Before revision:  In this paper, we develop adversarial attacks that appear closer to natural English phrases and yet confuse classification systems when added to benign inputs.
After revision:  We develop adversarial attacks that appear closer to natural English phrases and yet confuse classification systems when added to benign inputs.