AdvCodec: Towards A Unified Framework for Adversarial Text Generation
Table 3: Blackbox attack success rates on sentiment analysis. The transferability-based blackbox attack uses adversarial text generated from whitebox BERT model to attack blackbox SAM, and vice versa. TF is short for TextFooler.
['Model', '[EMPTY]', 'Concat Attack Adv(Sent)', 'Concat Attack Adv(Word)', 'Concat Attack Seq2Sick', 'Concat Attack TF', 'Scatter Attack Adv(Word)', 'Scatter Attack Seq2sick', 'Scatter Attack TF']
Blackbox Attack. We perform transferability based blackbox attacks. We compare our blackbox attack success rate with the blackbox baseline TextFooler and blackbox Seq2Sick based on transferability.