Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Repairing Adversarial Texts through Perturbation   It is known that neural networks are subject to attacks through adversarial
perturbations, i.e., inputs which are maliciously crafted through perturbations
to induce wrong predictions. Furthermore, such attacks are impossible to
eliminate, i.e., the adversarial perturbation is still possible after applying
mitigation methods such as adversarial training. Multiple approaches have been
developed to detect and reject such adversarial inputs, mostly in the image
domain. Rejecting suspicious inputs however may not be always feasible or
ideal. First, normal inputs may be rejected due to false alarms generated by
the detection algorithm. Second, denial-of-service attacks may be conducted by
feeding such systems with adversarial inputs. To address the gap, in this work,
we propose an approach to automatically repair adversarial texts at runtime.
Given a text which is suspected to be adversarial, we novelly apply multiple
adversarial perturbation methods in a positive way to identify a repair, i.e.,
a slightly mutated but semantically equivalent text that the neural network
correctly classifies. Our approach has been experimented with multiple models
trained for natural language processing tasks and the results show that our
approach is effective, i.e., it successfully repairs about 80\% of the
adversarial texts. Furthermore, depending on the applied perturbation method,
an adversarial text could be repaired in as short as one second on average.

5
The categories of this paper are: gr-qc
21
The categories of this paper are: adap-org
7
The categories of this paper are: hep-th
19
The categories of this paper are: eess
6
The categories of this paper are: astro-ph
24
The categories of this paper are: dg-ga
27
The categories of this paper are: comp-gas
30
The categories of this paper are: q-alg
0
The categories of this paper are: hep-ph
28
The categories of this paper are: alg-geom
12
The categories of this paper are: nucl-th
4
The categories of this paper are: cond-mat
33
The categories of this paper are: plasm-ph
31
The categories of this paper are: ao-sci
22
The categories of this paper are: chao-dyn
35
The categories of this paper are: mtrl-th