{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,23]],"date-time":"2026-04-23T14:58:22Z","timestamp":1776956302108,"version":"3.51.4"},"reference-count":184,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Deputyship for Research and Innovation, Ministry of Education, Saudi Arabia","award":["1120"],"award-info":[{"award-number":["1120"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput. Soc. Syst."],"published-print":{"date-parts":[[2023,12]]},"DOI":"10.1109\/tcss.2022.3218743","type":"journal-article","created":{"date-parts":[[2022,11,8]],"date-time":"2022-11-08T20:34:09Z","timestamp":1667939649000},"page":"3089-3108","source":"Crossref","is-referenced-by-count":31,"title":["Adversarial NLP for Social Network Applications: Attacks, Defenses, and Research Directions"],"prefix":"10.1109","volume":"10","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7832-5081","authenticated-orcid":false,"given":"Izzat","family":"Alsmadi","sequence":"first","affiliation":[{"name":"Department of Computing and Cyber Security, Texas A&M University, San Antonio, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0931-9275","authenticated-orcid":false,"given":"Kashif","family":"Ahmad","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Munster Technological University, Cork, Ireland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3375-0310","authenticated-orcid":false,"given":"Mahmoud","family":"Nazzal","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Newark College of Engineering, New Jersey Institute of Technology, Newark, NJ, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7172-1997","authenticated-orcid":false,"given":"Firoj","family":"Alam","sequence":"additional","affiliation":[{"name":"Qatar Computing Research Institute, Hamad Bin Khalifa University, Doha, Qatar"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0903-1204","authenticated-orcid":false,"given":"Ala","family":"Al-Fuqaha","sequence":"additional","affiliation":[{"name":"Information and Computing Technology (ICT) Division, College of Science and Engineering (CSE), Hamad Bin Khalifa University, Doha, Qatar"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1583-713X","authenticated-orcid":false,"given":"Abdallah","family":"Khreishah","sequence":"additional","affiliation":[{"name":"Department of Computer Science, College of Computer Science and Information Technology, King Faisal University, Al Hofuf, Saudi Arabia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Abdulelah","family":"Algosaibi","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Newark College of Engineering, New Jersey Institute of Technology, Newark, NJ, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-018-5982-9"},{"issue":"1","key":"ref2","first-page":"47","article-title":"Use of social media by companies to reach their customers","volume":"8","author":"Bhanot","year":"2012","journal-title":"SIES J. Manage."},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30645-8_10"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2943877"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.euroecorev.2021.103772"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3373464.3373475"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.findings-emnlp.56"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1177\/1527476420982230"},{"key":"ref9","first-page":"26","article-title":"hBERT+ BiasCorp\u2014Fighting racism on the web","volume-title":"Proc. 1st Workshop Lang. Technol. Equality, Diversity Inclusion","author":"Onabola"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/S19-2084"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.alw-1.19"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1126\/science.1167742"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1140\/epjst\/e2012-01697-8"},{"key":"ref14","article-title":"Proceedings of the ninth international workshop on natural language processing for social media","volume-title":"Proc. 9th Int. Workshop Natural Lang. Process. Social Media","author":"Ku"},{"key":"ref15","article-title":"Proceedings of the eighth international workshop on natural language processing for social media","volume-title":"Proc. 8th Int. Workshop Natural Lang. Process. Social Media","author":"Ku"},{"key":"ref16","first-page":"1","article-title":"Proceedings of the third workshop on abusive language online","volume-title":"Proc. 3rd Workshop Abusive Lang. Online","author":"Roberts"},{"key":"ref17","first-page":"1","article-title":"Proceedings of the fourth workshop on online abuse and harms","volume-title":"Proc. 4th Workshop Online Abuse Harms","author":"Akiwowo"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.nlp4if-1.12"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58219-7_17"},{"key":"ref20","first-page":"1","article-title":"Overview of CheckThat! 