{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,31]],"date-time":"2025-12-31T00:12:52Z","timestamp":1767139972181,"version":"build-2238731810"},"reference-count":34,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2025,2,8]],"date-time":"2025-02-08T00:00:00Z","timestamp":1738972800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,2,8]],"date-time":"2025-02-08T00:00:00Z","timestamp":1738972800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"the Shandong Natural Science Foundation","award":["ZR2023QF051"],"award-info":[{"award-number":["ZR2023QF051"]}]},{"name":"Outstanding Youth Science Foundation Project of Shandong Province (Overseas","award":["2023HWYQ-070"],"award-info":[{"award-number":["2023HWYQ-070"]}]},{"name":"Independent Innovation Research Project","award":["22CX06059A"],"award-info":[{"award-number":["22CX06059A"]}]},{"name":"the\u00a0Shandong\u00a0Natural\u00a0Science\u00a0Foundation","award":["ZR2023MF008"],"award-info":[{"award-number":["ZR2023MF008"]}]},{"name":"the\u00a0Qingdao\u00a0Natural\u00a0Science\u00a0Foundation","award":["23-2-1-161-zyyd-jch"],"award-info":[{"award-number":["23-2-1-161-zyyd-jch"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Multimedia Systems"],"published-print":{"date-parts":[[2025,4]]},"DOI":"10.1007\/s00530-025-01678-9","type":"journal-article","created":{"date-parts":[[2025,2,8]],"date-time":"2025-02-08T10:02:19Z","timestamp":1739008939000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Parentheses insertion based sentence-level text adversarial attack"],"prefix":"10.1007","volume":"31","author":[{"given":"Ang","family":"Li","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xinghao","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Baodi","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Honglong","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dapeng","family":"Tao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Weifeng","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,2,8]]},"reference":[{"issue":"3","key":"1678_CR1","doi-asserted-by":"publisher","first-page":"402","DOI":"10.1109\/JPROC.2020.2970615","volume":"108","author":"DJ Miller","year":"2020","unstructured":"Miller, D.J., Xiang, Z., Kesidis, G.: Adversarial learning targeting deep neural network classification: A comprehensive review of defenses against attacks. Proceedings of the IEEE 108(3), 402\u2013433 (2020)","journal-title":"Proceedings of the IEEE"},{"key":"1678_CR2","doi-asserted-by":"publisher","first-page":"7149","DOI":"10.1109\/TMM.2022.3217449","volume":"25","author":"F Liu","year":"2023","unstructured":"Liu, F., Chen, H., Cheng, Z., Liu, A., Nie, L., Kankanhalli, M.: Disentangled multimodal representation learning for recommendation. IEEE Transactions on Multimedia 25, 7149\u20137159 (2023). https:\/\/doi.org\/10.1109\/TMM.2022.3217449","journal-title":"IEEE Transactions on Multimedia"},{"key":"1678_CR3","doi-asserted-by":"publisher","unstructured":"Iyyer, M., Wieting, J., Gimpel, K., Zettlemoyer, L.: Adversarial example generation with syntactically controlled paraphrase networks. In: Proceedings of the 2018 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long Papers), pp. 1875\u20131885. Association for Computational Linguistics, New Orleans, Louisiana (2018). https:\/\/doi.org\/10.18653\/v1\/N18-1170 . https:\/\/aclanthology.org\/N18-1170","DOI":"10.18653\/v1\/N18-1170"},{"key":"1678_CR4","doi-asserted-by":"publisher","unstructured":"Han, W., Zhang, L., Jiang, Y., Tu, K.: Adversarial attack and defense of structured prediction models. In: Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing (EMNLP), pp. 2327\u20132338. Association for Computational Linguistics, Online (2020). https:\/\/doi.org\/10.18653\/v1\/2020.emnlp-main.182 . https:\/\/aclanthology.org\/2020.emnlp-main.182","DOI":"10.18653\/v1\/2020.emnlp-main.182"},{"key":"1678_CR5","doi-asserted-by":"publisher","unstructured":"Jia, R., Liang, P.: Adversarial examples for evaluating reading comprehension systems. In: Proceedings of the 2017 Conference on Empirical Methods in Natural Language Processing, pp. 2021\u20132031. Association for Computational Linguistics, Copenhagen, Denmark (2017). https:\/\/doi.org\/10.18653\/v1\/D17-1215 . https:\/\/aclanthology.org\/D17-1215","DOI":"10.18653\/v1\/D17-1215"},{"key":"1678_CR6","doi-asserted-by":"publisher","unstructured":"Xing, X., Jin, Z., Jin, D., Wang, B., Zhang, Q., Huang, X.: Tasty burgers, soggy fries: Probing aspect robustness in aspect-based sentiment analysis. In: Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing (EMNLP), pp. 3594\u20133605. Association for Computational Linguistics, Online (2020). https:\/\/doi.org\/10.18653\/v1\/2020.emnlp-main.292 .https:\/\/aclanthology.org\/2020.emnlp-main.292","DOI":"10.18653\/v1\/2020.emnlp-main.292"},{"key":"1678_CR7","doi-asserted-by":"crossref","unstructured":"Wang, T., Wang, X., Qin, Y., Packer, B., Li, K., Chen, J., Beutel, A., Chi, E.: CAT-gen: Improving robustness in NLP models via controlled adversarial text generation. In: Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing (EMNLP), pp. 5141\u20135146. Association for Computational Linguistics, Online (2020)","DOI":"10.18653\/v1\/2020.emnlp-main.417"},{"key":"1678_CR8","unstructured":"Zhao, Z., Dua, D., Singh, S.: Generating natural adversarial examples. arXiv preprint arXiv:1710.11342 (2017)"},{"key":"1678_CR9","doi-asserted-by":"publisher","unstructured":"Ribeiro, M.T., Singh, S., Guestrin, C.: Semantically equivalent adversarial rules for debugging NLP models. In: Proceedings of the 56th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers), pp. 856\u2013865. Association for Computational Linguistics, Melbourne, Australia (2018). https:\/\/doi.org\/10.18653\/v1\/P18-1079 . https:\/\/aclanthology.org\/P18-1079","DOI":"10.18653\/v1\/P18-1079"},{"key":"1678_CR10","doi-asserted-by":"publisher","first-page":"1184","DOI":"10.1109\/TASLP.2021.3129339","volume":"30","author":"Z Shao","year":"2022","unstructured":"Shao, Z., Wu, Z., Huang, M.: Advexpander: Generating natural language adversarial examples by expanding text. IEEE\/ACM Transactions on Audio, Speech, and Language Processing 30, 1184\u20131196 (2022). https:\/\/doi.org\/10.1109\/TASLP.2021.3129339","journal-title":"IEEE\/ACM Transactions on Audio, Speech, and Language Processing"},{"key":"1678_CR11","doi-asserted-by":"crossref","unstructured":"Ribeiro, M.T., Singh, S., Guestrin, C.: Semantically equivalent adversarial rules for debugging nlp models. In: Proceedings of the 56th Annual Meeting of the Association for Computational Linguistics (volume 1: Long Papers), pp. 856\u2013865 (2018)","DOI":"10.18653\/v1\/P18-1079"},{"key":"1678_CR12","doi-asserted-by":"publisher","unstructured":"Huang, K.-H., Chang, K.-W.: Generating syntactically controlled paraphrases without using annotated parallel pairs. In: Proceedings of the 16th Conference of the European Chapter of the Association for Computational Linguistics: Main Volume, pp. 1022\u20131033. Association for Computational Linguistics, Online (2021). https:\/\/doi.org\/10.18653\/v1\/2021.eacl-main.88 . https:\/\/aclanthology.org\/2021.eacl-main.88","DOI":"10.18653\/v1\/2021.eacl-main.88"},{"key":"1678_CR13","doi-asserted-by":"crossref","unstructured":"Cer, D., Yang, Y., Kong, S.-y., Hua, N., Limtiaco, N., John, R.S., Constant, N., Guajardo-Cespedes, M., Yuan, S., Tar, C., et al.: Universal sentence encoder. arXiv preprint arXiv:1803.11175 (2018)","DOI":"10.18653\/v1\/D18-2029"},{"key":"1678_CR14","doi-asserted-by":"crossref","unstructured":"Gao, J., Lanchantin, J., Soffa, M.L., Qi, Y.: Black-box generation of adversarial text sequences to evade deep learning classifiers. In: 2018 IEEE Security and Privacy Workshops (SPW), pp. 50\u201356 (2018). IEEE","DOI":"10.1109\/SPW.2018.00016"},{"key":"1678_CR15","unstructured":"Ebrahimi, J., Lowd, D., Dou, D.: On adversarial examples for character-level neural machine translation. In: Proceedings of the 27th International Conference on Computational Linguistics, pp. 653\u2013663. Association for Computational Linguistics, Santa Fe, New Mexico, USA (2018). https:\/\/aclanthology.org\/C18-1055"},{"key":"1678_CR16","doi-asserted-by":"publisher","unstructured":"Ebrahimi, J., Rao, A., Lowd, D., Dou, D.: HotFlip: White-box adversarial examples for text classification. In: Proceedings of the 56th Annual Meeting of the Association for Computational Linguistics (Volume 2: Short Papers), pp. 