Adversarial Text

Description from the archive archive 2025-07-28.

Benchmarks archive 2025-07-28

No benchmark for this task in the archive.

Libraries

Not in the archive: the export carries no per-task library table, so there is nothing to show at snapshot 2025-07-28.

Datasets archive 2025-07-28

2 datasets whose archive record lists this task, ordered by the archive's paper count.

Subtasks archive 2025-07-28

No subtask under this task in the archive's task tree.

Parent tasks archive 2025-07-28

Most implemented papers archive 2025-07-28

30 shown of 51 papers with code (114 tagged with this task in all), ordered by repositories listed in the archive, not by stars (the archive holds no stars, so PwC's “Social” and “Latest” sorts cannot be reproduced). Papers without a page here are shown as plain text.

• Generative Adversarial Text to Image Synthesis
  17 May 2016 39 repositories listed Syntology ran 9 of 19 samples · 10 unverified · 6 pointer-only (licence)
  Automatic synthesis of realistic images from text would be interesting and useful, but current AI systems are still far from this goal.
• Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment
  27 Jul 2019 7 repositories listed Syntology ran 2 of 2 samples · 0 unverified · 2 pointer-only (licence)
  Machine learning algorithms are often vulnerable to adversarial examples that have imperceptible alterations from the original counterparts but can fool the state-of-the-art models.
• RETSim: Resilient and Efficient Text Similarity
  28 Nov 2023 3 repositories listed
  This paper introduces RETSim (Resilient and Efficient Text Similarity), a lightweight, multilingual deep learning model trained to produce robust metric embeddings for near-duplicate text retrieval, clustering, and…
• Generating Natural Language Attacks in a Hard Label Black Box Setting
  29 Dec 2020 3 repositories listed Syntology ran 6 of 6 samples · 0 unverified · 6 pointer-only (licence)
  Our proposed attack strategy leverages population-based optimization algorithm to craft plausible and semantically similar adversarial examples by observing only the top label predicted by the target model.
• T3: Tree-Autoencoder Constrained Adversarial Text Generation for Targeted Attack
  22 Dec 2019 3 repositories listed
  In particular, we propose a tree-based autoencoder to embed the discrete text data into a continuous representation space, upon which we optimize the adversarial perturbation.
• Semantic-Preserving Adversarial Text Attacks
  23 Aug 2021 2 repositories listed
  In this paper, we propose a Bigram and Unigram based adaptive Semantic Preservation Optimization (BU-SPO) method to examine the vulnerability of deep models.
• Searching for a Search Method: Benchmarking Search Algorithms for Generating NLP Adversarial Examples
  9 Sep 2020 2 repositories listed
  We study the behavior of several black-box search algorithms used for generating adversarial examples for natural language processing (NLP) tasks.
• End-to-End Adversarial Text-to-Speech
  5 Jun 2020 2 repositories listed Syntology ran 9 of 12 samples · 3 unverified · 12 pointer-only (licence)
  Modern text-to-speech synthesis pipelines typically involve multiple processing stages, each of which is designed or learnt independently from the rest.
• TextAttack: A Framework for Adversarial Attacks, Data Augmentation, and Adversarial Training in NLP
  29 Apr 2020 2 repositories listed
  TextAttack also includes data augmentation and adversarial training modules for using components of adversarial attacks to improve model accuracy and robustness.
• BAE: BERT-based Adversarial Examples for Text Classification
  4 Apr 2020 2 repositories listed
  Modern text classification models are susceptible to adversarial examples, perturbed versions of the original text indiscernible by humans which get misclassified by the model.
• Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifiers
  13 Jan 2018 2 repositories listed Syntology ran 3 of 3 samples · 0 unverified
  Although various techniques have been proposed to generate adversarial samples for white-box attacks on text, little attention has been paid to black-box attacks, which are more realistic scenarios.
• StealthRank: LLM Ranking Manipulation via Stealthy Prompt Optimization
  8 Apr 2025 1 repository listed
  The integration of large language models (LLMs) into information retrieval systems introduces new attack surfaces, particularly for adversarial ranking manipulations.
• Breaking BERT: Gradient Attack on Twitter Sentiment Analysis for Targeted Misclassification
  2 Apr 2025 1 repository listed
  This paper aims to scrutinize the inherent vulnerabilities of such models in Twitter sentiment analysis.
• SMAB: MAB based word Sensitivity Estimation Framework and its Applications in Adversarial Text Generation
  10 Feb 2025 1 repository listed Syntology ran 0 of 1 samples · 1 unverified
  To understand the complexity of sequence classification tasks, Hahn et al.
• EMPRA: Embedding Perturbation Rank Attack against Neural Ranking Models
  20 Dec 2024 1 repository listed
