Jin D, Jin Z, Zhou JT, Szolovits P. Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment. AAAI [Internet]. 2020Apr.3 [cited 2024Nov.21];34(05):8018-25. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/6311