Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Text

no code implementations • 25 May 2023 • Ashim Gupta, Carter Wood Blum, Temma Choji, Yingjie Fei, Shalin Shah, Alakananda Vempala, Vivek Srikumar

For example, on sentiment classification using the SST-2 dataset, our method improves the adversarial accuracy over the best existing defense approach by more than 4% with a smaller decrease in task accuracy (0. 5% vs 2. 5%).

Adversarial Robustness Classification +4