2020 English: Automatic identification and verification of claims in social media","volume-title":"Proc. Work. Notes CLEF-Conf. Labs Eval. Forum","author":"Shaar"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-85251-1_19"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.semeval-1.143"},{"key":"ref23","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2014","journal-title":"arXiv:1312.6199"},{"key":"ref24","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.282"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_4"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2019.00015"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICCVW.2017.94"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1126\/science.aaw4399"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM50108.2020.00037"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313741"},{"key":"ref34","volume-title":"Microsoft Exec Apologizes for Tay Chatbots Racist Tweets, Says Users Exploited a Vulnerability","year":"2021"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.3390\/app11178172"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP39728.2021.9414793"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.findings-acl.118"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01242"},{"key":"ref39","first-page":"66","article-title":"Regularizer to mitigate gradient masking effect during single-step adversarial training","volume-title":"Proc. CVPR Workshops","author":"Vivek"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.3014390"},{"key":"ref41","article-title":"Ensemble adversarial training: Attacks and defenses","author":"Tram\u00e8r","year":"2017","journal-title":"arXiv:1705.07204"},{"key":"ref42","article-title":"Feature squeezing: Detecting adversarial examples in deep neural networks","author":"Xu","year":"2017","journal-title":"arXiv:1704.01155"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00254"},{"key":"ref44","article-title":"Towards a robust deep neural network in texts: A survey","author":"Wang","year":"2019","journal-title":"arXiv:1902.07285"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3374217"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/s11633-019-1211-x"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3270101.3270103"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/IMCOM48794.2020.9001767"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.31979\/etd.6tsk-redu"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.2200\/s00659ed1v01y201508hlt030"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-021-03421-1"},{"key":"ref52","article-title":"A formalization of robustness for deep neural networks","author":"Dreossi","year":"2019","journal-title":"arXiv:1903.10033"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/MDAT.2020.2968274"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2021.3130380"},{"key":"ref55","first-page":"601","article-title":"Stealing machine learning models via prediction APIs","volume-title":"Proc. 25th USENIX Secur. Symp.","author":"Tram\u00e8r"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2018.07.023"},{"key":"ref57","article-title":"Natural language adversarial defense through synonym encoding","author":"Wang","year":"2019","journal-title":"arXiv:1909.06723"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.eacl-main.13"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-main.500"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.acl-main.442"},{"key":"ref61","article-title":"HotFlip: White-box adversarial examples for text classification","author":"Ebrahimi","year":"2017","journal-title":"arXiv:1712.06751"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00016"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23138"},{"key":"ref64","article-title":"Synthetic and natural noise both break neural machine translation","author":"Belinkov","year":"2017","journal-title":"arXiv:1711.02173"},{"key":"ref65","article-title":"Deceiving Googles perspective API built for detecting toxic comments","author":"Hosseini","year":"2017","journal-title":"arXiv:1702.08138"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/CSCI49370.2019.00069"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-1561"},{"key":"ref68","first-page":"1634","article-title":"Text processing like humans do: Visually attacking and shielding NLP systems","volume-title":"Proc. Conf. North Amer. Chapter Assoc. Comput. Linguistics, Hum. Lang. Technol.","author":"Eger"},{"key":"ref69","first-page":"649","article-title":"Character-level convolutional networks for text classification","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"28","author":"Zhang"},{"key":"ref70","article-title":"Adversarial examples for natural language classification problems","author":"Kuleshov","year":"2018"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i05.6311"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.acl-main.540"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/601"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D19-1496"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-1103"},{"issue":"43","key":"ref76","first-page":"1","article-title":"Greedy attack and Gumbel attack: Generating adversarial examples for discrete data","volume":"21","author":"Yang","year":"2020","journal-title":"J. Mach. Learn. Res."},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D19-1221"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-main.498"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P18-1079"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/3321707.3321749"},{"key":"ref81","article-title":"Understanding neural networks through representation erasure","author":"Li","year":"2016","journal-title":"arXiv:1612.08220"},{"key":"ref82","first-page":"146","article-title":"Discrete adversarial attacks and submodular optimization with applications to text classification","volume":"1","author":"Lei","year":"2019","journal-title":"Proc. Mach. Learn. Syst."