{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,7]],"date-time":"2026-09-07T20:10:44Z","timestamp":1788811844527,"version":"build-2803163510"},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"9","license":[{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62406341"],"award-info":[{"award-number":["62406341"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Young Talent of Lifting Engineering for Science and Technology in Shandong, China","award":["SDAST2024QTA040"],"award-info":[{"award-number":["SDAST2024QTA040"]}]},{"DOI":"10.13039\/501100007129","name":"Natural Science Foundation of Shandong Province","doi-asserted-by":"crossref","award":["ZR2023QF051"],"award-info":[{"award-number":["ZR2023QF051"]}],"id":[{"id":"10.13039\/501100007129","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Outstanding Youth Science Foundation Project of Shandong Province","award":["2023HWYQ-070"],"award-info":[{"award-number":["2023HWYQ-070"]}]},{"name":"Qingdao Key Laboratory of Intelligent Sensing Technology for Extreme Environment","award":["2025YB007"],"award-info":[{"award-number":["2025YB007"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Neural Netw. Learning Syst."],"published-print":{"date-parts":[[2026,9]]},"DOI":"10.1109\/tnnls.2026.3675368","type":"journal-article","created":{"date-parts":[[2026,3,24]],"date-time":"2026-03-24T19:49:03Z","timestamp":1774381743000},"page":"4835-4848","source":"Crossref","is-referenced-by-count":0,"title":["Multiobjective Simulated Annealing-Based Stopwords Substitution for Rubbish Text Attack"],"prefix":"10.1109","volume":"37","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9423-8033","authenticated-orcid":false,"given":"Chen","family":"Li","sequence":"first","affiliation":[{"name":"Renmin University of China","place":["Beijing, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6487-3183","authenticated-orcid":false,"given":"Xinghao","family":"Yang","sequence":"additional","affiliation":[{"name":"China University of Petroleum (East China)","place":["Qingdao, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ao","family":"Wang","sequence":"additional","affiliation":[{"name":"China University of Petroleum (East China)","place":["Qingdao, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3948-4471","authenticated-orcid":false,"given":"Yongshun","family":"Gong","sequence":"additional","affiliation":[{"name":"Shandong University","place":["Jinan, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Baodi","family":"Liu","sequence":"additional","affiliation":[{"name":"China University of Petroleum (East China)","place":["Qingdao, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5388-9080","authenticated-orcid":false,"given":"Weifeng","family":"Liu","sequence":"additional","affiliation":[{"name":"China University of Petroleum (East China)","place":["Qingdao, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2016.7795300"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.naacl-main.400"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2023.acl-long.100"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2024.findings-eacl.83"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2023.3283308"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2023\/569"},{"key":"ref7","article-title":"Excessive invariance causes adversarial vulnerability","volume-title":"arXiv:1811.00401","author":"Jacobsen","year":"2018"},{"key":"ref8","first-page":"9561","article-title":"Fundamental tradeoffs between invariance and sensitivity to adversarial perturbations","volume-title":"Proc. 37th Int. Conf. Mach. Learn.","volume":"119","author":"Tram\u00e8r"},{"key":"ref9","first-page":"15395","article-title":"Overinterpretation reveals image classification model pathologies","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"34","author":"Carter"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.52202\/068431-2436"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-022-12181-y"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2020.105520"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-1216-2_4"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-1407"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P18-2006"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-main.500"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2021.emnlp-main.464"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.findings-naacl.14"},{"key":"ref19","article-title":"An LLM can fool itself: A prompt-based adversarial attack","author":"Xu","year":"2023","journal-title":"arXiv:2310.13345"},{"key":"ref20","article-title":"Revisiting character-level adversarial attacks for language models","author":"Rocamora","year":"2024","journal-title":"arXiv:2405.04346"},{"key":"ref21","article-title":"AutoDAN-turbo: A lifelong agent for strategy self-exploration to jailbreak LLMs","author":"Liu","year":"2024","journal-title":"arXiv:2410.05295"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.acl-long.965"},{"key":"ref23","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014","journal-title":"arXiv:1412.6572"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.blackboxnlp-1.30"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1126\/science.220.4598.671"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/4235.996017"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.3115\/1219840.1219855"},{"key":"ref29","first-page":"142","article-title":"Learning word vectors for sentiment analysis","volume-title":"Proc. 49th Annu. Meeting Assoc. Comput. Linguistics, Hum. Lang. Technol.","author":"Maas"},{"key":"ref30","first-page":"649","article-title":"Character-level convolutional networks for text classification","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"28","author":"Zhang"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/d15-1075"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/W18-5446"},{"key":"ref33","volume-title":"First Quora Dataset Release: Question Pairs (2017)","author":"Shankar","year":"2017"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1810.04805"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1907.11692"},{"key":"ref36","article-title":"AlBERT: A lite BERT for self-supervised learning of language representations","volume-title":"arXiv:1909.11942","author":"Lan","year":"2019"},{"key":"ref37","article-title":"DistilBERT, a distilled version of BERT: Smaller, faster, cheaper and lighter","author":"Sanh","year":"2019","journal-title":"arXiv:1910.01108"},{"key":"ref38","first-page":"5753","article-title":"XLNet: Generalized autoregressive pretraining for language understanding","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"32","author":"Yang"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/DSN64029.2025.00029"},{"issue":"8","key":"ref40","first-page":"9","article-title":"Language models are unsupervised multitask learners","volume":"1","author":"Radford","year":"2019","journal-title":"OpenAI Blog"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i05.6311"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.findings-emnlp.341"},{"key":"ref43","article-title":"Universal sentence encoder","author":"Cer","year":"2018","journal-title":"arXiv:1803.11175"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-demos.16"},{"key":"ref45","first-page":"4776","article-title":"Parse: An efficient search method for black-box adversarial text attacks","volume-title":"Proc. 29th Int. Conf. Comput. Linguistics","author":"Zhan"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3651166"},{"key":"ref47","first-page":"1631","article-title":"Recursive deep models for semantic compositionality over a sentiment treebank","volume-title":"Proc. Conf. Empir. Methods Nat. Lang. Process.","author":"Socher"},{"key":"ref48","article-title":"Universal and transferable adversarial attacks on aligned language models","author":"Zou","year":"2023","journal-title":"arXiv:2307.15043"}],"container-title":["IEEE Transactions on Neural Networks and Learning Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/5962385\/11676227\/11455329.pdf?arnumber=11455329","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,7]],"date-time":"2026-09-07T19:20:39Z","timestamp":1788808839000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11455329\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9]]},"references-count":48,"journal-issue":{"issue":"9"},"URL":"https:\/\/doi.org\/10.1109\/tnnls.2026.3675368","relation":{},"ISSN":["2162-237X","2162-2388"],"issn-type":[{"value":"2162-237X","type":"print"},{"value":"2162-2388","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,9]]}}}