Adversarial Training with Fast Gradient Projection Method against Synonym Substitution Based Text Attacks
Adversarial Training with Fast Gradient Projection Method against Synonym Substitution Based Text Attacks
Adversarial training is the most empirically successful approach in improving the robustness of deep neural networks for image classification. For text classification, however, existing synonym substitution based adversarial attacks are effective but not very efficient to be incorporated into practical text adversarial training. Gradient-based attacks, which are very efficient for …