Jens Hauser

Bert is Robust! A Case Against Word Substitution-Based Adversarial Attacks

In this work, we investigate the robustness of BERT using four word substitution-based attacks. We combine a human evaluation of individual word substitutions and probabilistic analysis to show that most of the adversarial examples from the four studied attacks do not preserve enough semantics from…