SEP-Attack: A Simple and Effective Paradigm for Transfer-Based Textual Adversarial Attack
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2026
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866917529097601024 |
|---|---|
| author | Liu, Han Xu, Zhi Zhang, Xiaotong Zhang, Feng Xu, Xiaoming Wang, Wei Ma, Fenglong Yu, Hong |
| author_facet | Liu, Han Xu, Zhi Zhang, Xiaotong Zhang, Feng Xu, Xiaoming Wang, Wei Ma, Fenglong Yu, Hong |
| contents | Despite the strong performance of deep neural networks in modern Web and language applications, they remain vulnerable to adversarial attacks, especially transferable attacks that generate adversarial examples using surrogate models without accessing the victim model. Transferable attacks in the text domain are still under-explored, with only a few studies addressing this challenging issue, often with suboptimal results due to equal treatment of submodels or inaccurate estimation of importance scores. To address these challenges, we propose a simple yet effective paradigm for transfer-based textual adversarial attack, named SEP-Attack. Specifically, we employ the Determinantal Point Process (DPP) to generate diverse surrogate ensemble weights, representing the transferability of submodels. Using these weights, we introduce a new metric to evaluate prediction confidence scores, which in turn are used to calculate word importance scores and generate adversarial candidates. Finally, we quantify the transferability score for each candidate and select the top ones as the final transferable adversarial examples. Experiments conducted on four datasets and two real-world APIs validate the efficacy of SEP-Attack, significantly outperforming state-of-the-art baselines. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2605_24958 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | SEP-Attack: A Simple and Effective Paradigm for Transfer-Based Textual Adversarial Attack Liu, Han Xu, Zhi Zhang, Xiaotong Zhang, Feng Xu, Xiaoming Wang, Wei Ma, Fenglong Yu, Hong Computation and Language Artificial Intelligence Despite the strong performance of deep neural networks in modern Web and language applications, they remain vulnerable to adversarial attacks, especially transferable attacks that generate adversarial examples using surrogate models without accessing the victim model. Transferable attacks in the text domain are still under-explored, with only a few studies addressing this challenging issue, often with suboptimal results due to equal treatment of submodels or inaccurate estimation of importance scores. To address these challenges, we propose a simple yet effective paradigm for transfer-based textual adversarial attack, named SEP-Attack. Specifically, we employ the Determinantal Point Process (DPP) to generate diverse surrogate ensemble weights, representing the transferability of submodels. Using these weights, we introduce a new metric to evaluate prediction confidence scores, which in turn are used to calculate word importance scores and generate adversarial candidates. Finally, we quantify the transferability score for each candidate and select the top ones as the final transferable adversarial examples. Experiments conducted on four datasets and two real-world APIs validate the efficacy of SEP-Attack, significantly outperforming state-of-the-art baselines. |
| title | SEP-Attack: A Simple and Effective Paradigm for Transfer-Based Textual Adversarial Attack |
| topic | Computation and Language Artificial Intelligence |
| url | https://arxiv.org/abs/2605.24958 |