2023
BERT Lost Patience Won't Be Robust to Adversarial Slowdown
NeurIPS 2023poster
In this paper, we systematically evaluate the robustness of multi-exit language models against adversarial slowdown. To audit their robustness, we design a slowdown attack that generates natural adversarial text bypassing early-exit points. We use the resulting WAFFLE attack as a vehicle to conduct…