Adversarial Training Methods for Semi-Supervised Text Classification
Not on the map. Why?
Abstract (arXiv)
Adversarial training provides a means of regularizing supervised learning algorithms while virtual adversarial training is able to extend supervised learning algorithms to the semi-supervised setting. However, both methods require making small perturbations to numerous entries of the input vector, which is inappropriate for sparse high-dimensional inputs such as one-hot word representations. We extend adversarial and virtual adversarial training to the text domain by applying perturbations to the word embeddings in a recurrent neural network rather than to the original input itself. The proposed method achieves state of the art results on multiple benchmark semi-supervised and purely supervised tasks. We provide visualizations and analysis showing that the learned word embeddings have improved in quality and that while training, the model is less prone to overfitting. Code is available at https://github.com/tensorflow/models/tree/master/research/adversarial_text.
Key facts. Cited by 280 papers in the map (data through 14 Oct 2026). First posted on arXiv 25 May 2016.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2018: 1; 2019: 1; 2020: 0; 2021: 86; 2022: 65; 2023: 56; 2024: 35; 2025: 25; 2026: 11.
280 papers.
Sort:
By area:
- 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 469
- 2021A Survey on Deep Semi-supervised Learningcited by 251
- 2022Is GPT-3 a Good Data Annotator?cited by 208
- 2022Generating Training Data with Language Models: Towards Zero-Shot Language Understandingcited by 199
- 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLMcited by 192
- 2021Noisy Channel Language Model Prompting for Few-Shot Text Classificationcited by 165
- 2021Differentiable Prompt Makes Pre-trained Language Models Better Few-shot Learnerscited by 115
- 2021A Survey on Data Augmentation for Text Classificationcited by 111
- 2021Measure and Improve Robustness in NLP Models: A Surveycited by 107
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2021Semantic Communications: Principles and Challengescited by 91
- 2024Enhancing Noise Robustness of Retrieval-Augmented Language Models with Adaptive Adversarial Trainingcited by 89
38 more
- 2021Towards Improving Adversarial Training of NLP Modelscited by 79
- 2021Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimizationcited by 76
- 2021RETRIEVE: Coreset Selection for Efficient and Robust Semi-Supervised Learningcited by 74
- 2021Towards Robustness Against Natural Language Word Substitutionscited by 69
- 2024Building Guardrails for Large Language Modelscited by 65
- 2023Black Box Adversarial Prompting for Foundation Modelscited by 62
- 2023Fourier-DeepONet: Fourier-enhanced deep operator networks for full waveform inversion with improved accuracy, generalizability, and robustnesscited by 60
- 2021Certified Robustness to Text Adversarial Attacks by Randomized [MASK]cited by 57
- 2022Debiased Contrastive Learning of Unsupervised Sentence Representationscited by 56
- 2021On Guaranteed Optimal Robust Explanations for NLP Modelscited by 54
- 2021CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understandingcited by 50
- 2021How Should Pre-Trained Language Models Be Fine-Tuned Towards Adversarial Robustness?cited by 49
- 2022e-CARE: a New Dataset for Exploring Explainable Causal Reasoningcited by 47
- 2021Distantly-Supervised Named Entity Recognition with Noise-Robust Learning and Language Model Augmented Self-Trainingcited by 41
- 2022Detect Rumors in Microblog Posts for Low-Resource Domains via Adversarial Contrastive Learningcited by 41
- 2023On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codexcited by 41
- 2021Multi-view Subword Regularizationcited by 40
- 2021Improved Text Classification via Contrastive Adversarial Trainingcited by 38
- 2022Tuning Language Models as Training Data Generators for Augmentation-Enhanced Few-Shot Learningcited by 36
- 2021Defending Against Backdoor Attacks in Natural Language Generationcited by 33
- 2023Dipping PLMs Sauce: Bridging Structure and Text for Effective Knowledge Graph Completion via Conditional Soft Promptingcited by 33
