{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,21]],"date-time":"2025-08-21T16:49:36Z","timestamp":1755794976387,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":70,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,7,20]],"date-time":"2025-07-20T00:00:00Z","timestamp":1752969600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Key R&D Program of China under Grant","award":["No.2023YFF0905400"],"award-info":[{"award-number":["No.2023YFF0905400"]}]},{"name":"National Natural Science Foundation of China through grants","award":["No.U2341229"],"award-info":[{"award-number":["No.U2341229"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,7,20]]},"DOI":"10.1145\/3690624.3709265","type":"proceedings-article","created":{"date-parts":[[2025,4,4]],"date-time":"2025-04-04T18:44:43Z","timestamp":1743792283000},"page":"1032-1043","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Enhancing Black-Box Adversarial Attacks on Discrete Sequential Data via Bilevel Bayesian Optimization in Hybrid Spaces"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2187-1641","authenticated-orcid":false,"given":"Tianxing","family":"Man","sequence":"first","affiliation":[{"name":"School of Artificial Intelligence, Jilin University, Changchun, Jilin, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-8021-2815","authenticated-orcid":false,"given":"Xingchen","family":"Li","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Jilin University, Changchun, Jilin, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3958-8740","authenticated-orcid":false,"given":"Zhaogeng","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Jilin University, Changchun, Jilin, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-3833-8555","authenticated-orcid":false,"given":"Haozhen","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Jilin University, Changchun, Jilin, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6049-1815","authenticated-orcid":false,"given":"Bin","family":"Gu","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Jilin University, Changchun, Jilin, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2697-8093","authenticated-orcid":false,"given":"Yi","family":"Chang","sequence":"additional","affiliation":[{"name":"School of Artificial Intelligence, Jilin University, Changchun, Jilin, China, International Center of Future Science, Jilin University, Changchun, Jilin, China, & Engineering Research Center of Knowledge-Driven Human-Machine Intelligence, Ministry of Education, Changchun, Jilin, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,7,20]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/TASLP.2014.2339736"},{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-1316"},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58592-1_29"},{"key":"e_1_3_2_2_4_1","volume-title":"Algorithms for hyper-parameter optimization. Advances in neural information processing systems","author":"Bergstra James","year":"2011","unstructured":"James Bergstra, R\u00e9mi Bardenet, Yoshua Bengio, and Bal\u00e1zs K\u00e9gl. 2011. Algorithms for hyper-parameter optimization. Advances in neural information processing systems, Vol. 24 (2011)."},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.3389\/fbinf.2023.1120370"},{"key":"e_1_3_2_2_6_1","volume-title":"Radial basis functions. Acta numerica","author":"Buhmann Martin Dietrich","year":"2000","unstructured":"Martin Dietrich Buhmann. 2000. Radial basis functions. Acta numerica, Vol. 9 (2000), 1--38."},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"crossref","unstructured":"Nicholas Carlini and David Wagner. 2017. Towards evaluating the robustness of neural networks. In 2017 ieee symposium on security and privacy (sp). Ieee 39--57.","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-2029"},{"key":"e_1_3_2_2_9_1","first-page":"12760","article-title":"Bayesian optimization over discrete and mixed spaces via probabilistic reparameterization","volume":"35","author":"Daulton Samuel","year":"2022","unstructured":"Samuel Daulton, Xingchen Wan, David Eriksson, Maximilian Balandat, Michael A Osborne, and Eytan Bakshy. 2022. Bayesian optimization over discrete and mixed spaces via probabilistic reparameterization. Advances in Neural Information Processing Systems, Vol. 35 (2022), 12760--12774.