OASIS: Optimizing Attacker Sequences for Hard-Label Black-Box Text Attacks

Qian Chen, Shiliang Xiao, Yuzhi Liang

Different attack methods follow different search trajectories, they succeed on different subsets of samples, whereas existing hard-label black-box text attacks mainly focus on impr…