31\u201336. Association for Computational Linguistics, Melbourne, Australia (2018). https:\/\/doi.org\/10.18653\/v1\/P18-2006 . https:\/\/aclanthology.org\/P18-2006","DOI":"10.18653\/v1\/P18-2006"},{"key":"1678_CR17","doi-asserted-by":"crossref","unstructured":"Eger, S., Benz, Y.: From hero to z\u00e9roe: A benchmark of low-level adversarial attacks. In: Proceedings of the 1st Conference of the Asia-Pacific Chapter of the Association for Computational Linguistics and the 10th International Joint Conference on Natural Language Processing, pp. 786\u2013803. Association for Computational Linguistics, Suzhou, China (2020). https:\/\/aclanthology.org\/2020.aacl-main.79","DOI":"10.18653\/v1\/2020.aacl-main.79"},{"key":"1678_CR18","doi-asserted-by":"crossref","unstructured":"Liu, A., Yu, H., Hu, X., Li, S., Lin, L., Ma, F., Yang, Y., Wen, L.: Character-level white-box adversarial attacks against transformers via attachable subwords substitution. In: Proceedings of the 2022 Conference on Empirical Methods in Natural Language Processing, pp. 7664\u20137676. Association for Computational Linguistics, Abu Dhabi, United Arab Emirates (2022)","DOI":"10.18653\/v1\/2022.emnlp-main.522"},{"key":"1678_CR19","doi-asserted-by":"publisher","first-page":"8018","DOI":"10.1609\/aaai.v34i05.6311","volume":"34","author":"D Jin","year":"2020","unstructured":"Jin, D., Jin, Z., Zhou, J.T., Szolovits, P.: Is bert really robust? a strong baseline for natural language attack on text classification and entailment. Proceedings of the AAAI Conference on Artificial Intelligence 34, 8018\u20138025 (2020)","journal-title":"Proceedings of the AAAI Conference on Artificial Intelligence"},{"key":"1678_CR20","doi-asserted-by":"publisher","unstructured":"Li, D., Zhang, Y., Peng, H., Chen, L., Brockett, C., Sun, M.-T., Dolan, B.: Contextualized perturbation for textual adversarial attack. In: Proceedings of the 2021 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, pp. 5053\u20135069. Association for Computational Linguistics, Online (2021). https:\/\/doi.org\/10.18653\/v1\/2021.naacl-main.400 . https:\/\/aclanthology.org\/2021.naacl-main.400","DOI":"10.18653\/v1\/2021.naacl-main.400"},{"key":"1678_CR21","doi-asserted-by":"publisher","unstructured":"Garg, S., Ramakrishnan, G.: BAE: BERT-based adversarial examples for text classification. In: Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing (EMNLP), pp. 6174\u20136181. Association for Computational Linguistics, Online (2020). https:\/\/doi.org\/10.18653\/v1\/2020.emnlp-main.498 . https:\/\/aclanthology.org\/2020.emnlp-main.498","DOI":"10.18653\/v1\/2020.emnlp-main.498"},{"key":"1678_CR22","doi-asserted-by":"publisher","unstructured":"Chen, Q., Sun, J., Palade, V.: A word-level adversarial attack method based on sememes and an improved quantum-behaved particle swarm optimization. IEEE Transactions on Neural Networks and Learning Systems 1\u201312,(2023). https:\/\/doi.org\/10.1109\/TNNLS.2023.3283308","DOI":"10.1109\/TNNLS.2023.3283308"},{"key":"1678_CR23","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2023.119237","volume":"644","author":"X Yang","year":"2023","unstructured":"Yang, X., Qi, Y., Chen, H., Liu, B., Liu, W.: Generation-based parallel particle swarm optimization for adversarial text attacks. Information Sciences 644, 119237 (2023)","journal-title":"Information Sciences"},{"key":"1678_CR24","doi-asserted-by":"publisher","unstructured":"Zhou, Y., Jiang, J.-Y., Chang, K.-W., Wang, W.: Learning to discriminate perturbations for blocking adversarial attacks in text classification. In: Proceedings of the 2019 Conference on Empirical Methods in Natural Language Processing and the 9th International Joint Conference on Natural Language Processing (EMNLP-IJCNLP), pp. 4904\u20134913. Association for Computational Linguistics, Hong Kong, China (2019). https:\/\/doi.org\/10.18653\/v1\/D19-1496 . https:\/\/aclanthology.org\/D19-1496","DOI":"10.18653\/v1\/D19-1496"},{"key":"1678_CR25","unstructured":"Zou, A., Wang, Z., Kolter, J.Z., Fredrikson, M.: Universal and transferable adversarial attacks on aligned language models. arXiv preprint arXiv:2307.15043 (2023)"},{"key":"1678_CR26","doi-asserted-by":"publisher","first-page":"190","DOI":"10.1016\/j.neucom.2023.01.071","volume":"529","author":"G