Before revision:  To tackle this problem, we design a general sentence rewriting sampler ( SRS)framework, which can conditionally generate meaningful sentences. Then we customize SRS to attack text classification models. Our method can effectively rewrite the original sentence in multiple ways while maintaining high semantic similarity and good sentence quality. Experimental results show that many of these rewritten sentences are misclassified by the classifier.
After revision:  To tackle this problem, we design a general sentence rewriting sampler ( ASRS), which rewrites the whole sentence to generate more similar and higher-quality adversarial examples.