBA). Leveraging the IMDB, AG News, and SST2 datasets, a thorough comparative analysis is conducted to assess the effectiveness of these attacks on the BERT classifier model. It is revealed by the analysis that PWWS emerges as the most potent adversary, consistently outperforming other methods across multiple evaluation scenarios, thereby emphasizing its efficacy in generating adversarial examples for text classification. Through comprehensive experimentation, the performance of these attacks is assessed and the findings indicate that the PWWS attack outperforms others, demonstrating lower runtime, higher accuracy, and favorable semantic similarity scores. The key insight of this paper lies in the assessment of the relative performances of three prevalent state-of-the-art attack mechanisms.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 23 of its 32 references that are in the map. First posted on arXiv 8 Apr 2024.

Builds on

23 of 32 references.

References · 23

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  2. 2015A large annotated corpus for learning natural language inferencecited by 1,837
  3. 2017Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learningcited by 918
  4. 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 774
  5. 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
  6. 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 568
  7. 2018Generating Natural Language Adversarial Examplescited by 422
  8. 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 376
  9. 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 341
  10. 2018Adversarial Attacks and Defences: A Surveycited by 259
  11. 2019Multilingual Universal Sentence Encoder for Semantic Retrievalcited by 192
  12. 2013Exploiting Similarities among Languages for Machine Translationcited by 187
11 more
  1. 2016Neural Belief Tracker: Data-Driven Dialogue State Trackingcited by 142
  2. 2018Breaking NLI Systems with Sentences that Require Simple Lexical Inferencescited by 134
  3. 2017Deep Text Classification Can be Fooledcited by 105
  4. 2016Crafting Adversarial Input Sequences for Recurrent Neural Networkscited by 102
  5. 2018GenAttack: Practical Black-box Attacks with Gradient-Free Optimizationcited by 82
  6. 2018Interpretable Adversarial Perturbation in Input Embedding Space for Textcited by 67
  7. 2017Towards Crafting Text Adversarial Samplescited by 55
  8. 2018Greedy Attack and Gumbel Attack: Generating Adversarial Examples for Discrete Datacited by 37
  9. 2018Discrete Adversarial Attacks and Submodular Optimization with Applications to Text Classificationcited by 34
  10. 2021Efficient Combinatorial Optimization for Word-level Adversarial Textual Attackcited by 17
  11. 2024A Modified Word Saliency-Based Adversarial Attack on Text Classification Modelscited by 9

Built on by

Not cited yet.