Although deep learning models achieve superior performance on original text, they are sensitive to adversarial attacks. These attacks remarkably deceive these models by generating adversarial text with imperceptible changes while preserving the original text’s meaning. Current detection methods are effective against specific adversarial attacks but often fail when faced with unconventional adversarial texts from other attack types. We introduce \(\textrm{OneWORD}\) , a novel method designed to detect a wide range of adversarial texts. \(\textrm{OneWORD}\) perturbs a single word in the input text and monitors changes in the prediction labels of the perturbed text. This method not only detects adversarial texts but also efficiently restores their prediction labels. Experimental results across diverse attacks, models, and datasets show that \(\textrm{OneWORD}\) surpasses existing methods in both detecting and restoring predictions for adversarial texts generated by various attack strategies.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

\(\textbf{OneWORD}\) : Adversarial Text Detection and Prediction Restoration Using One-Word Perturbation

  • Hoang-Quoc Nguyen-Son,
  • Seira Hidano,
  • Kazuhide Fukushima,
  • Shinsaku Kiyomoto,
  • Isao Echizen

摘要

Although deep learning models achieve superior performance on original text, they are sensitive to adversarial attacks. These attacks remarkably deceive these models by generating adversarial text with imperceptible changes while preserving the original text’s meaning. Current detection methods are effective against specific adversarial attacks but often fail when faced with unconventional adversarial texts from other attack types. We introduce \(\textrm{OneWORD}\) , a novel method designed to detect a wide range of adversarial texts. \(\textrm{OneWORD}\) perturbs a single word in the input text and monitors changes in the prediction labels of the perturbed text. This method not only detects adversarial texts but also efficiently restores their prediction labels. Experimental results across diverse attacks, models, and datasets show that \(\textrm{OneWORD}\) surpasses existing methods in both detecting and restoring predictions for adversarial texts generated by various attack strategies.