Alexandre Sablayrolles

Gradient-based Adversarial Attacks against Text Transformers

2021 · arXiv (Cornell University)

We propose the first general-purpose gradient-based attack against transformer models. Instead of searching for a single adversarial example, we search for a distribution of adversarial examples parameterized by a continuous-valued matrix, hence enabling gradient-based optimization. …