Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Universal Adversarial Perturbation for Text Classification   Given a state-of-the-art deep neural network text classifier, we show the
existence of a universal and very small perturbation vector (in the embedding
space) that causes natural text to be misclassified with high probability.
Unlike images on which a single fixed-size adversarial perturbation can be
found, text is of variable length, so we define the "universality" as
"token-agnostic", where a single perturbation is applied to each token,
resulting in different perturbations of flexible sizes at the sequence level.
We propose an algorithm to compute universal adversarial perturbations, and
show that the state-of-the-art deep neural networks are highly vulnerable to
them, even though they keep the neighborhood of tokens mostly preserved. We
also show how to use these adversarial perturbations to generate adversarial
text samples. The surprising existence of universal "token-agnostic"
adversarial perturbations may reveal important properties of a text classifier.

35
The categories of this paper are: mtrl-th
28
The categories of this paper are: alg-geom
23
The categories of this paper are: solv-int
27
The categories of this paper are: comp-gas
33
The categories of this paper are: plasm-ph
20
The categories of this paper are: acc-phys
11
The categories of this paper are: hep-lat
22
The categories of this paper are: chao-dyn
9
The categories of this paper are: nlin
34
The categories of this paper are: chem-ph
13
The categories of this paper are: quant-ph
26
The categories of this paper are: bayes-an
15
The categories of this paper are: nucl-ex
12
The categories of this paper are: nucl-th
2
The categories of this paper are: math
17
The categories of this paper are: q-fin