{"id":"W4376615930","doi":"10.1002/smr.2571","title":"CodeBERT‐Attack: Adversarial attack against source code deep learning models via pre‐trained model","year":2023,"lang":"en","type":"article","venue":"Journal of Software Evolution and Process","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":17,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Alberta","funders":"JST-Mirai Program; Japan Society for the Promotion of Science; Natural Sciences and Engineering Research Council of Canada; National Natural Science Foundation of China; Canadian Institute for Advanced Research","keywords":"Computer science; Source code; Adversarial system; Code (set theory); Artificial intelligence; Machine learning; Masking (illustration); Vulnerability (computing); Deep learning; Inference; Programming language; Computer security","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.001257665,0.0003004503,0.000453655,0.0004240083,0.0005706848,0.0001903934,0.0008867464,0.0002159814,0.000006967273],"category_scores_gemma":[0.0008384644,0.0002814728,0.0001606842,0.0008985316,0.0001104022,0.002088071,0.0003141814,0.0009976791,0.00001344184],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001649571,"about_ca_system_score_gemma":0.0003217638,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000006278487,"about_ca_topic_score_gemma":0.000007863759,"domain_scores_codex":[0.9972867,0.00020142,0.0007143599,0.0004348121,0.0008443297,0.00051833],"domain_scores_gemma":[0.9977783,0.0003141029,0.0007692155,0.0002481743,0.0006082398,0.0002819564],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0001185267,0.00003293742,0.00103742,0.0000859562,0.00004760862,0.00002280487,0.003720698,0.967244,0.00004730566,0.0002515973,0.0003352433,0.02705594],"study_design_scores_gemma":[0.001358603,0.0001357487,0.0004518736,0.0001279626,0.00003417346,0.0001044277,0.0002371403,0.9927494,0.00001371855,0.003836732,0.0006329017,0.0003173261],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.05766204,0.0003281857,0.9403865,0.0004960541,0.0004761752,0.0001403573,0.000002416733,0.0004049251,0.0001033999],"genre_scores_gemma":[0.949616,0.0001114577,0.04888806,0.0001879468,0.0003527903,0.000006326677,0.000007586342,0.00004407851,0.0007857376],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.891954,"threshold_uncertainty_score":0.9999638,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02888597047409828,"score_gpt":0.289055668582603,"score_spread":0.2601696981085047,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}