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_2_10_1","volume-title":"International Conference on Machine Learning. PMLR, 2632--2643","author":"Deshwal Aryan","year":"2021","unstructured":"Aryan Deshwal, Syrine Belakaria, and Janardhan Rao Doppa. 2021. Bayesian optimization over hybrid spaces. In International Conference on Machine Learning. PMLR, 2632--2643."},{"key":"e_1_3_2_2_11_1","volume-title":"Combining latent space and structured kernels for Bayesian optimization over combinatorial spaces. Advances in neural information processing systems","author":"Deshwal Aryan","year":"2021","unstructured":"Aryan Deshwal and Jana Doppa. 2021. Combining latent space and structured kernels for Bayesian optimization over combinatorial spaces. Advances in neural information processing systems, Vol. 34 (2021), 8185--8200."},{"key":"e_1_3_2_2_12_1","volume-title":"Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805","author":"Devlin Jacob","year":"2018","unstructured":"Jacob Devlin, Ming-Wei Chang, Kenton Lee, and Kristina Toutanova. 2018. Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805 (2018)."},{"key":"e_1_3_2_2_13_1","volume-title":"Proc. 34th Conference on Uncertainty in Artificial Intelligence.","author":"Eissman Stephan","year":"2018","unstructured":"Stephan Eissman, Daniel Levy, Rui Shu, Stefan Bartzsch, and Stefano Ermon. 2018. Bayesian optimization and attribute adjustment. In Proc. 34th Conference on Uncertainty in Artificial Intelligence."},{"volume-title":"WordNet: An electronic lexical database","author":"Fellbaum Christiane","key":"e_1_3_2_2_14_1","unstructured":"Christiane Fellbaum. 1998. WordNet: An electronic lexical database. MIT press."},{"key":"e_1_3_2_2_15_1","volume-title":"Bae: Bert-based adversarial examples for text classification. arXiv preprint arXiv:2004.01970","author":"Garg Siddhant","year":"2020","unstructured":"Siddhant Garg and Goutham Ramakrishnan. 2020. Bae: Bert-based adversarial examples for text classification. arXiv preprint arXiv:2004.01970 (2020)."},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2019.11.004"},{"key":"e_1_3_2_2_17_1","volume-title":"Benjam\u00edn S\u00e1nchez-Lengeling, Dennis Sheberla, Jorge Aguilera-Iparraguirre, Timothy D Hirzel, Ryan P Adams, and Al\u00e1n Aspuru-Guzik.","author":"G\u00f3mez-Bombarelli Rafael","year":"2018","unstructured":"Rafael G\u00f3mez-Bombarelli, Jennifer N Wei, David Duvenaud, Jos\u00e9 Miguel Hern\u00e1ndez-Lobato, Benjam\u00edn S\u00e1nchez-Lengeling, Dennis Sheberla, Jorge Aguilera-Iparraguirre, Timothy D Hirzel, Ryan P Adams, and Al\u00e1n Aspuru-Guzik. 2018. Automatic chemical design using a data-driven continuous representation of molecules. ACS central science, Vol. 4, 2 (2018), 268--276."},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/1953048.2021071"},{"key":"e_1_3_2_2_19_1","volume-title":"Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572","author":"Goodfellow Ian J","year":"2014","unstructured":"Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy. 2014. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)."},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3593042"},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.1002\/rob.21918"},{"key":"e_1_3_2_2_22_1","volume-title":"Probabilistic Categorical Adversarial Attack & Adversarial Training. (Oct","author":"He Penghei","year":"2022","unstructured":"Penghei He, Han Xu, Jie Ren, Yuxuan Wan, Zitao Liu, and Jiliang Tang. 2022. Probabilistic Categorical Adversarial Attack & Adversarial Training. (Oct 2022)."},{"key":"e_1_3_2_2_23_1","first-page":"2011","article-title":"Sequential model-based optimization for general algorithm configuration. In Learning and Intelligent Optimization: 5th International Conference","volume":"21","author":"Hutter Frank","year":"2011","unstructured":"Frank Hutter, Holger H Hoos, and Kevin Leyton-Brown. 2011. Sequential model-based optimization for general algorithm configuration. In Learning and Intelligent Optimization: 5th International Conference, LION 5, Rome, Italy, January 17--21, 2011. Selected Papers 5. Springer, 507--523.","journal-title":"LION 5, Rome, Italy"},{"key":"e_1_3_2_2_24_1","volume-title":"International conference on machine learning. PMLR, 2137--2146","author":"Ilyas Andrew","year":"2018","unstructured":"Andrew Ilyas, Logan Engstrom, Anish Athalye, and Jessy Lin. 2018. Black-box adversarial attacks with limited queries and information. In International conference on machine learning. PMLR, 2137--2146."