Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    1 vulnerability by Google Translate, Bing Translator, Systran Translate

    AVID-2023-V006

    Vulnerability from avid – Published: 2023-03-31 – Updated: 2023-03-31 ATLAS Case Study
    Summary
    Machine translation services (such as Google Translate, Bing Translator, and Systran Translate) provide public-facing UIs and APIs. A research group at UC Berkeley utilized these public endpoints to create a replicated model with near-production state-of-the-art translation quality. Beyond demonstrating that IP can be functionally stolen from a black-box system, they used the replicated model to successfully transfer adversarial examples to the real production services. These adversarial inputs successfully cause targeted word flips, vulgar outputs, and dropped sentences on Google Translate and Systran Translate websites.
    Risk domain
    Security
    SEP view
    S0301: Information Leak, S0502: Model theft, S0403: Adversarial Example
    Lifecycle
    L02: Data Understanding, L04: Model Development, L06: Deployment
    Organisations
    Google Translate, Bing Translator, Systran Translate (deployer)
    Affected artifacts
    References
    URL Label
    https://atlas.mitre.org/studies/AML.CS0005 Attack on Machine Translation Service - Google Translate, Bing Translator, and Systran Translate
    https://arxiv.org/abs/2004.15015 Wallace, Eric, et al. "Imitation Attacks and Defenses for Black-box Machine Translation Systems" EMNLP 2020
    https://www.ericswallace.com/imitation Project Page, "Imitation Attacks and Defenses for Black-box Machine Translation Systems"
    https://thehill.com/policy/international/asia-pac… Google under fire for mistranslating Chinese amid Hong Kong protests
    To clipboard 

    {
  "affects": {
    "artifacts": [
      {
        "name": "Google Translate, Bing Translator, Systran Translate",
        "type": "System"
      }
    ],
    "deployer": [
      "Google Translate, Bing Translator, Systran Translate"
    ],
    "developer": []
  },
  "credit": null,
  "data_type": "AVID",
  "data_version": "0.2",
  "description": {
    "lang": "eng",
    "value": "Machine translation services (such as Google Translate, Bing Translator, and Systran Translate) provide public-facing UIs and APIs.\nA research group at UC Berkeley utilized these public endpoints to create a replicated model with near-production state-of-the-art translation quality.\nBeyond demonstrating that IP can be functionally stolen from a black-box system, they used the replicated model to successfully transfer adversarial examples to the real production services.\nThese adversarial inputs successfully cause targeted word flips, vulgar outputs, and dropped sentences on Google Translate and Systran Translate websites."
  },
  "impact": {
    "avid": {
      "lifecycle_view": [
        "L02: Data Understanding",
        "L04: Model Development",
        "L06: Deployment"
      ],
      "risk_domain": [
        "Security"
      ],
      "sep_view": [
        "S0301: Information Leak",
        "S0502: Model theft",
        "S0403: Adversarial Example"
      ],
      "taxonomy_version": "0.2"
    }
  },
  "last_modified_date": "2023-03-31",
  "metadata": {
    "vuln_id": "AVID-2023-V006"
  },
  "problemtype": {
    "classof": "ATLAS Case Study",
    "description": {
      "lang": "eng",
      "value": "Attack on Machine Translation Service - Google Translate, Bing Translator, and Systran Translate"
    },
    "type": "Advisory"
  },
  "published_date": "2023-03-31",
  "references": [
    {
      "label": "Attack on Machine Translation Service - Google Translate, Bing Translator, and Systran Translate",
      "type": "source",
      "url": "https://atlas.mitre.org/studies/AML.CS0005"
    },
    {
      "label": "Wallace, Eric, et al. \"Imitation Attacks and Defenses for Black-box Machine Translation Systems\" EMNLP 2020",
      "type": "source",
      "url": "https://arxiv.org/abs/2004.15015"
    },
    {
      "label": "Project Page, \"Imitation Attacks and Defenses for Black-box Machine Translation Systems\"",
      "type": "source",
      "url": "https://www.ericswallace.com/imitation"
    },
    {
      "label": "Google under fire for mistranslating Chinese amid Hong Kong protests",
      "type": "source",
      "url": "https://thehill.com/policy/international/asia-pacific/449164-google-under-fire-for-mistranslating-chinese-amid-hong-kong/"
    }
  ],
  "reports": null
}