Bad Characters: Imperceptible NLP Attacks

Y. Liu, M. Ott, N. Goyal, J. Du, M. Joshi, D. Chen, O. Levy, M. Lewis, L. Zettlemoyer, and V. Stoyanov, “Roberta: A robustly optimized BERT pretraining approach,” CoRR , vol. abs/1907.11692, 2019. [Online]. Available: http://arxiv.org/abs/1907.11692

Original

1907

Earlier work this paper cites.

W. Weaver, “Translation,” in Machine translation of languages: fourteen essays . Cambridge, MA: Technology Press of the Massachusetts Institute of Technology, Jul. 1949. [Online]. Available: https://repositorio.ul.pt/bitstream/10451/10945/2/ulfl155512_tm_2.pdf

1949

Earlier work this paper cites.

R. Storn and K. Price, “Differential Evolution – A Simple and Efficient Heuristic for global Optimization over Continuous Spaces,” Journal of Global Optimization , vol. 11, no. 4, pp. 341–359, Dec. 1997. [Online]. Available: https://doi.org/10.1023/A:1008202821328

1997

Earlier work this paper cites.

B. J. Dorr, P. W. Jordan, and J. W. Benoit, “A Survey of Current Paradigms in Machine Translation,” MARYLAND UNIV COLLEGE PARK INST FOR ADVANCED COMPUTER STUDIES, Tech. Rep. LAMP-TR-027, Dec. 1998. [Online]. Available: https://apps.dtic.mil/docs/citations/ADA455393

1998

Earlier work this paper cites.

B. Sullivan, “PayPal alert! Beware the ’Paypai’ scam,” Jul. 2000. [Online]. Available: https://www.zdnet.com/article/paypal-alert-beware-the-paypai-scam-5000109103/

2000

Earlier work this paper cites.

K. Papineni, S. Roukos, T. Ward, and W.-J. Zhu, “Bleu: a method for automatic evaluation of machine translation,” in Proceedings of the 40th Annual Meeting of the Association for Computational Linguistics . Philadelphia, Pennsylvania, USA: Association for Computational Linguistics, Jul. 2002, pp. 311–318. [Online]. Available: https://aclanthology.org/P02-1040

2002

Earlier work this paper cites.

E. Gabrilovich and A. Gontmakher, “The homograph attack,” Commun. ACM , vol. 45, no. 2, p. 128, Feb. 2002. [Online]. Available: https://doi.org/10.1145/503124.503156

2002

Earlier work this paper cites.

Y. Bengio, R. Ducharme, P. Vincent, and C. Janvin, “A neural probabilistic language model,” Journal of Machine Learning Research , vol. 3, pp. 1137–1155, 2003

2003

Earlier work this paper cites.

E. F. Tjong Kim Sang and F. De Meulder, “Introduction to the conll-2003 shared task: Language-independent named entity recognition,” in Proceedings of the Seventh Conference on Natural Language Learning at HLT-NAACL 2003 - Volume 4 , ser. CONLL ’03. USA: Association for Computational Linguistics, 2003, p. 142–147. [Online]. Available: https://doi.org/10.3115/1119176.1119195

2003

Earlier work this paper cites.

J. Ebrahimi, A. Rao, D. Lowd, and D. Dou, “HotFlip: White-box adversarial examples for text classification,” in Proceedings of the 56th Annual Meeting of the Association for Computational Linguistics (Volume 2: Short Papers) . Melbourne, Australia: Association for Computational Linguistics, Jul. 2018, pp. 31–36. [Online]. Available: https://www.aclweb.org/anthology/P18-2006

2006

Earlier work this paper cites.

I. Shumailov, Y. Zhao, D. Bates, N. Papernot, R. Mullins, and R. Anderson, “Sponge examples: Energy-latency attacks on neural networks,” in Proceedings of the 6th IEEE European Symposium on Security and Privacy, Vienna, Austria, September 6-10, 2021 . IEEE, 2021. [Online]. Available: https://arxiv.org/abs/2006.03463

Original

2006

Earlier work this paper cites.