Chang","year":"2023","unstructured":"Chang, G., Gao, H., Yao, Z., Xiong, H.: Textguise: Adaptive adversarial example attacks on text classification model. Neurocomputing 529, 190\u2013203 (2023)","journal-title":"Neurocomputing"},{"key":"1678_CR27","unstructured":"Wang, J., Hu, X., Hou, W., Chen, H., Zheng, R., Wang, Y., Yang, L., Huang, H., Ye, W., Geng, X., et al.: On the robustness of chatgpt: An adversarial and out-of-distribution perspective. arXiv preprint arXiv:2302.12095 (2023)"},{"key":"1678_CR28","doi-asserted-by":"crossref","unstructured":"Socher, R., Perelygin, A., Wu, J., Chuang, J., Manning, C.D., Ng, A.Y., Potts, C.: Recursive deep models for semantic compositionality over a sentiment treebank. In: Proceedings of the 2013 Conference on Empirical Methods in Natural Language Processing, pp. 1631\u20131642 (2013)","DOI":"10.18653\/v1\/D13-1170"},{"key":"1678_CR29","unstructured":"Chen, Z., Zhang, H., Zhang, X., Zhao, L.: Quora question pairs (2018)"},{"key":"1678_CR30","unstructured":"Liang, A.: Rotten tomatoes: Sentiment classification in movie reviews. CS 229, 15 (2006)"},{"key":"1678_CR31","unstructured":"Maas, A., Daly, R.E., Pham, P.T., Huang, D., Ng, A.Y., Potts, C.: Learning word vectors for sentiment analysis. In: Proceedings of the 49th Annual Meeting of the Association for Computational Linguistics: Human Language Technologies, pp. 142\u2013150 (2011)"},{"key":"1678_CR32","unstructured":"Zhang, T., Kishore, V., Wu, F., Weinberger, K.Q., Artzi, Y.: Bertscore: Evaluating text generation with bert. arXiv preprint arXiv:1904.09675 (2019)"},{"issue":"11","key":"1678_CR33","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1145\/219717.219748","volume":"38","author":"GA Miller","year":"1995","unstructured":"Miller, G.A.: Wordnet: a lexical database for english. Communications of the ACM 38(11), 39\u201341 (1995)","journal-title":"Communications of the ACM"},{"key":"1678_CR34","doi-asserted-by":"publisher","first-page":"804","DOI":"10.1162\/tacl_a_00576","volume":"11","author":"Y Chen","year":"2023","unstructured":"Chen, Y., Eger, S.: Menli: Robust evaluation metrics from natural language inference. Transactions of the Association for Computational Linguistics 11, 804\u2013825 (2023)","journal-title":"Transactions of the Association for Computational Linguistics"}],"updated-by":[{"DOI":"10.1007\/s00530-025-01723-7","type":"correction","label":"Correction","source":"publisher","updated":{"date-parts":[[2025,2,26]],"date-time":"2025-02-26T00:00:00Z","timestamp":1740528000000}}],"container-title":["Multimedia Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00530-025-01678-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00530-025-01678-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00530-025-01678-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,21]],"date-time":"2025-04-21T15:33:06Z","timestamp":1745249586000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00530-025-01678-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2,8]]},"references-count":34,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2025,4]]}},"alternative-id":["1678"],"URL":"https:\/\/doi.org\/10.1007\/s00530-025-01678-9","relation":{},"ISSN":["0942-4962","1432-1882"],"issn-type":[{"value":"0942-4962","type":"print"},{"value":"1432-1882","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,2,8]]},"assertion":[{"value":"18 August 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 January 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 February 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"26 February 2025","order":4,"name":"change_date","label":"Change Date","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"Correction","order":5,"name":"change_type","label":"Change Type","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"A Correction to this paper has been published:","order":6,"name":"change_details","label":"Change Details","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"https:\/\/doi.org\/10.1007\/s00530-025-01723-7","URL":"https:\/\/doi.org\/10.1007\/s00530-025-01723-7","order":7,"name":"change_details","label":"Change Details","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"101"}}