For sentiment classification, we systematically study the effect of character-level adversarial attacks on two architectures and four different input formats.  We also consider the task of paraphrase detection. 
 Question: What end tasks do they evaluate on?
Sentiment analysis and paraphrase detection under adversarial attacks