As opposed to adversarial examples in computer vision, which are computed on continuous data and can thus easily be imperceptible if desired, adversarial attacks in NLP entail the necessity to perform discrete and perceptible changes to the data.
attack methods for computer vision such as the Fast Gradient Sign Method (FGSM) ) cannot be directly applied to NLP.