MPAT: Building Robust Deep Neural Networks against Textual Adversarial Attacks

arXiv:2402.18792v1 Announce Type: new
Abstract: Deep neural networks have been proven to be vulnerable to adversarial examples and various methods have been proposed to defend against adversarial attacks for natural language processing tasks. However, previous defense methods have limitations in maintaining effective defense while ensuring the performance of the original task. In this paper, we propose a malicious perturbation based adversarial training method (MPAT) for building robust deep neural networks against textual adversarial attacks. Specifically, we construct a multi-level malicious …

abstract adversarial adversarial attacks adversarial examples arxiv attacks building cs.cl cs.cr cs.lg defense examples language language processing limitations natural natural language natural language processing networks neural networks performance processing robust tasks textual type vulnerable