},{"key":"e_1_3_2_2_25_1","volume-title":"The distribution of the flora in the alpine zone. 1. New phytologist","author":"Jaccard Paul","year":"1912","unstructured":"Paul Jaccard. 1912. The distribution of the flora in the alpine zone. 1. New phytologist, Vol. 11, 2 (1912), 37--50."},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i05.6311"},{"key":"e_1_3_2_2_27_1","volume-title":"International Conference on Machine Learning. PMLR, 3183--3191","author":"Kajino Hiroshi","year":"2019","unstructured":"Hiroshi Kajino. 2019. Molecular hypergraph grammar with its application to molecular optimization. In International Conference on Machine Learning. PMLR, 3183--3191."},{"key":"e_1_3_2_2_28_1","volume-title":"Natural language processing: State of the art, current trends and challenges. Multimedia tools and applications","author":"Khurana Diksha","year":"2023","unstructured":"Diksha Khurana, Aditya Koli, Kiran Khatter, and Sukhdev Singh. 2023. Natural language processing: State of the art, current trends and challenges. Multimedia tools and applications, Vol. 82, 3 (2023), 3713--3744."},{"key":"e_1_3_2_2_29_1","volume-title":"Adam: A method for stochastic optimization. arXiv preprint arXiv:1412.6980","author":"Kingma Diederik P","year":"2014","unstructured":"Diederik P Kingma and Jimmy Ba. 2014. Adam: A method for stochastic optimization. arXiv preprint arXiv:1412.6980 (2014)."},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1561\/9781601986290"},{"volume-title":"Artificial intelligence safety and security","author":"Kurakin Alexey","key":"e_1_3_2_2_31_1","unstructured":"Alexey Kurakin, Ian J Goodfellow, and Samy Bengio. 2018. Adversarial examples in the physical world. In Artificial intelligence safety and security. Chapman and Hall\/CRC, 99--112."},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/bth294"},{"key":"e_1_3_2_2_33_1","volume-title":"International Conference on Machine Learning. PMLR, 12478--12497","author":"Lee Deokjae","year":"2022","unstructured":"Deokjae Lee, Seungyong Moon, Junhyeok Lee, and Hyun Oh Song. 2022. Query-efficient and scalable black-box adversarial attacks on discrete sequential data via bayesian optimization. In International Conference on Machine Learning. PMLR, 12478--12497."},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/btl475"},{"key":"e_1_3_2_2_35_1","volume-title":"BertGCN: Transductive Text Classification by Combining GCN and BERT","author":"Lin Yuxiao","year":"2021","unstructured":"Yuxiao Lin, Yuxian Meng, Xiaofei Sun, Qinghong Han, Kun Kuang, Jiwei Li, and Fei Wu. 2021. BertGCN: Transductive Text Classification by Combining GCN and BERT. Cornell University - arXiv,Cornell University - arXiv (May 2021)."},{"key":"e_1_3_2_2_36_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2022.08.026"},{"key":"e_1_3_2_2_37_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-35288-2_38"},{"key":"e_1_3_2_2_38_1","volume-title":"Bayesian interpolation. Neural computation","author":"MacKay David JC","year":"1992","unstructured":"David JC MacKay. 1992. Bayesian interpolation. Neural computation, Vol. 4, 3 (1992), 415--447."},{"key":"e_1_3_2_2_39_1","volume-title":"A strong baseline for query efficient attacks in a black box setting. arXiv preprint arXiv:2109.04775","author":"Maheshwary Rishabh","year":"2021","unstructured":"Rishabh Maheshwary, Saket Maheshwary, and Vikram Pudi. 2021. A strong baseline for query efficient attacks in a black box setting. arXiv preprint arXiv:2109.04775 (2021)."},{"key":"e_1_3_2_2_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICRA.2017.7989380"},{"key":"e_1_3_2_2_41_1","volume-title":"Local latent space bayesian optimization over structured inputs. Advances in neural information processing systems","author":"Maus Natalie","year":"2022","unstructured":"Natalie Maus, Haydn Jones, Juston Moore, Matt J Kusner, John Bradshaw, and Jacob Gardner. 2022. Local latent space bayesian optimization over structured inputs. Advances in neural information processing systems, Vol. 35 (2022), 34505--34518."},{"key":"e_1_3_2_2_42_1","volume-title":"Long short-term memory. Neural computation","author":"Short-Term Memory Long","year":"2010","unstructured":"Long Short-Term Memory. 2010. Long short-term memory. Neural computation, Vol. 9, 8 (2010), 1735--1780."