Yihe Deng

Fast Gradient Projection Method for Text Adversary Generation and Adversarial Training

2020 · arXiv (Cornell University)

Adversarial training is the most empirically successful approach in improving the robustness of deep neural networks for image classification.For text classification, however, existing synonym substitution based adversarial attacks are effective but not efficient to be …