← Search

Xinghao Yang

6 accepted papers

2025

Disentangled Information Bottleneck for Adversarial Text Defense

EMNLP 2025

Adversarial text defense is a significant strategy to protect modern NLP models from being attacked. Typical text defense methods usually enhance the model’s robustness by model retraining or equipping it with a data preprocessing step, aiming to eliminate the non-robust features and preserve the ro

2024

Adaptive Immune-based Sound-Shape Code Substitution for Adversarial Chinese Text Attacks

EMNLP 2024main

Adversarial textual examples reveal the vulnerability of natural language processing (NLP) models. Most existing text attack methods are designed for English text, while the robust implementation of the second popular language, i.e., Chinese with 1 billion users, is greatly underestimated. Although…

2023

Annealing Genetic-based Preposition Substitution for Text Rubbish Example Generation

IJCAI 2023poster

Modern Natural Language Processing (NLP) models expose under-sensitivity towards text rubbish examples. The text rubbish example is the heavily modified input text which is nonsensical to humans but does not change the model’s prediction. Prior work crafts rubbish examples by iteratively deleting wo…

2021

BESA: BERT-based Simulated Annealing for Adversarial Text Attacks

IJCAI 2021poster

Modern Natural Language Processing (NLP) models are known immensely brittle towards text adversarial examples. Recent attack algorithms usually adopt word-level substitution strategies following a pre-computed word replacement mechanism. However, their resultant adversarial examples are still imperf…

Cited by 13SourcePDFScholar
2021

Bigram and Unigram Based Text Attack via Adaptive Monotonic Heuristic Search

AAAI 2021technical

Deep neural networks (DNNs) are known to be vulnerable to adversarial images, while their robustness in text classification are rarely studied. Several lines of text attack methods have been proposed in the literature, such as character-level, word-level, and sentence-level attacks. However, it is s…