Grey-box Adversarial Attack And Defence For Sentiment Classification

Ying Xu, Xu Zhong, Antonio Jimeno Yepes, Jey Han Lau


Abstract
We introduce a grey-box adversarial attack and defence framework for sentiment classification. We address the issues of differentiability, label preservation and input reconstruction for adversarial attack and defence in one unified framework. Our results show that once trained, the attacking model is capable of generating high-quality adversarial examples substantially faster (one order of magnitude less in time) than state-of-the-art attacking methods. These examples also preserve the original sentiment according to human evaluation. Additionally, our framework produces an improved classifier that is robust in defending against multiple adversarial attacking methods. Code is available at: https://github.com/ibm-aur-nlp/adv-def-text-dist.
Anthology ID:
2021.naacl-main.321
Volume:
Proceedings of the 2021 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies
Month:
June
Year:
2021
Address:
Online
Venue:
NAACL
SIG:
Publisher:
Association for Computational Linguistics
Note:
Pages:
4078–4087
Language:
URL:
https://aclanthology.org/2021.naacl-main.321
DOI:
10.18653/v1/2021.naacl-main.321
Bibkey:
Cite (ACL):
Ying Xu, Xu Zhong, Antonio Jimeno Yepes, and Jey Han Lau. 2021. Grey-box Adversarial Attack And Defence For Sentiment Classification. In Proceedings of the 2021 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, pages 4078–4087, Online. Association for Computational Linguistics.
Cite (Informal):
Grey-box Adversarial Attack And Defence For Sentiment Classification (Xu et al., NAACL 2021)
Copy Citation:
PDF:
https://preview.aclanthology.org/update-css-js/2021.naacl-main.321.pdf
Optional supplementary data:
 2021.naacl-main.321.OptionalSupplementaryData.zip