Background Text classification models have become increasingly prevalent in cybersecurity applications, but remain susceptible to adversarial examples (e.g., carefully crafted sentences with human-unrecognizable changes to the inputs, that are misclassified). Adversarial attacks provide profound insights into the classifiers’ vulnerabilities,...