- 2023Defending Pre-trained Language Models as Few-shot Learners against Backdoor Attackscited by 33
- 2023Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Informationcited by 33
- 2021HiddenCut: Simple Data Augmentation for Natural Language Understanding with Better Generalizationcited by 32
- 2021More but Correct: Generating Diversified and Entity-revised Medical Responsecited by 31
- 2021Enhancing Knowledge Tracing via Adversarial Trainingcited by 31
- 2024A Survey on Data Augmentation in Large Model Eracited by 31
- 2023Adversarial Illusions in Multi-Modal Embeddingscited by 29
- 2021The Rich Get Richer: Disparate Impact of Semi-Supervised Learningcited by 28
- 2021Bridge the Gap Between CV and NLP! A Gradient-based Textual Adversarial Attack Frameworkcited by 28
- 2021MATE-KD: Masked Adversarial TExt, a Companion to Knowledge Distillationcited by 27
- 2021Learn to Resolve Conversational Dependency: A Consistency Training Framework for Conversational Question Answeringcited by 27
- 2022Faithfulness in Natural Language Generation: A Systematic Survey of Analysis, Evaluation and Optimization Methodscited by 27
- 2022SEAT: Stable and Explainable Attentioncited by 25
- 2021Data Augmentation in Natural Language Processing: A Novel Text Generation Approach for Long and Short Text Classifierscited by 24
- 2022Certified Robustness Against Natural Language Attacks by Causal Interventioncited by 24
- 2024Avoiding Copyright Infringement via Large Language Model Unlearningcited by 24
- 2022A Survey of Adversarial Defences and Robustness in NLPcited by 23
50 most cited of 280 All 280 (JSON)
- 2026Isotropic Embedding Perturbations for Robust Vision Language Encoders9 Sep 2026
- 2026Certified Mechanistic Interpretability: Lifting Single-Input Findings to Bounded Neighbourhoods17 Aug 2026
- 2026Robust Context-Aware Detection of Malicious Instructions in Text5 Aug 2026
- 2026Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoning24 Jun 2026
- 2026Small Data, Big Noise: Adversarial Training for Robust Parameter-Efficient Fine-Tuning9 Jun 2026
- 2026AutoTail-BSFGM: Class-Balance-Aware Fine-Tuning for Chinese Scholarly Text Classification2 Jun 2026
- 2026SafeLM: Unified Privacy-Aware Optimization for Trustworthy Federated Large Language Models17 Apr 2026
- 2026OneSearch-V2: The Latent Reasoning Enhanced Self-distillation Generative Search Framework25 Mar 2026
- 2026Semi-Supervised Learning with Balanced Deep Representation Distributions22 Mar 2026
- 2026MEDNA-DFM: A Dual-View FiLM-MoE Model for Explainable DNA Methylation Prediction26 Feb 2026
- 2026Cross-Modal Robustness Transfer (CMRT): Training Robust Speech Translation Models Using Adversarial Text12 Feb 2026
- 2025RobustMask: Certified Robustness against Adversarial Neural Ranking Attack via Randomized Masking29 Dec 2025
38 more
- 2025Quantifying Return on Security Controls in LLM Systems17 Dec 2025
- 2025RRPO: Robust Reward Policy Optimization for LLM-based Emotional TTS4 Dec 2025
- 2025On the Utility of Foundation Models for Fast MRI: Vision-Language-Guided Image Reconstruction24 Nov 2025
- 2025Stability and Generalization of Adversarial Diffusion Training23 Sep 2025
- 2025RanAT4BIE: Random Adversarial Training for Biomedical Information Extraction14 Sep 2025
- 2025Abex-rat: Synergizing Abstractive Augmentation and Adversarial Training for Classification of Occupational Accident Reports2 Sep 2025
- 2025Unifying Adversarial Perturbation for Graph Neural Networks30 Aug 2025
- 2025CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection19 Aug 2025
- 2025Guided Perturbation Sensitivity (GPS): Detecting Adversarial Text via Embedding Stability and Word Importance6 Aug 2025
- 2025DINA: A Dual Defense Framework Against Internal Noise and External Attacks in Natural Language Processing4 Aug 2025
- 2025Enhancement of Quantum Semi-Supervised Learning via Improved Laplacian and Poisson Methods4 Aug 2025
- 2025ROBAD: Robust Adversary-aware Local-Global Attended Bad Actor Detection Sequential Model20 Jul 2025
- 2025Robustness in Both Domains: CLIP Needs a Robust Text Encoder3 Jun 2025
