Challenge: Recent studies have demonstrated that ML Models are sensitive to Adversarial Examples (AEs) AEs are generated by perturbingining examples that preserve the intrinsic utility of the ML solutions but influence the classifier's predictions between original and modified inputs.
Approach: They propose a reinforcement learning framework that learns a policy that is transferable on unseen datasets and generates utility-preserving and transferable AEs.
Outcome: The proposed framework is 10% more successful than the state-of-the-art attack TextFooler.

Similar Papers

A Reinforced Generation of Adversarial Examples for Neural Machine Translation (2020.acl-main)

Copied to clipboard

Challenge: Neural machine translation systems fail on less decent inputs, which may harm the credibility of these systems.
Approach: They propose a paradigm that generates adversarial examples using reinforcement learning to expose pitfalls for a given performance metric.
Outcome: The proposed paradigm produces stable attacks with meaning-preserving adversarial examples.
LexicalAT: Lexical-Based Adversarial Reinforcement Training for Robust Sentiment Classification (D19-1)

Copied to clipboard

Challenge: Existing text classification models are fragile and sensitive to simple perturbations.
Approach: They propose a generator-classifier adversarial training approach to improve classification models . they use a large-scale lexical knowledge base to generate attacking examples .
Outcome: The proposed approach outperforms strong baselines and reduces test errors on neural networks.
A Closer Look into the Robustness of Neural Dependency Parsers Using Better Adversarial Examples (2021.findings-acl)

Copied to clipboard

Challenge: Neural network-based models have been successful in a wide range of NLP tasks, but their performance is undermined by adversarial examples that would pose no confusion for humans.
Approach: They propose a method to generate high-quality adversarial examples with a higher number of candidate generators and stricter filters and then verify their quality using automatic and human evaluations.
Outcome: The proposed method improves the robustness of English parsing models by relying on adversarial training and model ensembling.
Implicit Unlikelihood Training: Improving Neural Text Generation with Reinforcement Learning (2021.eacl-main)

Copied to clipboard

Challenge: Existing approaches to language modeling use autoregressive methods, but they can produce repetitive results.
Approach: They propose to add a loss function for regularization to avoid unwanted properties, such as contradiction or repetition, to a language model by using policy gradient reinforcement learning.
Outcome: The proposed method reduces repetition without impacting the language model quality.
Learning to Generate Structured Output with Schema Reinforcement Learning (2025.acl-long)

Copied to clipboard

Challenge: Recent advances in large language models have facilitated the development of intelligent applications like automatic web search (Qin et al., 2023) Several methods exist for generating JSON strings from LLMs, including Prompting but often miss certain schemas.
Approach: They propose to use 40K different JSON schemas to assess models' ability to generate valid JSON outputs.
Outcome: The proposed model improves both in generating JSON outputs and downstream tasks.
Attacking Misinformation Detection Using Adversarial Examples Generated by Language Models (2025.emnlp-main)

Copied to clipboard

Challenge: Large language models can be used to attack content filtering algorithms in social media platforms.
Approach: They propose to generate adversarial examples to test the robustness of social media content filtering algorithms.
Outcome: The proposed model outperforms existing models in the case of propaganda, false claims, rumours and hyperpartisan news.
Plot-guided Adversarial Example Construction for Evaluating Open-domain Story Generation (2021.naacl-main)

Copied to clipboard

Challenge: Existing methods to generate implausible stories using plots are unnatural and oversimplify the characteristics of implusible machine-generated stories.
Approach: They propose to generate a more comprehensive set of implausible stories using plots . plots are structured representations of controllable factors used to generate stories .
Outcome: The proposed model improves the quality of generated implausible stories using plots . it shows that the evaluation metrics trained on the generated data correlate better with human judgments compared to baselines.
NaturalAdversaries: Can Naturalistic Adversaries Be as Effective as Artificial Adversaries? (2022.findings-emnlp)

Copied to clipboard

Challenge: Existing work has explored adversarial example generation for natural language understanding tasks, but these examples are often unrealistic and diverge from the real-world data distributions.
Approach: They propose a framework for adversarial example generation that is effective at fooling a given classifier and a generative model based on the key tokens from the first stage.
Outcome: The proposed framework generalizes across domains and offers insights for future research on improving robustness of neural text classification models.
Evaluating and Enhancing the Robustness of Neural Network-based Dependency Parsing Models with Adversarial Examples (2020.acl-main)

Copied to clipboard

Challenge: Previously studies focused on semantic tasks such as sentiment analysis, question answering and reading comprehension.
Approach: They propose two approaches to study where and how adversarial examples exist in dependency parsing . they use a state-of-the-art parser to find adversarials in existing texts .
Outcome: The proposed approaches show that adversarial examples exist in dependency parsing . they show that up to 77% of input examples admit adversarials .
End-to-end Adversarial Sample Generation for Data Augmentation (2023.findings-emnlp)

Copied to clipboard

Challenge: Existing methods for generating adversarial samples have deceived many neural inference models, such as text classification and machine translation.
Approach: They propose an adversarial sample generator that consists of a conditioned paraphrasing model and a condition generator and introduce a pretrained discriminator to help the adversarial sample generator adapt to the data characteristics.
Outcome: The proposed approach improves the performance of the trained model on several tasks and is robust for various attacking techniques.

What is GenGO?

GenGO is an NLP powered publication search system. It currenctly indexes 30k+ papers from ACL Anthology, and implements multi-aspect summarization, semantic search, and more!

Information

About
Limitations