Macquarie University
Browse

Detecting adversarial examples of text

Download (1.32 MB)
thesis
posted on 2022-10-21, 04:19 authored by Na Liu

Although deep neural networks have achieved state-of-the-art performance in various tasks, a lot of their decisions are non-interpretable because high dimensional feature vectors cause deep neural net functions to be extremely difficult to visualize, widely used gradient descent is an approximate solution, not an analytical solution, etc. Therefore, there are multiple counter-intuitive and intriguing phenomena in deep classifiers, such as adversarial examples.

In natural language and image classification tasks, research on adversarial examples divides into two major categories: generating adversarial examples to attack neural networks and defence against adversaries to protect neural networks. Approaches to adversarial attacks for text classification tasks have boomed in the last three years using character-level, word-level, phrase-level, and sentence-level perturbations. However, as far as we know, textual adversarial defence, especially detecting textual adversarial instances from their normal and noise counterparts, does not have an effective method so far. In this thesis, we apply ensemble learning and sentence representations from different transformer models based on the comprehension of the graph of deep neural nets and the reason for adversarial examples to fill this gap. Our technique obtains state-of-the-art results on character-level and word-level attacks on both IMDB and MultiNLI datasets. For future research, we will publish our code.

History

Table of Contents

1 Introduction -- 2 Background -- 3 Literature Review -- 4 Approach -- 5 Experiments -- 6 Conclusions -- A Appendix

Notes

A thesis submitted to Macquarie University for the degree of Master of Research

Awarding Institution

Macquarie University

Degree Type

Thesis MRes

Degree

Thesis MRes, Macquarie University, Department of Computing, 2021

Department, Centre or School

Department of Computing

Year of Award

2021

Principal Supervisor

Mark Dras

Rights

Copyright: The Author Copyright disclaimer: https://www.mq.edu.au/copyright-disclaimer

Language

English

Extent

69 pages

Usage metrics

    Macquarie University Theses

    Exports

    RefWorks
    BibTeX
    Ref. manager
    Endnote
    DataCite
    NLM
    DC