- 2025Beyond Single-Point Judgment: Distribution Alignment for LLM-as-a-Judge18 May 2025
- 2025Dynamic Domain Information Modulation Algorithm for Multi-domain Sentiment Analysis10 May 2025
- 2025Robustness in AI-Generated Detection: Enhancing Resistance to Adversarial Attacks6 May 2025
- 2025EmoGRACE: Aspect-based emotion analysis for social media data19 Mar 2025
- 2025Towards properties of adversarial image perturbations18 Mar 2025
- 2025An Information-theoretic Multi-task Representation Learning Framework for Natural Language Understanding6 Mar 2025
- 2025CGMatch: A Different Perspective of Semi-supervised Learning4 Mar 2025
- 2025A Similarity Paradigm Through Textual Regularization Without Forgetting20 Feb 2025
- 2025RAMer: Reconstruction-based Adversarial Model for Multi-party Multi-modal Multi-label Emotion Recognition9 Feb 2025
- 2025Dynamic Noise Preference Optimization: Self-Improvement of Large Language Models with Self-Synthetic Data8 Feb 2025
- 2025Enhancing Generalization in Chain of Thought Reasoning for Smaller Models16 Jan 2025
- 2024Sonar-based Deep Learning in Underwater Robotics: Overview, Robustness and Challenges16 Dec 2024
- 2024Segment-Level Diffusion: A Framework for Controllable Long-Form Generation with Diffusion Language Models15 Dec 2024
- 2024Structural Entropy Guided Probabilistic Coding12 Dec 2024
- 2024CoVLM: Leveraging Consensus from Vision-Language Models for Semi-supervised Multi-modal Fake News Detection6 Oct 2024
- 2024Auto-GDA: Automatic Domain Adaptation for Efficient Grounding Verification in Retrieval-Augmented Generation4 Oct 2024
- 2024Showing Many Labels in Multi-label Classification Models: An Empirical Study of Adversarial Examples26 Sep 2024
- 2024Advancing Video Quality Assessment for AIGC23 Sep 2024
- 2024Improving Factuality in Large Language Models via Decoding-Time Hallucinatory and Truthful Comparators22 Aug 2024
- 2024CERT-ED: Certifiably Robust Text Classification for Edit Distance1 Aug 2024
- 2024A Guide To Effectively Leveraging LLMs for Low-Resource Text Summarization: Data Augmentation and Semi-supervised Approaches10 Jul 2024
- 2024AMA-LSTM: Pioneering Robust and Fair Financial Audio Analysis for Stock Volatility Prediction3 Jul 2024
- 2024tcrLM: a lightweight protein language model for predicting T cell receptor and epitope binding specificity24 Jun 2024
- 2024MaskPure: Improving Defense Against Text Adversaries with Stochastic Purification18 Jun 2024
- 2024Avoiding Copyright Infringement via Large Language Model Unlearning16 Jun 2024
50 newest of 280 All 280 (JSON)
- 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 469
- 2024Building Guardrails for Large Language Modelscited by 65
- 2023Black Box Adversarial Prompting for Foundation Modelscited by 62
- 2021Defending Against Backdoor Attacks in Natural Language Generationcited by 33
- 2023Defending Pre-trained Language Models as Few-shot Learners against Backdoor Attackscited by 33
- 2023Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Informationcited by 33
- 2024Avoiding Copyright Infringement via Large Language Model Unlearningcited by 24
- 2024Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deploymentcited by 4
- 2025CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protectioncited by 3
- 2026Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoningcited by 1
- 2026Robust Context-Aware Detection of Malicious Instructions in Textcited by 1
- 2025Quantifying Return on Security Controls in LLM Systemscited by 0
12 most cited of 13 All 13 (JSON)
- 2026Robust Context-Aware Detection of Malicious Instructions in Text5 Aug 2026
- 2026Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoning24 Jun 2026
- 2026SafeLM: Unified Privacy-Aware Optimization for Trustworthy Federated Large Language Models17 Apr 2026
- 2025Quantifying Return on Security Controls in LLM Systems17 Dec 2025
- 2025CCFC: Core & Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection19 Aug 2025
- 2024Avoiding Copyright Infringement via Large Language Model Unlearning16 Jun 2024
- 2024Building Guardrails for Large Language Models2 Feb 2024
- 2024Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment2 Jan 2024
