Current browse context:
cs.CL
Change to browse by:
References & Citations
Computer Science > Computation and Language
Title: Rewriting Meaningful Sentences via Conditional BERT Sampling and an application on fooling text classifiers
(Submitted on 22 Oct 2020 (v1), last revised 19 Oct 2022 (this version, v2))
Abstract: Most adversarial attack methods that are designed to deceive a text classifier change the text classifier's prediction by modifying a few words or characters. Few try to attack classifiers by rewriting a whole sentence, due to the difficulties inherent in sentence-level rephrasing as well as the problem of setting the criteria for legitimate rewriting.
In this paper, we explore the problem of creating adversarial examples with sentence-level rewriting. We design a new sampling method, named ParaphraseSampler, to efficiently rewrite the original sentence in multiple ways. Then we propose a new criteria for modification, called a sentence-level threaten model. This criteria allows for both word- and sentence-level changes, and can be adjusted independently in two dimensions: semantic similarity and grammatical quality. Experimental results show that many of these rewritten sentences are misclassified by the classifier. On all 6 datasets, our ParaphraseSampler achieves a better attack success rate than our baseline.
Submission history
From: Lei Xu [view email][v1] Thu, 22 Oct 2020 17:03:13 GMT (1729kb,D)
[v2] Wed, 19 Oct 2022 21:37:40 GMT (0kb,I)
Link back to: arXiv, form interface, contact.