中国科学院机构知识库网格
Chinese Academy of Sciences Institutional Repositories Grid
Towards Better Word Importance Ranking in Textual Adversarial Attacks

文献类型:会议论文

作者Shi, Jiahui1,2; Li, Linjing1,2; Zeng, Daniel Dajun1,2
出版日期2023-08-02
会议日期June 18-23, 2023
会议地点Gold Coast, Australia
英文摘要

Transformer models have been widely used in the filed of natural language processing due to their powerful learning ability. Nevertheless, recent studies have shown that transformer models are vulnerable to the maliciously crafted adversarial examples. In the challenging black box setting, main stream textual adversarial attacks typically consist of two steps: Word Importance Ranking (WIR) and word transformation. The attack performance is highly dependent on the ranking of words. Existing WIR methods are designed with heuristic rules, which lack theoretical guarantee and require a large amount of queries. To address this issue, we design a textual coalitional game and propose PWSHAP, which is a plug-and-in WIR method employing Shapley value to determine the significance of each word based on its impact on the classification. Through extensive experiments on three benchmark datasets and model architectures, we illustrate that the proposed PWSHAP achieve the-state-of-the-art attack success rate with significant fewer queries to the classification model. Meanwhile, the generated adversarial examples are more natural and coherent compared to the strong baselines.

会议录出版者IEEE
语种英语
源URL[http://ir.ia.ac.cn/handle/173211/52452]  
专题自动化研究所_复杂系统管理与控制国家重点实验室_互联网大数据与安全信息学研究中心
通讯作者Li, Linjing
作者单位1.School of Artificial Intelligence, University of Chinese Academy of Sciences
2.Institute of Automation, Chinese Academy of Sciences
推荐引用方式
GB/T 7714
Shi, Jiahui,Li, Linjing,Zeng, Daniel Dajun. Towards Better Word Importance Ranking in Textual Adversarial Attacks[C]. 见:. Gold Coast, Australia. June 18-23, 2023.

入库方式: OAI收割

来源:自动化研究所

浏览0
下载0
收藏0
其他版本

除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。