Towards Effective Black-Box Adversarial Attacks on Deep Code Models via Structural and Identifier Perturbations
Strike is introduced, an input-conditioned black-box adversarial robustness-testing framework that constructs and searches a hierarchical perturbation space for each input and refines the best structural variant through similarity-guided identifier substitutions drawn from dynamically constructed candidate pools.