Dev Seth, Rickard Stureborg, Danish Pruthi +1
Many adversarial attacks in NLP perturb inputs to produce visually similar strings ('ergo' → 'I^µrgo') which are legible to humans but degrade model performance. Altho…