Adversarial Training with Fast Gradient Projection Method against Synonym Substitution based Text Attacks

Xiaosen Wang, Yichen Yang, Yihe Deng +1

Adversarial training is the most empirically successful approach in improving the robustness of deep neural networks for image classification.For text classification, however, exis…