aiqbench analysis
This research introduces TSCheater, a novel adversarial text generation framework specifically designed for the Tibetan script by leveraging visual similarity between syllables to maintain semantic integrity during attacks. By establishing the first robustness evaluation benchmark (AdvTS) and demonstrating transferability to other abugidas like Devanagari, the study highlights critical vulnerabilities in low-resource language models that are often overlooked in favor of English-centric security research.
TSCheater: Generating High-Quality Tibetan Adversarial Texts via Visual Similarity
arXiv:2412.02371v4 Announce Type: replace Abstract: Language models based on deep neural networks are vulnerable to textual adversarial attacks. While rich-resource languages like English are receiving focused attention, Tibetan, a cross-border language, is gradually being studied due to its abundant ancient literature and critical language strategy. Currently, there are several Tibetan adversarial text generation methods, but they do not fully consider the textual features of Tibetan script and overestimate the quality of generated adversarial texts. To address this issue, we propose a novel Tibetan adversarial text generation method called TSCheater, which considers the characteristic of Tibetan encoding and the feature that visually similar syllables have similar semantics. This method can also be transferred to other abugidas, such as Devanagari script. We utilize a self-constructed Tibetan syllable visual similarity database called TSVSDB to generate substitution candidates and adopt a greedy algorithm-based scoring mechanism to determine substitution order. After that, we conduct the method on eight victim language models. Experimentally, TSCheater outperforms existing methods in attack effectiveness, perturbation magnitude, semantic similarity, visual similarity, and human acceptance. Finally, we construct the first Tibetan adversarial robustness evaluation benchmark called AdvTS, which is generated by existing methods and proofread by humans.
Abstract:Language models based on deep neural networks are vulnerable to textual adversarial attacks. While rich-resource languages like English are receiving focused attention, Tibetan, a cross-border language, is gradually being studied due to its abundant ancient literature and critical language strategy. Currently, there are several Tibetan adversarial text generation methods, but they do not fully consider the textual features of Tibetan script and overestimate the quality of generated adversarial texts. To address this issue, we propose a novel Tibetan adversarial text generation method called TSCheater, which considers the characteristic of Tibetan encoding and the feature that visually similar syllables have similar semantics. This method can also be transferred to other abugidas, such as Devanagari script. We utilize a self-constructed Tibetan syllable visual similarity database called TSVSDB to generate substitution candidates and adopt a greedy algorithm-based scoring mechanism to determine substitution order. After that, we conduct the method on eight victim language models. Experimentally, TSCheater outperforms existing methods in attack effectiveness, perturbation magnitude, semantic similarity, visual similarity, and human acceptance. Finally, we construct the first Tibetan adversarial robustness evaluation benchmark called AdvTS, which is generated by existing methods and proofread by humans.
Computation and Language (cs.CL); Cryptography and Security (cs.CR)
arXiv:2412.02371 [cs.CL]
(or arXiv:2412.02371v4 [cs.CL] for this version)
https://doi.org/10.48550/arXiv.2412.02371 Focus to learn more arXiv-issued DOI via DataCite
https://doi.org/10.1109/ICASSP49660.2025.10889732 Focus to learn more DOI(s) linking to related resources
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 297 words
Related coverage
Dynamic Defense Profiling Enables Cognitive Jailbreak of Text-to-Image Models
arXiv · Jul 21, 2026
Mage-Flow: An Efficient Native-Resolution Foundation Model for Image Generation and Editing
arXiv · Jul 22, 2026

Complete Guide to Thinking Machines Inkling
Analytics Vidhya · Jul 20, 2026

Helix: The internal tool powering our Shopify app's native migration
Shopify Engineering Blog · Sep 21, 2026