- 2023Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information20 Nov 2023
- 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks5 Oct 2023
- 2023Defending Pre-trained Language Models as Few-shot Learners against Backdoor Attacks23 Sep 2023
- 2023Black Box Adversarial Prompting for Foundation Models8 Feb 2023
12 newest of 13 All 13 (JSON)
- 2021MATE-KD: Masked Adversarial TExt, a Companion to Knowledge Distillationcited by 27
- 2026OneSearch-V2: The Latent Reasoning Enhanced Self-distillation Generative Search Frameworkcited by 6
- 2022A Semi-supervised Learning Approach with Two Teachers to Improve Breakdown Identification in Dialoguescited by 3
- 2023Explainability-Driven Leaf Disease Classification Using Adversarial Training and Knowledge Distillationcited by 1
- 2026OneSearch-V2: The Latent Reasoning Enhanced Self-distillation Generative Search Framework25 Mar 2026
- 2023Explainability-Driven Leaf Disease Classification Using Adversarial Training and Knowledge Distillation30 Dec 2023
- 2022A Semi-supervised Learning Approach with Two Teachers to Improve Breakdown Identification in Dialogues22 Feb 2022
- 2021MATE-KD: Masked Adversarial TExt, a Companion to Knowledge Distillation12 May 2021
- 2025A Similarity Paradigm Through Textual Regularization Without Forgettingcited by 5
- 2025On the Utility of Foundation Models for Fast MRI: Vision-Language-Guided Image Reconstructioncited by 4
- 2024CoVLM: Leveraging Consensus from Vision-Language Models for Semi-supervised Multi-modal Fake News Detectioncited by 0
- 2025On the Utility of Foundation Models for Fast MRI: Vision-Language-Guided Image Reconstruction24 Nov 2025
- 2025A Similarity Paradigm Through Textual Regularization Without Forgetting20 Feb 2025
- 2024CoVLM: Leveraging Consensus from Vision-Language Models for Semi-supervised Multi-modal Fake News Detection6 Oct 2024
- 2021A Survey on Deep Semi-supervised Learningcited by 251
- 2022Is GPT-3 a Good Data Annotator?cited by 208
- 2022Generating Training Data with Language Models: Towards Zero-Shot Language Understandingcited by 199
- 2021Noisy Channel Language Model Prompting for Few-Shot Text Classificationcited by 165
- 2021Differentiable Prompt Makes Pre-trained Language Models Better Few-shot Learnerscited by 115
- 2021A Survey on Data Augmentation for Text Classificationcited by 111
- 2021Measure and Improve Robustness in NLP Models: A Surveycited by 107
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2021Semantic Communications: Principles and Challengescited by 91
- 2021Towards Improving Adversarial Training of NLP Modelscited by 79
- 2021Revisiting and Advancing Fast Adversarial Training Through The Lens of Bi-Level Optimizationcited by 76
- 2021RETRIEVE: Coreset Selection for Efficient and Robust Semi-Supervised Learningcited by 74
12 most cited of 246 All 246 (JSON)
- 2026Isotropic Embedding Perturbations for Robust Vision Language Encoders9 Sep 2026
- 2026Small Data, Big Noise: Adversarial Training for Robust Parameter-Efficient Fine-Tuning9 Jun 2026
- 2026AutoTail-BSFGM: Class-Balance-Aware Fine-Tuning for Chinese Scholarly Text Classification2 Jun 2026
- 2026Semi-Supervised Learning with Balanced Deep Representation Distributions22 Mar 2026
- 2026MEDNA-DFM: A Dual-View FiLM-MoE Model for Explainable DNA Methylation Prediction26 Feb 2026
- 2026Cross-Modal Robustness Transfer (CMRT): Training Robust Speech Translation Models Using Adversarial Text12 Feb 2026
- 2025Stability and Generalization of Adversarial Diffusion Training23 Sep 2025
- 2025RanAT4BIE: Random Adversarial Training for Biomedical Information Extraction14 Sep 2025
- 2025Abex-rat: Synergizing Abstractive Augmentation and Adversarial Training for Classification of Occupational Accident Reports2 Sep 2025
- 2025Unifying Adversarial Perturbation for Graph Neural Networks30 Aug 2025
- 2025Guided Perturbation Sensitivity (GPS): Detecting Adversarial Text via Embedding Stability and Word Importance6 Aug 2025
- 2025DINA: A Dual Defense Framework Against Internal Noise and External Attacks in Natural Language Processing4 Aug 2025
12 newest of 246 All 246 (JSON)