Abstract:In social media, neural network models have been applied to hate speech detection, sentiment analysis, etc., but neural network models are susceptible to adversarial attacks. For instance, in a text classification task, the attacker elaborately introduces perturbations to the original texts that hardly alter the original semantics in order to trick the model into making different predictions. By studying textual adversarial attack methods, the robustness of language models can be evaluated and then improved. Currently, most of the research in this field focuses on English, and there is also a certain amount of research on Chinese. However, there is little research targeting Chinese minority languages. With the rapid development of artificial intelligence technology and the emergence of Chinese minority language models, textual adversarial attacks become a new challenge for the information processing of Chinese minority languages. In response to this situation, we propose a multi-granularity Tibetan textual adversarial attack method based on masked language models called TSTricker. We utilize the masked language models to generate candidate substitution syllables or words, adopt the scoring mechanism to determine the substitution order, and then conduct the attack method on several fine-tuned victim models. The experimental results show that TSTricker reduces the accuracy of the classification models by more than 28.70% and makes the classification models change the predictions of more than 90.60% of the samples, which has an evidently higher attack effect than the baseline method.

Show Criminals’ True Color: Chinese Variant Toxic Text Restoration Based on Pointer-Generator Network

Repairing Adversarial Texts Through Perturbation

Generating Natural Language Adversarial Examples on a Large Scale with Generative Models

TEXTSHIELD: Robust Text Classification Based on Multimodal Embedding and Neural Machine Translation

Character-Level Chinese Toxic Comment Classification Algorithm Based on CNN and Bi-GRU

Text Detoxification using Large Pre-trained Neural Models

WordChange: Adversarial Examples Generation Approach for Chinese Text Classification

Simple Text Detoxification by Identifying a Linear Toxic Subspace in Language Model Embeddings

ToViLaG: Your Visual-Language Generative Model is Also An Evildoer

Multilingual Text Detoxification Using Google Cloud Translation and Post-Processing

Multi-Granularity Tibetan Textual Adversarial Attack Method Based on Masked Language Model

Mitigating Text Toxicity with Counterfactual Generation

ToxiCloakCN: Evaluating Robustness of Offensive Language Detection in Chinese with Cloaking Perturbations

SteerDiff: Steering towards Safe Text-to-Image Diffusion Models

Toward Robust Imperceptible Perturbation against Unauthorized Text-to-image Diffusion-based Synthesis

Visual Attack and Defense on Text

Unveiling disguised toxicity: A novel pre-processing module for enhanced content moderation

Automatic Generation of Adversarial Readable Chinese Texts

Towards a Robust Deep Neural Network in Texts: A Survey

ART: Automatic Red-teaming for Text-to-Image Models to Protect Benign Users