},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00673"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2020.08.087"},{"key":"ref85","article-title":"Adversarial texts with gradient methods","author":"Gong","year":"2018","journal-title":"arXiv:1801.07175"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-1316"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/585"},{"key":"ref88","first-page":"653","article-title":"On adversarial examples for character-level neural machine translation","volume-title":"Proc. 27th Int. Conf. Comput. Linguistics","author":"Ebrahimi"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N18-1170"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D17-1215"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-1425"},{"key":"ref92","first-page":"5998","article-title":"Attention is all you need","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Vaswani"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N19-1314"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/SPW50608.2020.00020"},{"key":"ref95","article-title":"Understanding and diagnosing vulnerability under adversarial attacks","author":"Zheng","year":"2020","journal-title":"arXiv:2007.08716"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/K18-1011"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/ICME51207.2021.9428419"},{"key":"ref98","article-title":"The limitations of adversarial training and the blind-spot attack","author":"Zhang","year":"2019","journal-title":"arXiv:1901.04684"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/ISPA-BDCloud-SocialCom-SustainCom51426.2020.00095"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.findings-acl.287"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2020.107659"},{"key":"ref102","first-page":"16891","article-title":"Lipschitz-certifiable training with a tight outer bound","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Lee"},{"key":"ref103","first-page":"6212","article-title":"Globally-robust neural networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Leino"},{"key":"ref104","article-title":"Defense against adversarial attacks in NLP via Dirichlet neighborhood ensemble","author":"Zhou","year":"2020","journal-title":"arXiv:2006.11627"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1162\/coli_a_00476"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D19-1423"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1145\/3161603"},{"key":"ref108","article-title":"Automatic rumor detection on microblogs: A survey","author":"Cao","year":"2018","journal-title":"arXiv:1807.03505"},{"key":"ref109","volume-title":"The psychology of rumor","author":"Allport","year":"1947"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2015.7113322"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1145\/1963405.1963500"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2020\/197"},{"key":"ref113","first-page":"1115","article-title":"Adversarial attack on graph structured data","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Dai"},{"key":"ref114","first-page":"3818","article-title":"Detecting rumors from microblogs with recurrent neural networks","volume-title":"Proc. 25th Int. Joint Conf. Artif. Intell.","author":"Ma"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-67217-5_8"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2019.2961675"},{"key":"ref117","article-title":"Learning reporting dynamics during breaking news for rumour detection in social media","volume-title":"arXiv:1610.07363","author":"Zubiaga","year":"2016"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P17-1066"},{"key":"ref119","first-page":"33","article-title":"A multi-modal method for satire detection using textual and visual cues","volume-title":"Proc. 3rd NLP4IF Workshop NLP Internet Freedom, Censorship, Disinformation, Propaganda","author":"Li"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N19-1069"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1145\/3201064.3201100"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1145\/3395046"},{"key":"ref123","article-title":"Too many people think satirical news is real","author":"Garret","year":"2019"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D17-1211"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.3115\/1667583.1667633"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00116"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/W16-0802"},{"key":"ref128","first-page":"3371","article-title":"Attending sentences to detect satirical fake news","volume-title":"Proc. 27th Int. Conf. Comput. Linguistics","author":"Sarkar"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1201\/9781420086942"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1007\/s42001-020-00063-y"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1145\/3220267.3220287"},{"key":"ref132","first-page":"19","article-title":"Manipulation and fake news detection on social media: A two domain survey, combining social network analysis and knowledge bases exploitation","volume-title":"Proc. C&ESAR Conf.","author":"Gadek"},{"key":"ref133","article-title":"How artificial intelligence transforms cybersecurity","author":"Yao","year":"2019"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2021.115742"},{"key":"ref135","article-title":"How vulnerable are automatic fake news detection methods to adversarial attacks?","author":"Koenders","year":"2021","journal-title":"arXiv:2107.07970"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1109\/HPBDIS53214.2021.9658462"},{"key":"ref137","article-title":"Graph neural networks with continual learning for fake news detection from social media","author":"Han","year":"2020","journal-title":"arXiv:2007.03316"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1016\/j.eng.2019.12.012"},{"key":"ref139","article-title":"Untrue.News: A new search engine for fake stories","author":"Woloszyn","year":"2020","journal-title":"arXiv:2002.06585"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-demos.16"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.3390\/technologies8040064"},{"key":"ref142","first-page":"1","article-title":"Troll factories: The internet research agency and state-sponsored agenda building","volume":"29","author":"Boatwright","year":"2018","journal-title":"Resource Centre Media Freedom Eur."