中文
相关论文

相关论文: Textual Manifold-based Defense Against Natural Lan…

200 篇论文

Following the recent adoption of deep neural networks (DNN) accross a wide range of applications, adversarial attacks against these models have proven to be an indisputable threat. Adversarial samples are crafted with a deliberate intention…

机器学习 · 计算机科学 2017-08-31 Valentina Zantedeschi , Maria-Irina Nicolae , Ambrish Rawat

Adversarial examples pose a significant challenge to deep neural networks (DNNs) across both image and text domains, with the intent to degrade model performance through meticulously altered inputs. Adversarial texts, however, are distinct…

机器学习 · 计算机科学 2025-01-24 Shakila Mahjabin Tonni , Pedro Faustini , Mark Dras

Natural Language Processing (NLP) models based on Machine Learning (ML) are susceptible to adversarial attacks -- malicious algorithms that imperceptibly modify input text to force models into making incorrect predictions. However,…

计算与语言 · 计算机科学 2023-05-26 Salijona Dyrmishi , Salah Ghamizi , Maxime Cordy

Recently it has been shown that state-of-the-art NLP models are vulnerable to adversarial attacks, where the predictions of a model can be drastically altered by slight modifications to the input (such as synonym substitutions). While…

计算与语言 · 计算机科学 2023-07-13 Yahan Yang , Soham Dan , Dan Roth , Insup Lee

Generating adversarial examples for natural language is hard, as natural language consists of discrete symbols, and examples are often of variable lengths. In this paper, we propose a geometry-inspired attack for generating natural language…

计算与语言 · 计算机科学 2020-10-06 Zhao Meng , Roger Wattenhofer

The vulnerability of Deep Neural Networks (DNNs) to adversarial examples has been confirmed. Existing adversarial defenses primarily aim at preventing adversarial examples from attacking DNNs successfully, rather than preventing their…

计算机视觉与模式识别 · 计算机科学 2023-03-09 Jinwei Wang , Hao Wu , Haihua Wang , Jiawei Zhang , Xiangyang Luo , Bin Ma

Present attack methods can make state-of-the-art classification systems based on deep neural networks misclassify every adversarially modified test example. The design of general defense strategies against a wide range of such attacks still…

机器学习 · 计算机科学 2019-08-06 Sailik Sengupta , Tathagata Chakraborti , Subbarao Kambhampati

Nowadays the deep learning technology is growing faster and shows dramatic performance in computer vision areas. However, it turns out a deep learning based model is highly vulnerable to some small perturbation called an adversarial attack.…

计算机视觉与模式识别 · 计算机科学 2020-03-06 Seungju Cho , Tae Joon Jun , Mingu Kang , Daeyoung Kim

Word-level adversarial attacks have shown success in NLP models, drastically decreasing the performance of transformer-based models in recent years. As a countermeasure, adversarial defense has been explored, but relatively few efforts have…

计算与语言 · 计算机科学 2022-03-04 KiYoon Yoo , Jangho Kim , Jiho Jang , Nojun Kwak

Robustness evaluation against adversarial examples has become increasingly important to unveil the trustworthiness of the prevailing deep models in natural language processing (NLP). However, in contrast to the computer vision domain where…

计算与语言 · 计算机科学 2022-12-20 Bairu Hou , Jinghan Jia , Yihua Zhang , Guanhua Zhang , Yang Zhang , Sijia Liu , Shiyu Chang

Adversarial vulnerability remains a major obstacle to constructing reliable NLP systems. When imperceptible perturbations are added to raw input text, the performance of a deep learning model may drop dramatically under attacks. Recent work…

计算与语言 · 计算机科学 2022-10-28 Jiahao Zhao , Wenji Mao

Human language encompasses a wide range of intricate and diverse implicit features, which attackers can exploit to launch adversarial or backdoor attacks, compromising DNN models for NLP tasks. Existing model-oriented defenses often require…

机器学习 · 计算机科学 2025-09-26 Yi Jiang , Oubo Ma , Yong Yang , Tong Zhang , Shouling Ji

Adversarial purification is a successful defense mechanism against adversarial attacks without requiring knowledge of the form of the incoming attack. Generally, adversarial purification aims to remove the adversarial perturbations…

计算与语言 · 计算机科学 2023-05-04 Linyang Li , Demin Song , Xipeng Qiu

Adversarial examples contain carefully crafted perturbations that can fool deep neural networks (DNNs) into making wrong predictions. Enhancing the adversarial robustness of DNNs has gained considerable interest in recent years. Although…

计算机视觉与模式识别 · 计算机科学 2021-07-27 Shao-Yuan Lo , Vishal M. Patel

The adversarial training procedure proposed by Madry et al. (2018) is one of the most effective methods to defend against adversarial examples in deep neural networks (DNNs). In our paper, we shed some lights on the practicality and the…

机器学习 · 统计学 2019-01-28 Huan Zhang , Hongge Chen , Zhao Song , Duane Boning , Inderjit S. Dhillon , Cho-Jui Hsieh

Pre-trained contextualized language models (PrLMs) have led to strong performance gains in downstream natural language understanding tasks. However, PrLMs can still be easily fooled by adversarial word substitution, which is one of the most…

计算与语言 · 计算机科学 2021-06-01 Rongzhou Bao , Jiayi Wang , Hai Zhao

Recently, the text-to-image diffusion model has gained considerable attention from the community due to its exceptional image generation capability. A representative model, Stable Diffusion, amassed more than 10 million users within just…

密码学与安全 · 计算机科学 2024-09-16 Chenyu Zhang , Mingwang Hu , Wenhui Li , Lanjun Wang

The improvement of language model robustness, including successful defense against adversarial attacks, remains an open problem. In computer vision settings, the stochastic noising and de-noising process provided by diffusion models has…

机器学习 · 计算机科学 2024-06-21 Harrison Gietz , Jugal Kalita

Aggressive language detection (ALD), detecting the abusive and offensive language in texts, is one of the crucial applications in NLP community. Most existing works treat ALD as regular classification with neural models, while ignoring the…

计算与语言 · 计算机科学 2020-09-22 Shengqiong Wu , Hao Fei , Donghong Ji

At present, backdoor attacks attract attention as they do great harm to deep learning models. The adversary poisons the training data making the model being injected with a backdoor after being trained unconsciously by victims using the…

密码学与安全 · 计算机科学 2023-03-06 Shengfang Zhai , Qingni Shen , Xiaoyi Chen , Weilong Wang , Cong Li , Yuejian Fang , Zhonghai Wu