OpenFact at CheckThat! 2024: Combining Multiple Attack Methods for Effective Adversarial Text Generation
Not on the map. Why?
Abstract (arXiv)
This paper presents the experiments and results for the CheckThat! Lab at CLEF 2024 Task 6: Robustness of Credibility Assessment with Adversarial Examples (InCrediblAE). The primary objective of this task was to generate adversarial examples in five problem domains in order to evaluate the robustness of widely used text classification methods (fine-tuned BERT, BiLSTM, and RoBERTa) when applied to credibility assessment issues. This study explores the application of ensemble learning to enhance adversarial attacks on natural language processing (NLP) models. We systematically tested and refined several adversarial attack methods, including BERT-Attack, Genetic algorithms, TextFooler, and CLARE, on five datasets across various misinformation tasks. By developing modified versions of BERT-Attack and hybrid methods, we achieved significant improvements in attack effectiveness. Our results demonstrate the potential of modification and combining multiple methods to create more sophisticated and effective adversarial attack strategies, contributing to the development of more robust and secure systems.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 14 of its 25 references that are in the map. First posted on arXiv 4 Sep 2024.
Builds on
14 of 25 references.
References · 14
- 2020BLEURT: Learning Robust Metrics for Text Generationcited by 1,196
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 663
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 488
- 2018Generating Natural Language Adversarial Examplescited by 422
- 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 341
- 2020BAE: BERT-based Adversarial Examples for Text Classificationcited by 316
- 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 282
- 2016Counter-fitting Word Vectors to Linguistic Constraintscited by 138
- 2020Contextualized Perturbation for Textual Adversarial Attackcited by 136
- 2023An LLM can Fool Itself: A Prompt-Based Adversarial Attackcited by 111
- 2020OpenAttack: An Open-source Textual Adversarial Attack Toolkitcited by 84
- 2023Verifying the Robustness of Automatic Credibility Assessmentcited by 8
Built on by
Citing papers per year: 2024: 1; 2025: 2; 2026: 1.
4 papers.
- 2024Attacking Misinformation Detection Using Adversarial Examples Generated by Language Modelscited by 10
- 2025Entity-aware Cross-lingual Claim Detection for Automated Fact-checkingcited by 3
- 2025Robustness of Misinformation Classification Systems to Adversarial Examples Through BeamAttackcited by 0
- 2026OASIS: Optimizing Attacker Sequences for Hard-Label Black-Box Text Attackscited by 0
- 2026OASIS: Optimizing Attacker Sequences for Hard-Label Black-Box Text Attacks30 Aug 2026
- 2025Robustness of Misinformation Classification Systems to Adversarial Examples Through BeamAttack30 Jun 2025
- 2025Entity-aware Cross-lingual Claim Detection for Automated Fact-checking19 Mar 2025
- 2024Attacking Misinformation Detection Using Adversarial Examples Generated by Language Models28 Oct 2024