},{"key":"ref143","article-title":"Hate speech on social media: Global comparisons","volume":"7","author":"Laub","year":"2019","journal-title":"Council on Foreign Relations"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/W17-1101"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-36687-2_77"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363271"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-main.606"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.socialnlp-1.2"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1109\/ASONAM49781.2020.9381473"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-75762-5_35"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1609\/icwsm.v11i1.14955"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1145\/3209978.3210037"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1145\/3393880"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.5220\/0007566307940800"},{"key":"ref155","article-title":"Adversarial training methods for semi-supervised text classification","author":"Miyato","year":"2016","journal-title":"arXiv:1605.07725"},{"key":"ref156","article-title":"FreeLB: Enhanced adversarial training for natural language understanding","author":"Zhu","year":"2019","journal-title":"arXiv:1909.11764"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00715"},{"key":"ref158","first-page":"274","article-title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Athalye"},{"key":"ref159","first-page":"1","article-title":"Defending against neural fake news","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Zellers"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1162\/coli_a_00380"},{"key":"ref161","article-title":"Word embedding perturbation for sentence classification","author":"Zhang","year":"2018","journal-title":"arXiv:1804.08166"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-57805-3_23"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.3390\/app9050909"},{"key":"ref164","first-page":"6983","article-title":"Adversarial attacks on graph classifiers via Bayesian optimisation","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Wan"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1089\/big.2020.0062"},{"key":"ref166","first-page":"3402","article-title":"All-in-one: Multi-task learning for rumour verification","volume-title":"Proc. 27th Int. Conf. Comput. Linguistics","author":"Kochkina"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.3390\/s22103628"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1109\/SMC.2015.380"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2021.04.026"},{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3465770"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR48806.2021.9412167"},{"key":"ref172","article-title":"Using random perturbations to mitigate adversarial attacks on sentiment analysis models","author":"Swenor","year":"2022","journal-title":"arXiv:2202.05758"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3058278"},{"key":"ref174","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.acl-main.370"},{"key":"ref175","first-page":"142","article-title":"Learning word vectors for sentiment analysis","volume-title":"Proc. 49th Annu. Meeting Assoc. Comput. Linguistics, Hum. Lang. Technol.","author":"Maas"},{"key":"ref176","first-page":"321","article-title":"Why do adversarial attacks transfer? Explaining transferability of evasion and poisoning attacks","volume-title":"Proc. 28th USENIX Secur. Symp.","author":"Demontis"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1145\/2594455"},{"key":"ref178","first-page":"9263","article-title":"GNNGuard: Defending graph neural networks against adversarial attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Zhang"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1145\/3447556.3447566"},{"issue":"70","key":"ref180","first-page":"1","article-title":"Representation learning for dynamic graphs: A survey","volume":"21","author":"Kazemi","year":"2020","journal-title":"J. Mach. Learn. Res."},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1145\/1458082.1458123"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.22"},{"key":"ref183","article-title":"Node-level membership inference attacks against graph neural networks","author":"He","year":"2021","journal-title":"arXiv:2102.05429"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1145\/1989323.1989345"}],"container-title":["IEEE Transactions on Computational Social Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6570650\/10352175\/09942953.pdf?arnumber=9942953","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,12,19]],"date-time":"2023-12-19T23:46:08Z","timestamp":1703029568000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9942953\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12]]},"references-count":184,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tcss.2022.3218743","relation":{},"ISSN":["2329-924X","2373-7476"],"issn-type":[{"value":"2329-924X","type":"electronic"},{"value":"2373-7476","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,12]]}}}