T. Holgers, D. E. Watson, and S. D. Gribble, “Cutting through the confusion: A measurement study of homograph attacks,” in Proceedings of the Annual Conference on USENIX ’06 Annual Technical Conference , ser. ATEC ’06. USA: USENIX Association, 2006, p. 24

2006

Earlier work this paper cites.

P. Koehn, H. Hoang, A. Birch, C. Callison-Burch, M. Federico, N. Bertoldi, B. Cowan, W. Shen, C. Moran, R. Zens et al. , “Moses: Open source toolkit for statistical machine translation,” in Proceedings of the 45th annual meeting of the association for computational linguistics companion volume proceedings of the demo and poster sessions , 2007, pp. 177–180

2007

Earlier work this paper cites.

R. Smith, “An overview of the tesseract ocr engine,” in ICDAR ’07: Proceedings of the Ninth International Conference on Document Analysis and Recognition . Washington, DC, USA: IEEE Computer Society, 2007, pp. 629–633. [Online]. Available: http://www.google.de/research/pubs/archive/33418.pdf

2007

Earlier work this paper cites.

B. Nelson, M. Barreno, F. J. Chi, A. D. Joseph, B. I. Rubinstein, U. Saini, C. A. Sutton, J. D. Tygar, and K. Xia, “Exploiting machine learning to subvert your spam filter.” LEET , vol. 8, pp. 1–9, 2008

2008

Earlier work this paper cites.

Brian Krebs, “‘Right-to-Left Override’ Aids Email Attacks,” Sep. 2011. [Online]. Available: https://krebsonsecurity.com/2011/09/right-to-left-override-aids-email-attacks/

2011

Earlier work this paper cites.

L. Y. Por, K. Wong, and K. O. Chee, “Unispach: A text-based data hiding method using unicode space characters,” Journal of Systems and Software , vol. 85, no. 5, pp. 1075–1082, 2012. [Online]. Available: https://www.sciencedirect.com/science/article/pii/S0164121211003177

2012

Earlier work this paper cites.

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,” arXiv preprint arXiv:1312.6199 , 2013

Original

2013

Earlier work this paper cites.

N. Kalchbrenner and P. Blunsom, “Recurrent continuous translation models,” in Proceedings of the 2013 Conference on Empirical Methods in Natural Language Processing . Seattle, Washington, USA: Association for Computational Linguistics, Oct. 2013, pp. 1700–1709. [Online]. Available: https://www.aclweb.org/anthology/D13-1176

2013

Earlier work this paper cites.

B. Biggio, I. Corona, D. Maiorca, B. Nelson, N. Šrndić, P. Laskov, G. Giacinto, and F. Roli, “Evasion attacks against machine learning at test time,” in Joint European conference on machine learning and knowledge discovery in databases . Springer, 2013, pp. 387–402

2013

Earlier work this paper cites.

D. A. Smith, R. Cordel, E. M. Dillon, N. Stramp, and J. Wilkerson, “Detecting and modeling local text reuse,” in IEEE/ACM Joint Conference on Digital Libraries , 2014, pp. 183–192

2014

Earlier work this paper cites.

I. Sutskever, O. Vinyals, and Q. V. Le, “Sequence to sequence learning with neural networks,” in Advances in Neural Information Processing Systems , Z. Ghahramani, M. Welling, C. Cortes, N. Lawrence, and K. Q. Weinberger, Eds., vol. 27. Curran Associates, Inc., 2014, pp. 3104–3112. [Online]. Available: https://proceedings.neurips.cc/paper/2014/file/a14ac55a4f27472c5d894ec1c3c743d2-Paper.pdf

2014

Earlier work this paper cites.

