Abstract: In the hard-label black-box setting, existing attack methods randomly select words for perturbation, generating invalid word replacement operations, resulting in low attack success rate.

Abstract: While the development of e-commerce brings convenience to consumers, a large quantity of products and information increase the difficulty of making purchase decisions. This study constructs ...