<?xml version="1.0" encoding="UTF-8"?>
<modsCollection xmlns="http://www.loc.gov/mods/v3">
<mods ID="chiang-lee-2023-synonym">
    <titleInfo>
        <title>Are Synonym Substitution Attacks Really Synonym Substitution Attacks?</title>
    </titleInfo>
    <name type="personal">
        <namePart type="given">Cheng-Han</namePart>
        <namePart type="family">Chiang</namePart>
        <role>
            <roleTerm authority="marcrelator" type="text">author</roleTerm>
        </role>
    </name>
    <name type="personal">
        <namePart type="given">Hung-yi</namePart>
        <namePart type="family">Lee</namePart>
        <role>
            <roleTerm authority="marcrelator" type="text">author</roleTerm>
        </role>
    </name>
    <originInfo>
        <dateIssued>2023-07</dateIssued>
    </originInfo>
    <typeOfResource>text</typeOfResource>
    <relatedItem type="host">
        <titleInfo>
            <title>Findings of the Association for Computational Linguistics: ACL 2023</title>
        </titleInfo>
        <name type="personal">
            <namePart type="given">Anna</namePart>
            <namePart type="family">Rogers</namePart>
            <role>
                <roleTerm authority="marcrelator" type="text">editor</roleTerm>
            </role>
        </name>
        <name type="personal">
            <namePart type="given">Jordan</namePart>
            <namePart type="family">Boyd-Graber</namePart>
            <role>
                <roleTerm authority="marcrelator" type="text">editor</roleTerm>
            </role>
        </name>
        <name type="personal">
            <namePart type="given">Naoaki</namePart>
            <namePart type="family">Okazaki</namePart>
            <role>
                <roleTerm authority="marcrelator" type="text">editor</roleTerm>
            </role>
        </name>
        <originInfo>
            <publisher>Association for Computational Linguistics</publisher>
            <place>
                <placeTerm type="text">Toronto, Canada</placeTerm>
            </place>
        </originInfo>
        <genre authority="marcgt">conference publication</genre>
    </relatedItem>
    <abstract>In this paper, we explore the following question: Are synonym substitution attacks really synonym substitution attacks (SSAs)?We approach this question by examining how SSAs replace words in the original sentence and show that there are still unresolved obstacles that make current SSAs generate invalid adversarial samples. We reveal that four widely used word substitution methods generate a large fraction of invalid substitution words that are ungrammatical or do not preserve the original sentence’s semantics. Next, we show that the semantic and grammatical constraints used in SSAs for detecting invalid word replacements are highly insufficient in detecting invalid adversarial samples.</abstract>
    <identifier type="citekey">chiang-lee-2023-synonym</identifier>
    <identifier type="doi">10.18653/v1/2023.findings-acl.117</identifier>
    <location>
        <url>https://aclanthology.org/2023.findings-acl.117</url>
    </location>
    <part>
        <date>2023-07</date>
        <extent unit="page">
            <start>1853</start>
            <end>1878</end>
        </extent>
    </part>
</mods>
</modsCollection>

%0 Conference Proceedings
%T Are Synonym Substitution Attacks Really Synonym Substitution Attacks?
%A Chiang, Cheng-Han
%A Lee, Hung-yi
%Y Rogers, Anna
%Y Boyd-Graber, Jordan
%Y Okazaki, Naoaki
%S Findings of the Association for Computational Linguistics: ACL 2023
%D 2023
%8 July
%I Association for Computational Linguistics
%C Toronto, Canada
%F chiang-lee-2023-synonym
%X In this paper, we explore the following question: Are synonym substitution attacks really synonym substitution attacks (SSAs)?We approach this question by examining how SSAs replace words in the original sentence and show that there are still unresolved obstacles that make current SSAs generate invalid adversarial samples. We reveal that four widely used word substitution methods generate a large fraction of invalid substitution words that are ungrammatical or do not preserve the original sentence’s semantics. Next, we show that the semantic and grammatical constraints used in SSAs for detecting invalid word replacements are highly insufficient in detecting invalid adversarial samples.
%R 10.18653/v1/2023.findings-acl.117
%U https://aclanthology.org/2023.findings-acl.117
%U https://doi.org/10.18653/v1/2023.findings-acl.117
%P 1853-1878

Markdown (Informal)

[Are Synonym Substitution Attacks Really Synonym Substitution Attacks?](https://aclanthology.org/2023.findings-acl.117) (Chiang & Lee, Findings 2023)

• Are Synonym Substitution Attacks Really Synonym Substitution Attacks? (Chiang & Lee, Findings 2023)

ACL

• Cheng-Han Chiang and Hung-yi Lee. 2023. Are Synonym Substitution Attacks Really Synonym Substitution Attacks?. In Findings of the Association for Computational Linguistics: ACL 2023, pages 1853–1878, Toronto, Canada. Association for Computational Linguistics.