D. Jin, Z. Jin, J. T. Zhou, and P. Szolovits, “Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment”, AAAI, vol. 34, no. 05, pp. 8018-8025, Apr. 2020.