Before revision:  TextAttack builds attacks from four components: a search method, goal function, transformation, and a set of constraints . Researchers can use these components to easily assemble new attacks . Individual components can be isolated and compared for easier ablation studies. TextAttack currently supports attacks on models trained for text classification and entailment across a variety of datasets.
After revision:  TextAttack builds attacks from four components: a search method, goal function, transformation, and a set of constraints , a transformation, and a search method. TextAttack's modular design enables researchers to easily construct attacks from combinations of novel and existing components. TextAttack provides implementations of 16 adversarial attacks from the literature and supports a variety of datasets.