},{"key":"e_1_3_2_2_43_1","volume-title":"On the number of linear regions of deep neural networks. Advances in neural information processing systems","author":"Montufar Guido F","year":"2014","unstructured":"Guido F Montufar, Razvan Pascanu, Kyunghyun Cho, and Yoshua Bengio. 2014. On the number of linear regions of deep neural networks. Advances in neural information processing systems, Vol. 27 (2014)."},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-demos.16"},{"key":"e_1_3_2_2_45_1","volume-title":"BOSS: Bayesian Optimization over String Spaces. Neural Information Processing Systems,Neural Information Processing Systems (Jan","author":"Moss B.","year":"2020","unstructured":"HenryB. Moss, DavidS. Leslie, Daniel Beck, Javier Gonz\u00e1lez, and Paul Rayson. 2020. BOSS: Bayesian Optimization over String Spaces. Neural Information Processing Systems,Neural Information Processing Systems (Jan 2020)."},{"key":"e_1_3_2_2_46_1","first-page":"2035","article-title":"Approximations for binary Gaussian process classification","volume":"9","author":"Nickisch Hannes","year":"2008","unstructured":"Hannes Nickisch and Carl Edward Rasmussen. 2008. Approximations for binary Gaussian process classification. Journal of Machine Learning Research, Vol. 9, Oct (2008), 2035--2078.","journal-title":"Journal of Machine Learning Research"},{"key":"e_1_3_2_2_47_1","volume-title":"Training Knowledge-Based Neural Networks to Recognize Genes in DNA Sequences. Neural Information Processing Systems,Neural Information Processing Systems (Oct","author":"Noordewier Michiel","year":"1990","unstructured":"Michiel Noordewier, GeoffreyG. Towell, and JudeW. Shavlik. 1990. Training Knowledge-Based Neural Networks to Recognize Genes in DNA Sequences. Neural Information Processing Systems,Neural Information Processing Systems (Oct 1990)."},{"key":"e_1_3_2_2_48_1","first-page":"802","article-title":"Improving black-box optimization in VAE latent space using decoder uncertainty","volume":"34","author":"Notin Pascal","year":"2021","unstructured":"Pascal Notin, Jos\u00e9 Miguel Hern\u00e1ndez-Lobato, and Yarin Gal. 2021. Improving black-box optimization in VAE latent space using decoder uncertainty. Advances in Neural Information Processing Systems, Vol. 34 (2021), 802--814.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_2_49_1","unstructured":"Changyong Oh Efstratios Gavves and Max Welling. 2021. Mixed variable Bayesian optimization with frequency modulated kernels. In Uncertainty in Artificial Intelligence. PMLR 950--960."},{"key":"e_1_3_2_2_50_1","doi-asserted-by":"publisher","DOI":"10.3115\/1219840.1219855"},{"key":"e_1_3_2_2_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3449726.3463137"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P19-1103"},{"key":"e_1_3_2_2_54_1","doi-asserted-by":"publisher","DOI":"10.5555\/3546258.3546479"},{"key":"e_1_3_2_2_55_1","unstructured":"David Rios Insua Roi Naveiro V\u00edctor Gallego and Jason Poulos. 2023. Adversarial machine learning: Bayesian perspectives. J. Amer. Statist. Assoc. (2023) 1--12."},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/3623402"},{"key":"e_1_3_2_2_57_1","volume-title":"International Conference on Machine Learning. PMLR, 8276--8285","author":"Ru Binxin","year":"2020","unstructured":"Binxin Ru, Ahsan Alvi, Vu Nguyen, Michael A Osborne, and Stephen Roberts. 2020. Bayesian optimisation over multiple continuous and categorical inputs. In International Conference on Machine Learning. PMLR, 8276--8285."},{"key":"e_1_3_2_2_58_1","volume-title":"Devin Willmott, and J Zico Kolter.","author":"Shukla Satya Narayan","year":"2019","unstructured":"Satya Narayan Shukla, Anit Kumar Sahu, Devin Willmott, and J Zico Kolter. 2019. Black-box adversarial attacks with bayesian optimization. arXiv preprint arXiv:1909.13857 (2019)."},{"key":"e_1_3_2_2_59_1","volume-title":"Protein structure prediction with in-cell photo-crosslinking mass spectrometry and deep learning. Nature Biotechnology","author":"Stahl Kolja","year":"2023","unstructured":"Kolja Stahl, Andrea Graziadei, Therese Dau, Oliver Brock, and Juri Rappsilber. 2023. Protein structure prediction with in-cell photo-crosslinking mass spectrometry and deep learning. Nature Biotechnology (2023), 1--10."