{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T03:56:38Z","timestamp":1781150198648,"version":"3.54.1"},"reference-count":39,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272202"],"award-info":[{"award-number":["62272202"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61672263"],"award-info":[{"award-number":["61672263"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Neural Networks"],"published-print":{"date-parts":[[2026,9]]},"DOI":"10.1016\/j.neunet.2026.108959","type":"journal-article","created":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T13:15:51Z","timestamp":1776172551000},"page":"108959","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Effectiveness of static text adversarial methods on continuously updating models"],"prefix":"10.1016","volume":"201","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5051-163X","authenticated-orcid":false,"given":"Zihao","family":"Yu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9824-4294","authenticated-orcid":false,"given":"Jun","family":"Sun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qidong","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6768-8394","authenticated-orcid":false,"given":"Vasile","family":"Palade","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.neunet.2026.108959_bib0001","series-title":"Proceedings of the 2018 conference on empirical methods in natural language processing","first-page":"2890","article-title":"Generating natural language adversarial examples","author":"Alzantot","year":"2018"},{"key":"10.1016\/j.neunet.2026.108959_bib0002","series-title":"ICASSP 2023-2023 IEEE international conference on acoustics, speech and signal processing (ICASSP)","first-page":"1","article-title":"Towards adversarially robust continual learning","author":"Bai","year":"2023"},{"key":"10.1016\/j.neunet.2026.108959_bib0003","series-title":"Proceedings of the 2015 conference on empirical methods in natural language processing","first-page":"632","article-title":"A large annotated corpus for learning natural language inference","author":"Bowman","year":"2015"},{"issue":"11","key":"10.1016\/j.neunet.2026.108959_bib0004","doi-asserted-by":"crossref","first-page":"15210","DOI":"10.1109\/TNNLS.2023.3283308","article-title":"A word-level adversarial attack method based on sememes and an improved quantum-behaved particle swarm optimization","volume":"35","author":"Chen","year":"2023","journal-title":"IEEE Transactions on Neural Networks and Learning Systems"},{"key":"10.1016\/j.neunet.2026.108959_bib0005","series-title":"Proceedings of the 2017 conference on empirical methods in natural language processing","first-page":"670","article-title":"Supervised learning of universal sentence representations from natural language inference data","author":"Conneau","year":"2017"},{"issue":"7","key":"10.1016\/j.neunet.2026.108959_bib0006","first-page":"3366","article-title":"A continual learning survey: Defying forgetting in classification tasks","volume":"44","author":"De Lange","year":"2021","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"key":"10.1016\/j.neunet.2026.108959_bib0007","series-title":"Proceedings of the 2019 conference of the north American chapter of the association for computational linguistics: human language technologies, volume 1 (long and short papers)","first-page":"4171","article-title":"Bert: Pre-training of deep bidirectional transformers for language understanding","author":"Devlin","year":"2019"},{"issue":"10","key":"10.1016\/j.neunet.2026.108959_bib0008","doi-asserted-by":"crossref","first-page":"5571","DOI":"10.1109\/TFUZZ.2023.3343352","article-title":"ViTH-RFG: Vision transformer hashing with residual fuzzy generation for targeted attack in medical image retrieval","volume":"32","author":"Ding","year":"2023","journal-title":"IEEE Transactions on Fuzzy Systems"},{"key":"10.1016\/j.neunet.2026.108959_bib0009","series-title":"2021 International joint conference on neural networks (IJCNN)","first-page":"1","article-title":"Combating word-level adversarial text with robust adversarial training","author":"Du","year":"2021"},{"issue":"2","key":"10.1016\/j.neunet.2026.108959_bib0010","doi-asserted-by":"crossref","first-page":"245","DOI":"10.1016\/j.neuron.2017.06.011","article-title":"Neuroscience-inspired artificial intelligence","volume":"95","author":"Hassabis","year":"2017","journal-title":"Neuron"},{"key":"10.1016\/j.neunet.2026.108959_bib0011","doi-asserted-by":"crossref","first-page":"2398","DOI":"10.1109\/TIFS.2024.3350376","article-title":"FastTextDodger: Decision-based adversarial attack against black-box NLP models with extremely high