Beyond Hard Samples: Robust and Effective Grammatical Error Correction with Cycle Self-Augmenting
원문 초록
Recent studies have revealed that grammatical error correction methods in the sequence-to-sequence paradigm are vulnerable to adversarial attack, and simply utilizing adversarial examples in the pre-training or post-training process can significantly enhance the robustness of GEC models to certain types of attack without suffering too much performance loss on clean data. In this paper, we further conduct a thorough robustness evaluation of cutting-edge GEC methods for four different types of adversarial attacks and propose a simple yet very effective Cycle Self-Augmenting (CSA) method accordingly. By leveraging the augmenting data from the GEC models themselves in the post-training process and introducing regularization data for cycle training, our proposed method can effectively improve the model robustness of well-trained GEC models with only a few more training epochs as an extra cost. More concretely, further training on the regularization data can prevent the GEC models from over-fitting on easy-to-learn samples and thus can improve the generalization capability and robustness towards unseen data (adversarial noise/samples). Meanwhile, the self-augmented data can provide more high-quality pseudo pairs to improve model performance on the original testing data. Experiments on four benchmark datasets and seven strong models indicate that our proposed training method can significantly enhance the robustness of four types of attacks without using purposely built adversarial examples in training. Evaluation results on clean data further confirm that our proposed CSA method significantly improves the performance of four baselines and yields nearly comparable results with other state-of-the-art models. Our code is available at https://github.com/ZetangForward/CSA-GEC.
함께 살펴볼 논문
공통 태그를 근거로 연결했습니다. 실제 인용 관계나 논문의 우수성을 뜻하지 않습니다.
VIP: Visual Information Protection through Adversarial Attacks on Vision-Language Models
Identifying the Smallest Adversarial Load Perturbations that Render DC-OPF Infeasible
ScoreAdv: Score-based Targeted Generation of Natural Adversarial Examples via Diffusion Models
Robustness of Misinformation Classification Systems to Adversarial Examples Through BeamAttack
Adversarial Attacks and Detection in Visual Place Recognition for Safer Robot Navigation
Enhancing Adversarial Robustness with Conformal Prediction: A Framework for Guaranteed Model Reliability
토론
이 논문과 연결된 포럼 글이 아직 없습니다.