Learning the Legibility of Visual Text Perturbations

Dev Seth, Rickard Stureborg, Danish Pruthi +1

Many adversarial attacks in NLP perturb inputs to produce visually similar strings ('ergo' $\to$ '$\epsilon$rgo') which are legible to humans but degrade model performance. Althou…