K. Cho, B. van Merrienboer, Ç. Gülçehre, F. Bougares, H. Schwenk, and Y. Bengio, “Learning phrase representations using RNN encoder-decoder for statistical machine translation,” CoRR , vol. abs/1406.1078, 2014. [Online]. Available: http://arxiv.org/abs/1406.1078

Original

2014

Earlier work this paper cites.

——, “Unicode Security Considerations,” The Unicode Consortium, Tech. Rep. Unicode Technical Report #36, Sep. 2014. [Online]. Available: https://www.unicode.org/reports/tr36/tr36-15.html

2014

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,” 2015

2015

Earlier work this paper cites.

R. Sennrich, B. Haddow, and A. Birch, “Neural machine translation of rare words with subword units,” CoRR , vol. abs/1508.07909, 2015. [Online]. Available: http://arxiv.org/abs/1508.07909

Original

2015

Earlier work this paper cites.

MITRE, “CAPEC-632: Homograph Attack via Homoglyphs (Version 3.4),” MITRE, Common Attack Pattern Enumeration and Classification 632, Nov. 2015. [Online]. Available: https://capec.mitre.org/data/definitions/632.html

2015

Earlier work this paper cites.

R. Sennrich, B. Haddow, and A. Birch, “Neural machine translation of rare words with subword units,” CoRR , vol. abs/1508.07909, 2015. [Online]. Available: http://arxiv.org/abs/1508.07909

Original

2015

Earlier work this paper cites.

K. Simonyan and A. Zisserman, “Very deep convolutional networks for large-scale image recognition,” in International Conference on Learning Representations , 2015

2015

Cited alongside, same era.

N. Papernot, P. D. McDaniel, A. Swami, and R. E. Harang, “Crafting adversarial input sequences for recurrent neural networks,” CoRR , vol. abs/1604.08275, 2016. [Online]. Available: http://arxiv.org/abs/1604.08275

Original

2016

Cited alongside, same era.

N. Papernot, P. McDaniel, A. Sinha, and M. Wellman, “Towards the science of security and privacy in machine learning,” arXiv preprint arXiv:1611.03814 , 2016

Original

2016

Cited alongside, same era.

Y. Wu, M. Schuster, Z. Chen, Q. V. Le, M. Norouzi, W. Macherey, M. Krikun, Y. Cao, Q. Gao, K. Macherey, J. Klingner, A. Shah, M. Johnson, X. Liu, Łukasz Kaiser, S. Gouws, Y. Kato, T. Kudo, H. Kazawa, K. Stevens, G. Kurian, N. Patil, W. Wang, C. Young, J. Smith, J. Riesa, A. Rudnick, O. Vinyals, G. Corrado, M. Hughes, and J. Dean, “Google’s neural machine translation system: Bridging the gap between human and machine translation,” 2016

A. Madry, A. Makelov, L. Schmidt, D. Tsipras, and A. Vladu, “Towards deep learning models resistant to adversarial attacks,” 2019

2019

Later among the works it cites.

S. Hong, P. Frigo, Y. Kaya, C. Giuffrida, and T. Dumitras, “Terminal brain damage: Exposing the graceless degradation in deep neural networks under hardware fault attacks,” in 28th USENIX Security Symposium (USENIX Security 19) . Santa Clara, CA: USENIX Association, Aug. 2019, pp. 497–514. [Online]. Available: https://www.usenix.org/conference/usenixsecurity19/presentation/hong

2019

Later among the works it cites.

H. Suzuki, D. Chiba, Y. Yoneya, T. Mori, and S. Goto, “Shamfinder: An automated framework for detecting idn homographs,” in Proceedings of the Internet Measurement Conference , ser. IMC ’19. New York, NY, USA: Association for Computing Machinery, 2019, p. 449–462. [Online]. Available: https://doi.org/10.1145/3355369.3355587

2019

Later among the works it cites.

——, “Unicode security mechanisms for uts #39: Intentional,” Oct. 2019. [Online]. Available: https://www.unicode.org/Public/security/latest/intentional.txt