Before revision: We consider an adversary looking to steal or attack a black-box machine translation (MT) system , either for financial gain or to exploit model errors.
After revision: We consider an adversary looking to steal or attack a black-box NLP systems , either for financial gain or to exploit model errors.