Exploiting Class Probabilities for Black-box Sentence-level Attacks

Open in new window