Character-level White-Box Adversarial Attacks against Transformers via Attachable Subwords Substitution

Aiwei Liu, Honghai Yu, Xuming Hu +5

We propose the first character-level white-box adversarial attack method against transformer models. The intuition of our method comes from the observation that words are split int…