},{"key":"e_1_3_2_2_60_1","volume-title":"Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199","author":"Szegedy Christian","year":"2013","unstructured":"Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus. 2013. Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199 (2013)."},{"key":"e_1_3_2_2_61_1","first-page":"11259","article-title":"Sample-efficient optimization in the latent space of deep generative models via weighted retraining","volume":"33","author":"Tripp Austin","year":"2020","unstructured":"Austin Tripp, Erik Daxberger, and Jos\u00e9 Miguel Hern\u00e1ndez-Lobato. 2020. Sample-efficient optimization in the latent space of deep generative models via weighted retraining. Advances in Neural Information Processing Systems, Vol. 33 (2020), 11259--11272.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_2_62_1","volume-title":"Attention is all you need. Advances in neural information processing systems","author":"Vaswani Ashish","year":"2017","unstructured":"Ashish Vaswani, Noam Shazeer, Niki Parmar, Jakob Uszkoreit, Llion Jones, Aidan N Gomez, \u0141ukasz Kaiser, and Illia Polosukhin. 2017. Attention is all you need. Advances in neural information processing systems, Vol. 30 (2017)."},{"key":"e_1_3_2_2_63_1","first-page":"6983","article-title":"Adversarial attacks on graph classifiers via bayesian optimisation","volume":"34","author":"Wan Xingchen","year":"2021","unstructured":"Xingchen Wan, Henry Kenlay, Robin Ru, Arno Blaas, Michael A Osborne, and Xiaowen Dong. 2021. Adversarial attacks on graph classifiers via bayesian optimisation. Advances in Neural Information Processing Systems, Vol. 34 (2021), 6983--6996.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_2_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3394486.3403194"},{"key":"e_1_3_2_2_65_1","doi-asserted-by":"publisher","DOI":"10.1613\/jair.4806"},{"volume-title":"Gaussian processes for machine learning","author":"Williams Christopher KI","key":"e_1_3_2_2_66_1","unstructured":"Christopher KI Williams and Carl Edward Rasmussen. 2006. Gaussian processes for machine learning. Vol. 2. MIT press Cambridge, MA."},{"key":"e_1_3_2_2_67_1","first-page":"1613","article-title":"Greedy attack and gumbel attack: Generating adversarial examples for discrete data","volume":"21","author":"Yang Puyudi","year":"2020","unstructured":"Puyudi Yang, Jianbo Chen, Cho-Jui Hsieh, Jane-Ling Wang, and Michael I Jordan. 2020. Greedy attack and gumbel attack: Generating adversarial examples for discrete data. The Journal of Machine Learning Research, Vol. 21, 1 (2020), 1613--1648.","journal-title":"The Journal of Machine Learning Research"},{"key":"e_1_3_2_2_68_1","volume-title":"Word-level textual adversarial attacking as combinatorial optimization. arXiv preprint arXiv:1910.12196","author":"Zang Yuan","year":"2019","unstructured":"Yuan Zang, Fanchao Qi, Chenghao Yang, Zhiyuan Liu, Meng Zhang, Qun Liu, and Maosong Sun. 2019. Word-level textual adversarial attacking as combinatorial optimization. arXiv preprint arXiv:1910.12196 (2019)."},{"key":"e_1_3_2_2_69_1","volume-title":"Character-level convolutional networks for text classification. Advances in neural information processing systems","author":"Zhang Xiang","year":"2015","unstructured":"Xiang Zhang, Junbo Zhao, and Yann LeCun. 2015. Character-level convolutional networks for text classification. Advances in neural information processing systems, Vol. 28 (2015)."},{"key":"e_1_3_2_2_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPWRS.2022.3175252"}],"event":{"name":"KDD '25: The 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data"],"location":"Toronto ON Canada","acronym":"KDD '25"},"container-title":["Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.1"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3690624.3709265","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3690624.3709265","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,16]],"date-time":"2025-08-16T15:43:04Z","timestamp":1755358984000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3690624.3709265"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7,20]]},"references-count":70,"alternative-id":["10.1145\/3690624.3709265","10.1145\/3690624"],"URL":"https:\/\/doi.org\/10.1145\/3690624.3709265","relation":{},"subject":[],"published":{"date-parts":[[2025,7,20]]},"assertion":[{"value":"2025-07-20","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}