Discrete Adversarial Attacks and Submodular Optimization with Applications to Text Classification

M. Frank and P. Wolfe, “An algorithm for quadratic programming,” Naval Research Logistics (NRL) , vol. 3, no. 1-2, pp. 95–110, 1956

1956

Earlier work this paper cites.

G. L. Nemhauser, L. A. Wolsey, and M. L. Fisher, “An analysis of approximations for maximizing submodular set functions—i,” Mathematical Programming , vol. 14, no. 1, pp. 265–294, 1978

1978

Earlier work this paper cites.

H. Narayanan, Submodular functions and electrical networks . Elsevier, 1997, vol. 54

1997

Earlier work this paper cites.

S. Hochreiter and J. Schmidhuber, “Long short-term memory,” Neural computation , vol. 9, no. 8, pp. 1735–1780, 1997

1997

Earlier work this paper cites.

A. Schrijver, Combinatorial optimization: polyhedra and efficiency . Springer Science & Business Media, 2003, vol. 24

2003

Earlier work this paper cites.

N. Dalvi, P. Domingos, S. Sanghai, D. Verma et al. , “Adversarial classification,” in Proceedings of the tenth ACM SIGKDD international conference on Knowledge discovery and data mining . ACM, 2004, pp. 99–108

2004

Earlier work this paper cites.

D. Lowd and C. Meek, “Adversarial learning,” in Proceedings of the eleventh ACM SIGKDD international conference on Knowledge discovery in data mining . ACM, 2005, pp. 641–647

2005

Earlier work this paper cites.

S. Fujishige, Submodular functions and optimization . Elsevier, 2005, vol. 58

2005

Earlier work this paper cites.

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,” arXiv preprint arXiv:1312.6199 , 2013

Original

2013

Earlier work this paper cites.

T. Mikolov, K. Chen, G. Corrado, and J. Dean, “Efficient estimation of word representations in vector space,” arXiv preprint arXiv:1301.3781 , 2013

Original

2013

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,” arXiv preprint arXiv:1412.6572 , 2014

Original

2014

Earlier work this paper cites.

Y. Kim, “Convolutional neural networks for sentence classification,” arXiv preprint arXiv:1408.5882 , 2014

Original

2014

Earlier work this paper cites.

J. Nutini, M. Schmidt, I. Laradji, M. Friedlander, and H. Koepke, “Coordinate descent converges faster with the Gauss-Southwell rule than random selection,” in International Conference on Machine Learning , 2015, pp. 1632–1641

2015

Earlier work this paper cites.

J. Wieting, M. Bansal, K. Gimpel, K. Livescu, and D. Roth, “From paraphrase database to compositional paraphrase model and back,” arXiv preprint arXiv:1506.03487 , 2015

Original

2015

Earlier work this paper cites.

M. Kusner, Y. Sun, N. Kolkin, and K. Weinberger, “From word embeddings to document distances,” in International Conference on Machine Learning , 2015, pp. 957–966

2015

Earlier work this paper cites.

X. Zhang, J. J. Zhao, and Y. LeCun, “Character-level convolutional networks for text classification,” CoRR , vol. abs/1509.01626, 2015. [Online]. Available: http://arxiv.org/abs/1509.01626

Original

2015

Earlier work this paper cites.

S. M. Moosavi Dezfooli, A. Fawzi, and P. Frossard, “Deepfool: a simple and accurate method to fool deep neural networks,” in Proceedings of 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) , no. EPFL-CONF-218057, 2016

2016

Earlier work this paper cites.

N. Papernot, P. McDaniel, X. Wu, S. Jha, and A. Swami, “Distillation as a defense to adversarial perturbations against deep neural networks,” in Security and Privacy (SP), 2016 IEEE Symposium on . IEEE, 2016, pp. 582–597

2016

Cited alongside, same era.

N. Papernot, P. McDaniel, A. Swami, and R. Harang, “Crafting adversarial input sequences for recurrent neural networks,” in Military Communications Conference, MILCOM 2016-2016 IEEE . IEEE, 2016, pp. 49–54

2016

Cited alongside, same era.

J. Li, W. Monroe, and D. Jurafsky, “Understanding neural networks through representation erasure,” arXiv preprint arXiv:1612.08220 , 2016

Original

2016

Cited alongside, same era.

T. Miyato, A. M. Dai, and I. Goodfellow, “Adversarial training methods for semi-supervised text classification,” arXiv preprint arXiv:1605.07725 , 2016

Original

2016

Cited alongside, same era.

Y. Belinkov and Y. Bisk, “Synthetic and natural noise both break neural machine translation,” arXiv preprint arXiv:1711.02173 , 2017

Original

2017

Later among the works it cites.

J. Bilmes and W. Bai, “Deep submodular functions,” arXiv preprint arXiv:1701.08939 , 2017

Original

2017

Later among the works it cites.

J. Wieting and K. Gimpel, “Pushing the limits of paraphrastic sentence embeddings with millions of machine translations,” in arXiv preprint arXiv:1711.05732 , 2017

Original

2017

Later among the works it cites.

G. McIntire, “Fake news dataset,” https://github.com/GeorgeMcIntire/fake_real_news_dataset , 2017

2017

Later among the works it cites.

P.-Y. Chen, Y. Sharma, H. Zhang, J. Yi, and C.-J. Hsieh, “EAD: elastic-net attacks to deep neural networks via adversarial examples,” AAAI , 2018