TextBugger: Generating Adversarial Text Against Real-world Applications

C. E. Shannon, “Communication theory of secrecy systems,” Bell system technical journal , vol. 28, no. 4, pp. 656–715, 1949

1949

Earlier work this paper cites.

Y. Li, T. Cohn, and T. Baldwin, “Learning robust representations of text,” in EMNLP , 2016, pp. 1979–1985

1985

Earlier work this paper cites.

B. Pang and L. Lee, “Seeing stars: Exploiting class relationships for sentiment categorization with respect to rating scales,” in ACL . Association for Computational Linguistics, 2005, pp. 115–124

2005

Earlier work this paper cites.

M. Barreno, B. Nelson, R. Sears, A. D. Joseph, and J. D. Tygar, “Can machine learning be secure?” in ASIACCS . ACM, 2006, pp. 16–25

2006

Earlier work this paper cites.

D. Sculley, G. Wachman, and C. E. Brodley, “Spam filtering using inexact string matching in explicit feature space with on-line linear classifiers.” in TREC , 2006

2006

Earlier work this paper cites.

G. Rawlinson, “The significance of letter position in word recognition,” IEEE Aerospace and Electronic Systems Magazine , vol. 22, no. 1, pp. 26–27, 2007

2007

Earlier work this paper cites.

M. Barreno, B. Nelson, A. D. Joseph, and J. Tygar, “The security of machine learning,” Machine Learning , vol. 81, no. 2, pp. 121–148, 2010

2010

Earlier work this paper cites.

B. Biggio, G. Fumera, and F. Roli, “Design of robust classifiers for adversarial environments,” in SMC . IEEE, 2011, pp. 977–982

2011

Earlier work this paper cites.

L. Huang, A. D. Joseph, B. Nelson, B. I. Rubinstein, and J. Tygar, “Adversarial machine learning,” in AISec . ACM, 2011, pp. 43–58

2011

Earlier work this paper cites.

A. L. Maas, R. E. Daly, P. T. Pham, D. Huang, A. Y. Ng, and C. Potts, “Learning word vectors for sentiment analysis,” in ACL . Portland, Oregon, USA: Association for Computational Linguistics, June 2011, pp. 142–150

2011

Earlier work this paper cites.

Y. Kim, “Convolutional neural networks for sentence classification,” in EMNLP , 2014, pp. 1746–1751

2014

Earlier work this paper cites.

W. Medhat, A. Hassan, and H. Korashy, “Sentiment analysis algorithms and applications: A survey,” Ain Shams Engineering Journal , vol. 5, no. 4, pp. 1093–1113, 2014

2014

Earlier work this paper cites.

J. Pennington, R. Socher, and C. Manning, “Glove: Global vectors for word representation,” in EMNLP , 2014, pp. 1532–1543

2014

Earlier work this paper cites.

C. Szegedy, “Intriguing properties of neural networks,” in ICLR , 2014, pp. 1–10

2014

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,” in ICLR , 2015, pp. 1–11

2015

Cited alongside, same era.

A. Nguyen, J. Yosinski, and J. Clune, “Deep neural networks are easily fooled: High confidence predictions for unrecognizable images,” in CVPR . IEEE, 2015, pp. 427–436

2015

Cited alongside, same era.

X. Zhang, J. Zhao, and Y. LeCun, “Character-level convolutional networks for text classification,” in NIPS . Neural information processing systems foundation, 2015, pp. 649–657

2015

Cited alongside, same era.

S.-M. Moosavi-Dezfooli, A. Fawzi, and P. Frossard, “Deepfool: a simple and accurate method to fool deep neural networks,” in CVPR , 2016, pp. 2574–2582

2016

Cited alongside, same era.

C. Nobata, J. Tetreault, A. Thomas, Y. Mehdad, and Y. Chang, “Abusive language detection in online user content,” in WWW . International World Wide Web Conferences Steering Committee, 2016, pp. 145–153

N. Papernot, P. McDaniel, I. Goodfellow, S. Jha, Z. B. Celik, and A. Swami, “Practical black-box attacks against machine learning,” in Asia CCS . ACM, 2017, pp. 506–519

2017

Later among the works it cites.

S. Samanta and S. Mehta, “Towards crafting text adversarial samples,” arXiv preprint arXiv:1707.02812 , 2017

Original

2017

Later among the works it cites.

Y. Zhang and B. Wallace, “A sensitivity analysis of (and practitioners’ guide to) convolutional neural networks for sentence classification,” in IJCNLP , vol. 1, 2017, pp. 253–263

2017

Later among the works it cites.

M. Alzantot, Y. Sharma, A. Elgohary, B.-J. Ho, M. Srivastava, and K.-W. Chang, “Generating natural language adversarial examples,” arXiv preprint arXiv:1804.07998 , 2018

Original

2018

Closest in time.

D. Cer, Y. Yang, S.-y. Kong, N. Hua, N. Limtiaco, R. S. John, N. Constant, M. Guajardo-Cespedes, S. Yuan, C. Tar et al. , “Universal sentence encoder,” arXiv preprint arXiv:1803.11175 , 2018