efficiency","volume":"19","author":"Hu","year":"2024","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"10.1016\/j.neunet.2026.108959_bib0012","series-title":"Proceedings of the AAAI conference on artificial intelligence","first-page":"10785","article-title":"Word level robustness enhancement: Fight perturbation with perturbation","volume":"vol. 36","author":"Huang","year":"2022"},{"key":"10.1016\/j.neunet.2026.108959_bib0013","series-title":"Proceedings of the AAAI conference on artificial intelligence","first-page":"8018","article-title":"Is bert really robust? A strong baseline for natural language attack on text classification and entailment","volume":"vol. 34","author":"Jin","year":"2020"},{"key":"10.1016\/j.neunet.2026.108959_bib0014","first-page":"28530","article-title":"Retrospective adversarial replay for continual learning","volume":"35","author":"Kumari","year":"2022","journal-title":"Advances in Neural Information Processing Systems"},{"key":"10.1016\/j.neunet.2026.108959_bib0015","series-title":"Proceedings of the 2021 conference of the north American chapter of the association for computational linguistics: Human language technologies","first-page":"5053","article-title":"Contextualized perturbation for textual adversarial attack","author":"Li","year":"2021"},{"key":"10.1016\/j.neunet.2026.108959_bib0016","series-title":"Proceedings of the 49th annual meeting of the association for computational linguistics: Human language technologies","first-page":"142","article-title":"Learning word vectors for sentiment analysis","author":"Maas","year":"2011"},{"issue":"7","key":"10.1016\/j.neunet.2026.108959_bib0017","first-page":"3523","article-title":"Image segmentation using deep learning: A survey","volume":"44","author":"Minaee","year":"2021","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"key":"10.1016\/j.neunet.2026.108959_bib0018","doi-asserted-by":"crossref","first-page":"306","DOI":"10.1016\/j.neunet.2023.01.014","article-title":"A wholistic view of continual learning with deep neural networks: Forgotten lessons and the bridge to active and open world learning","volume":"160","author":"Mundt","year":"2023","journal-title":"Neural Networks"},{"key":"10.1016\/j.neunet.2026.108959_bib0019","series-title":"Integer and combinatorial optimization","author":"Nemhauser","year":"1988"},{"issue":"2","key":"10.1016\/j.neunet.2026.108959_bib0020","doi-asserted-by":"crossref","first-page":"604","DOI":"10.1109\/TNNLS.2020.2979670","article-title":"A survey of the usages of deep learning for natural language processing","volume":"32","author":"Otter","year":"2020","journal-title":"IEEE Transactions on Neural Networks and Learning Systems"},{"issue":"6","key":"10.1016\/j.neunet.2026.108959_bib0021","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3533378","article-title":"Challenges in deploying machine learning: A survey of case studies","volume":"55","author":"Paleyes","year":"2022","journal-title":"ACM computing surveys"},{"key":"10.1016\/j.neunet.2026.108959_bib0022","series-title":"Milcom 2016-2016 IEEE military communications conference","first-page":"49","article-title":"Crafting adversarial input sequences for recurrent neural networks","author":"Papernot","year":"2016"},{"key":"10.1016\/j.neunet.2026.108959_bib0023","doi-asserted-by":"crossref","first-page":"54","DOI":"10.1016\/j.neunet.2019.01.012","article-title":"Continual lifelong learning with neural networks: A review","volume":"113","author":"Parisi","year":"2019","journal-title":"Neural Networks"},{"key":"10.1016\/j.neunet.2026.108959_bib0024","series-title":"Proceedings of the 2014 conference on empirical methods in natural language processing (EMNLP)","first-page":"1532","article-title":"Glove: Global vectors for word representation","author":"Pennington","year":"2014"},{"key":"10.1016\/j.neunet.2026.108959_bib0025","series-title":"Proceedings of the 2021 conference on empirical methods in natural language processing","first-page":"4569","article-title":"Mind the style of text! adversarial and backdoor attacks based on text style transfer","author":"Qi","year":"2021"},{"issue":"2","key":"10.1016\/j.neunet.2026.108959_bib0026","doi-asserted-by":"crossref","first-page":"674","DOI":"10.1109\/TR.2022.3161138","article-title":"Detection tolerant black-box adversarial attack against automatic modulation classification with deep learning","volume":"71","author":"Qi","year":"2022","journal-title":"IEEE Transactions on Reliability"},{"key":"10.1016\/j.neunet.2026.108959_bib0027","doi-asserted-by":"crossref","first-page":"7633","DOI":"10.1109\/TIFS.2024.3430508","article-title":"Enhancing transferability of adversarial examples through mixed-frequency