@inproceedings{wang-etal-2020-cat,
    title = "{CAT}-Gen: Improving Robustness in {NLP} Models via Controlled Adversarial Text Generation",
    author = "Wang, Tianlu  and
      Wang, Xuezhi  and
      Qin, Yao  and
      Packer, Ben  and
      Li, Kang  and
      Chen, Jilin  and
      Beutel, Alex  and
      Chi, Ed",
    booktitle = "Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing (EMNLP)",
    month = nov,
    year = "2020",
    address = "Online",
    publisher = "Association for Computational Linguistics",
    url = "https://www.aclweb.org/anthology/2020.emnlp-main.417",
    doi = "10.18653/v1/2020.emnlp-main.417",
    pages = "5141--5146",
    abstract = "NLP models are shown to suffer from robustness issues, i.e., a model{'}s prediction can be easily changed under small perturbations to the input. In this work, we present a Controlled Adversarial Text Generation (CAT-Gen) model that, given an input text, generates adversarial texts through controllable attributes that are known to be invariant to task labels. For example, in order to attack a model for sentiment classification over product reviews, we can use the product categories as the controllable attribute which would not change the sentiment of the reviews. Experiments on real-world NLP datasets demonstrate that our method can generate more diverse and fluent adversarial texts, compared to many existing adversarial text generation approaches. We further use our generated adversarial examples to improve models through adversarial training, and we demonstrate that our generated attacks are more robust against model re-training and different model architectures.",
}