Towards Effective Black-Box Adversarial Attacks on Deep Code Models via Structural and Identifier Perturbations
Deep code models (DCMs) are increasingly embedded in code intelligence tasks. However, their robustness under adversarial attacks remains insufficiently understood. Prior black-box attacks mainly rely on identifier- only substitutions or structural edits transferred from reference samples, yielding perturbation spaces...