Achieving Model Robustness through Discrete Adversarial Training

Maor Ivgi, Jonathan Berant

Discrete adversarial attacks are symbolic perturbations to a language input that preserve the output label but lead to a prediction error. While such attacks have been extensively…