16/11/2020

Adversarial Semantic Collisions

Congzheng Song, Alexander Rush, Vitaly Shmatikov

Keywords: paraphrase identification, document retrieval, response suggestion, extractive summarizationtextemdash

Abstract: We study \textitsemantic collisions: texts that are semantically unrelated but judged as similar by NLP models. We develop gradient-based approaches for generating semantic collisions and demonstrate that state-of-the-art models for many tasks which rely on analyzing the meaning and similarity of texts---including paraphrase identification, document retrieval, response suggestion, and extractive summarization---are vulnerable to semantic collisions. For example, given a target query, inserting a crafted collision into an irrelevant document can shift its retrieval rank from 1000 to top 3. We show how to generate semantic collisions that evade perplexity-based filtering and discuss other potential mitigations. Our code is available at r̆lhttps://github.com/csong27/collision-bert.

 0
 0
 0
 0
This is an embedded video. Talk and the respective paper are published at EMNLP 2020 virtual conference. If you are one of the authors of the paper and want to manage your upload, see the question "My papertalk has been externally embedded..." in the FAQ section.

Comments

Post Comment
no comments yet
code of conduct: tbd

Similar Papers