| Challenge: | Using adversarial examples to measure robustness of deep learning models has become a standard procedure due to the difficulty of creating white-box adversarials for discrete text input. |
| Approach: | They propose two novel attacks which aim to remove or change a word in a translation, rather than simply break the NMT. |
| Outcome: | The proposed attacks are significantly stronger than their black-box counterparts in different attack scenarios, showing more serious vulnerabilities than previously known. |
Similar Papers
Crafting Adversarial Examples for Neural Machine Translation (2021.acl-long)
Copied to clipboard
| Challenge: | Effective adversary generation for neural machine translation is crucial for robust systems. |
| Approach: | They propose to leverage round-trip translation technique to build valid metrics for evaluating NMT adversarial attacks. |
| Outcome: | The proposed method could break the state-of-art NMT models with small perturbations. |
PAEG: Phrase-level Adversarial Example Generation for Neural Machine Translation (2022.coling-1)
Copied to clipboard
| Challenge: | Existing methods for adversarial example generation are word-level or character-level, which ignore the ubiquitous phrase structure. |
| Approach: | They propose a phrase-level adversarial example generation framework to enhance the robustness of the translation model by adopting a sentence-level substitution strategy. |
| Outcome: | The proposed method improves translation performance and robustness to noise on three benchmarks. |
Evaluating and Enhancing the Robustness of Neural Network-based Dependency Parsing Models with Adversarial Examples (2020.acl-main)
Copied to clipboard
| Challenge: | Previously studies focused on semantic tasks such as sentiment analysis, question answering and reading comprehension. |
| Approach: | They propose two approaches to study where and how adversarial examples exist in dependency parsing . they use a state-of-the-art parser to find adversarials in existing texts . |
| Outcome: | The proposed approaches show that adversarial examples exist in dependency parsing . they show that up to 77% of input examples admit adversarials . |
Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution (2021.emnlp-main)
Copied to clipboard
Zongyi Li, Jianhan Xu, Jiehang Zeng, Linyang Li, Xiaoqing Zheng, Qi Zhang, Kai-Wei Chang, Cho-Jui Hsieh
| Challenge: | Existing methods to defend against adversarial word-substitution attacks have not been evaluated or compared in a systematic manner. |
| Approach: | They propose to compare different defense methods under representative adversarial attacks . they propose a method that improves the robustness of neural text classifiers against such attacks a . |
| Outcome: | The proposed method improves robustness of neural text classifiers against such attacks by a significant margin. |
A Classification-Guided Approach for Adversarial Attacks against Neural Machine Translation (2024.eacl-long)
Copied to clipboard
| Challenge: | Extensive research has been devoted to adversarial attacks against NMT models . perturbations of inputs can mislead the target model, resulting in incorrect outputs . |
| Approach: | They propose an adversarial attack framework that alters the class of output translations of an NMT model and a classifier to craft adversarials whose translations belong to a different class . |
| Outcome: | The proposed approach has a more substantial effect on the translation by altering the overall meaning, which leads to a different class determined by an oracle classifier. |
Effective Adversarial Regularization for Neural Machine Translation (P19-1)
Copied to clipboard
| Challenge: | Existing (small) perturbations that induce a critical prediction error in machine learning models are often referred to as adversarial examples. |
| Approach: | They propose to use adversarial perturbations to regularize text classification tasks by adding adversarials to a typical NMT model structure. |
| Outcome: | The proposed method significantly improves performance of NMT models, such as LSTM-based and Transformer-based models. |
Adversarial Subword Regularization for Robust Neural Machine Translation (2020.findings-emnlp)
Copied to clipboard
| Challenge: | Existing methods for segmenting words into subword units are not robust enough to handle multiple subword candidates. |
| Approach: | They propose to regularize subword segmentations that maximize the translation loss by using gradient signals during training to prevent erroneous segmentations of unseen words. |
| Outcome: | The proposed method improves the performance of NMT models on low-resource and out-domain datasets. |
Robust Neural Machine Translation with Doubly Adversarial Inputs (P19-1)
Copied to clipboard
| Challenge: | Neural machine translation (NMT) models suffer from noisy perturbations in the input . a gradient-based method to craft adversarial examples informed by the translation loss is proposed . |
| Approach: | They propose an approach to improve the robustness of NMT models by attacking the translation model with adversarial source examples and defending the model with a target input. |
| Outcome: | The proposed approach improves translation performance and robustness on clean inputs and higher on noisy data. |
Robustness and Adversarial Examples in Natural Language Processing (2021.emnlp-tutorials)
Copied to clipboard
| Challenge: | This tutorial aims to raise awareness of practical concerns about NLP robustness . it aims at addressing the weaknesses of NLP systems when faced with adversarial inputs and data with a distribution shift . |
| Approach: | This tutorial aims to bring awareness of practical concerns about NLP robustness . it reviews recent studies on analyzing the weakness of NLP systems when facing adversarial inputs . |
| Outcome: | This tutorial aims to bring awareness of practical concerns about NLP robustness . it will examine the weaknesses of NLP systems when faced with adversarial inputs and data with a distribution shift . |
HotFlip: White-Box Adversarial Examples for Text Classification (P18-2)
Copied to clipboard
| Challenge: | Existing methods to create adversarial examples without explicit knowledge of model parameters are not effective. |
| Approach: | They propose an efficient method to generate white-box adversarial examples to trick a character-level neural classifier by an atomic flip operation. |
| Outcome: | The proposed method can be adapted to attack a word-level classifier with a few constraints. |