Such modifications might flip words either to a different word in the vocabulary or, more often, to the out-of-vocabulary token UNK .
adversarial edits can degrade a word-level model by transforming the informative words to UNK .