inputs","volume":"19","author":"Qian","year":"2024","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"10.1016\/j.neunet.2026.108959_bib0028","series-title":"Proceedings of the IEEE\/CVF international conference on computer vision","first-page":"4510","article-title":"LEA2: A lightweight ensemble adversarial attack via non-overlapping vulnerable frequency regions","author":"Qian","year":"2023"},{"issue":"9","key":"10.1016\/j.neunet.2026.108959_bib0029","doi-asserted-by":"crossref","first-page":"5201","DOI":"10.1109\/TKDE.2025.3580116","article-title":"F22AT: Feature-focusing adversarial training via disentanglement of natural and perturbed patterns","volume":"37","author":"Qian","year":"2025","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"key":"10.1016\/j.neunet.2026.108959_bib0030","series-title":"Proceedings of the 57th annual meeting of the association for computational linguistics","first-page":"1085","article-title":"Generating natural language adversarial examples through probability weighted word saliency","author":"Ren","year":"2019"},{"key":"10.1016\/j.neunet.2026.108959_bib0031","series-title":"Proceedings of the 27th international joint conference on artificial intelligence","first-page":"4323","article-title":"Interpretable adversarial perturbation in input embedding space for text","author":"Sato","year":"2018"},{"key":"10.1016\/j.neunet.2026.108959_bib0032","series-title":"International conference on learning representations (ICLR 2019)","first-page":"8324","article-title":"Are adversarial examples inevitable?","volume":"vol. 11","author":"Shafahi","year":"2023"},{"key":"10.1016\/j.neunet.2026.108959_bib0033","series-title":"Proceedings of the 2013 conference on empirical methods in natural language processing","first-page":"1631","article-title":"Recursive deep models for semantic compositionality over a sentiment treebank","author":"Socher","year":"2013"},{"issue":"15","key":"10.1016\/j.neunet.2026.108959_bib0034","doi-asserted-by":"crossref","first-page":"8549","DOI":"10.1007\/s00521-024-09543-y","article-title":"Black-box attacks on face recognition via affine-invariant training","volume":"36","author":"Sun","year":"2024","journal-title":"Neural Computing and Applications"},{"issue":"8","key":"10.1016\/j.neunet.2026.108959_bib0035","doi-asserted-by":"crossref","first-page":"5362","DOI":"10.1109\/TPAMI.2024.3367329","article-title":"A comprehensive survey of continual learning: Theory, method and application","volume":"46","author":"Wang","year":"2024","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"issue":"9","key":"10.1016\/j.neunet.2026.108959_bib0036","first-page":"4555","article-title":"A survey on curriculum learning","volume":"44","author":"Wang","year":"2021","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"key":"10.1016\/j.neunet.2026.108959_bib0037","series-title":"Proceedings of the 2021 conference on empirical methods in natural language processing","first-page":"1612","article-title":"On the transferability of adversarial attacks against neural text classifier","author":"Yuan","year":"2021"},{"key":"10.1016\/j.neunet.2026.108959_bib0038","series-title":"Proceedings of the 58th annual meeting of the association for computational linguistics","first-page":"6066","article-title":"Word-level textual adversarial attacking as combinatorial optimization","author":"Zang","year":"2020"},{"key":"10.1016\/j.neunet.2026.108959_bib0039","series-title":"Proceedings of the 57th annual meeting of the association for computational linguistics","first-page":"5564","article-title":"Generating fluent adversarial examples for natural languages","author":"Zhang","year":"2019"}],"container-title":["Neural Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S089360802600420X?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S089360802600420X?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T02:59:09Z","timestamp":1781146749000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S089360802600420X"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9]]},"references-count":39,"alternative-id":["S089360802600420X"],"URL":"https:\/\/doi.org\/10.1016\/j.neunet.2026.108959","relation":{},"ISSN":["0893-6080"],"issn-type":[{"value":"0893-6080","type":"print"}],"subject":[],"published":{"date-parts":[[2026,9]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Effectiveness of static text adversarial methods on continuously updating models","name":"articletitle","label":"Article Title"},{"value":"Neural Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.neunet.2026.108959","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Published by Elsevier Ltd.","name":"copyright","label":"Copyright"}],"article-number":"108959"}}