  Adversarial attacks seek to manipulate the ranking of documents, with the intention of exposing users to targeted content.
• BinarySelect to Improve Accessibility of Black-Box Attack Research
  13 Dec 2024 1 repository listed
  Often these attacks remove one token at a time to find the ideal one to change, requiring n queries (the length of the text) right away.
• TSCheater: Generating High-Quality Tibetan Adversarial Texts via Visual Similarity
  3 Dec 2024 1 repository listed
  To address this issue, we propose a novel Tibetan adversarial text generation method called TSCheater, which considers the characteristic of Tibetan encoding and the feature that visually similar syllables have similar…
• NMT-Obfuscator Attack: Ignore a sentence in translation with only one word
  19 Nov 2024 1 repository listed
  In this paper, we propose a new type of adversarial attack against NMT models.
• AdvI2I: Adversarial Image Attack on Image-to-Image Diffusion models
  28 Oct 2024 1 repository listed
  Recent advances in diffusion models have significantly enhanced the quality of image synthesis, yet they have also introduced serious safety concerns, particularly the generation of Not Safe for Work (NSFW) content.
• Adversarial Decoding: Generating Readable Documents for Adversarial Objectives
  3 Oct 2024 1 repository listed
  We design, implement, and evaluate adversarial decoding, a new, generic text generation technique that produces readable documents for different adversarial objectives.
• Vision-fused Attack: Advancing Aggressive and Stealthy Adversarial Text against Neural Machine Translation
  8 Sep 2024 1 repository listed Syntology ran 0 of 4 samples · 4 unverified · 4 pointer-only (licence)
  However, existing studies on adversarial attacks are insufficient in both attacking ability and human imperceptibility due to their sole focus on the scope of language.
• Adversarial Text Rewriting for Text-aware Recommender Systems
  1 Aug 2024 1 repository listed
  Text-aware recommender systems incorporate rich textual features, such as titles and descriptions, to generate item recommendations for users.
• Dissecting Adversarial Robustness of Multimodal LM Agents
  18 Jun 2024 1 repository listed Syntology ran 16 of 21 samples · 5 unverified
  To bridge this gap, we manually create 200 targeted adversarial tasks and evaluation scripts in a realistic threat model on top of VisualWebArena, a real environment for web agents.
• White-box Multimodal Jailbreaks Against Large Vision-Language Models
  28 May 2024 1 repository listed Syntology ran 4 of 5 samples · 1 unverified · 5 pointer-only (licence)
  Subsequently, an adversarial text suffix is integrated and co-optimized with the adversarial image prefix to maximize the probability of eliciting affirmative responses to various harmful instructions.
• Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective
  30 Apr 2024 1 repository listed Syntology ran 14 of 22 samples · 8 unverified
  To this end, this work presents the first comprehensive study on improving the adversarial robustness of VLMs against attacks targeting image, text, and multimodal inputs.
• Few-Shot Adversarial Prompt Learning on Vision-Language Models
  21 Mar 2024 1 repository listed Syntology ran 5 of 9 samples · 4 unverified
  The vulnerability of deep neural networks to imperceptible adversarial perturbations has attracted widespread attention.
• Boosting Transferability in Vision-Language Attacks via Diversification along the Intersection Region of Adversarial Trajectory
  19 Mar 2024 1 repository listed
  Vision-language pre-training (VLP) models exhibit remarkable capabilities in comprehending both images and text, yet they remain susceptible to multimodal adversarial examples (AEs).
• A Curious Case of Searching for the Correlation between Training Data and Adversarial Robustness of Transformer Textual Models
  18 Feb 2024 1 repository listed
  First, empirical analyses show that (a) extracted features can be used with a lightweight classifier such as Random Forest to predict the attack success rate effectively, and (b) features with the most influence on the…
• Arabic Synonym BERT-based Adversarial Examples for Text Classification
  5 Feb 2024 1 repository listed
  To evaluate the grammatical and semantic similarities of the newly produced adversarial examples using our synonym BERT-based attack, we invite four human evaluators to assess and compare the produced adversarial…
• BERT Lost Patience Won't Be Robust to Adversarial Slowdown
  29 Oct 2023 1 repository listed Syntology ran 3 of 5 samples · 2 unverified
  In this paper, we systematically evaluate the robustness of multi-exit language models against adversarial slowdown.

Syntology lines on 12 of the papers shown; no Syntology record for the others (a paper without an arXiv id cannot be joined to the graph, and absence from the graph layer is not a recorded non-run). “Ran” means the sample executed on a synthesized fixture, not that the paper's result was reproduced. Read from the graph 2026-09-24.