TRAttack”:" Text Rewriting Attack Against Text Retrieval
Junshuai Song, Jiangshan Zhang, Jifeng Zhu, Mengyun Tang, Yong Yang · 2022
Text retrieval has been widely-used in many online applications to help users find relevant information from a text collection.In this paper, we study a new attack scenario against text retrieval to evaluate its robustness to adversarial attacks under the blackbox setting, in which attackers want their own texts to always get high relevance scores with different users' input queries and thus be retrieved frequently and can receive large amounts of impressions for profits.Considering that most current attack methods only simply follow certain fixed optimization rules, we propose a novel text rewriting attack (TRAttack) method with learning ability from the multi-armed bandit mechanism.Extensive experiments conducted on simulated victim environments demonstrate that TRAttack can yield texts that have higher relevance scores with different given users' queries than those generated by current state-of-the-art attack methods.We also evaluate TRAttack on Tencent Cloud's and Baidu Cloud's commerciallyavailable text retrieval APIs, and the rewritten adversarial texts successfully get high relevance scores with different user queries, which shows the practical potential of our method and the risk of text retrieval systems. User Input QueriesOri. Adv.怎么锻炼逻辑思维能力？ How to exercise logical thinking skills?✓ ✓ 想提升理解能力和逻辑能力？ Want to enhance comprehension and logical skills?× ✓ 填字游戏能提高逻辑思维吗？ Can crosswords enhance logical thinking?× ✓ Ori.: 怎么锻炼逻辑思维能力, 让自己更加有 效率的学习和工作？ How to exercise logical thinking skills to study