Improving Neural Language Modeling via Adversarial Training
Not on the map. Why?
Abstract (arXiv)
Recently, substantial progress has been made in language modeling by using deep neural networks. However, in practice, large scale neural language models have been shown to be prone to overfitting. In this paper, we present a simple yet highly effective adversarial training mechanism for regularizing neural language models. The idea is to introduce adversarial noise to the output embedding layer while training the models. We show that the optimal adversarial noise yields a simple closed-form solution, thus allowing us to develop a simple and time efficient algorithm. Theoretically, we show that our adversarial mechanism effectively encourages the diversity of the embedding vectors, helping to increase the robustness of models. Empirically, we show that our method improves on the single model state-of-the-art results for language modeling on Penn Treebank (PTB) and Wikitext-2, achieving test perplexity scores of 46.01 and 38.07, respectively. When applied to machine translation, our method improves over various transformer-based translation baselines in BLEU scores on the WMT14 English-German and IWSLT14 German-English tasks.
Key facts. Cited by 49 papers in the map (data through 7 Oct 2026). First posted on arXiv 10 Jun 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2020: 1; 2021: 20; 2022: 7; 2023: 9; 2024: 4; 2025: 4; 2026: 4.
49 papers.
Sort:
By area:
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2021A Survey on Data Augmentation for Text Classificationcited by 111
- 2020Autoregressive Knowledge Distillation through Imitation Learningcited by 68
- 2021IsoScore: Measuring the Uniformity of Embedding Space Utilizationcited by 52
- 2022Aug-NeRF: Training Stronger Neural Radiance Fields with Triple-Level Physically-Grounded Augmentationscited by 46
- 2023GenDet: Towards Good Generalizations for AI-Generated Image Detectioncited by 36
- 2021BERT, mBERT, or BiBERT? A Study on Contextualized Embeddings for Neural Machine Translationcited by 35
- 2023Prompt Optimization via Adversarial In-Context Learningcited by 33
- 2021Rare Tokens Degenerate All Tokens: Improving Neural Text Generation via Adaptive Gradient Gating for Rare Token Embeddingscited by 27
- 2021Data-Efficient GAN Training Beyond (Just) Augmentations: A Lottery Ticket Perspectivecited by 25
- 2022A Survey of Adversarial Defences and Robustness in NLPcited by 22
- 2021Rethinking Perturbations in Encoder-Decoders for Fast Trainingcited by 17
37 more
- 2023Evolving Diverse Red-team Language Models in Multi-round Multi-agent Gamescited by 17
- 2021Adversarial Reinforced Instruction Attacker for Robust Vision-Language Navigationcited by 15
- 2021CAP: Co-Adversarial Perturbation on Weights and Features for Improving Generalization of Graph Neural Networkscited by 15
- 2022NOSMOG: Learning Noise-robust and Structure-aware MLPs on Graphscited by 14
- 2023Benchmarking Robustness in Neural Radiance Fieldscited by 13
- 2024Detecting and Understanding Vulnerabilities in Language Models via Mechanistic Interpretabilitycited by 13
- 2023A Review of ChatGPT Applications in Education, Marketing, Software Engineering, and Healthcare: Benefits, Drawbacks, and Research Directionscited by 12
- 2024Pandora's Box or Aladdin's Lamp: A Comprehensive Analysis Revealing the Role of RAG Noise in Large Language Modelscited by 12
- 2021Adversarial Feature Augmentation and Normalization for Visual Recognitioncited by 11
- 2021UniDrop: A Simple yet Effective Technique to Improve Transformer without Extra Costcited by 10
- 2023Toward Adversarial Training on Contextualized Language Representationcited by 10
- 2021Consistency Training with Virtual Adversarial Discrete Perturbationcited by 9
- 2022Bi-SimCut: A Simple Strategy for Boosting Neural Machine Translationcited by 8
- 2022Adversarial Self-Attention for Language Understandingcited by 8
- 2021Adversarial Regularization as Stackelberg Game: An Unrolled Optimization Approachcited by 7
- 2025Towards the Worst-case Robustness of Large Language Modelscited by 7
- 2025Retrieval-Augmented Purifier for Robust LLM-Empowered Recommendationcited by 7
- 2024Adversarial Training: A Surveycited by 6
- 2021IOT: Instance-wise Layer Reordering for Transformer Structurescited by 5
- 2021Adversarially trained LSTMs on reduced order models of urban air pollution simulationscited by 4
- 2021Adversarial autoencoders and adversarial LSTM for improved forecasts of urban air pollution simulationscited by 4
- 2023Survey on AI Ethics: A Socio-technical Perspectivecited by 4
- 2025Better Embeddings with Coupled Adamcited by 4
- 2021Noisy Training Improves E2E ASR for the Edgecited by 2
- 2022Dual Decomposition of Convex Optimization Layers for Consistent Attention in Medical Imagescited by 2
- 2025Adversarial Defence without Adversarial Defence: Enhancing Language Model Robustness via Instance-level Principal Component Removalcited by 2
- 2026Weight Tying Biases Token Embeddings Towards the Output Spacecited by 2
- 2021ARCH: Efficient Adversarial Regularized Training with Cachingcited by 1
- 2023EM-Network: Oracle Guided Self-distillation for Sequence Learningcited by 1
- 2026On damage of interpolation to adversarial robustness in regressioncited by 1
- 2021An empirical analysis of phrase-based and neural machine translationcited by 0
- 2021Spiral Language Modelingcited by 0
- 2021The Importance of the Current Input in Sequence Modelingcited by 0
- 2022ScaLA: Accelerating Adaptation of Pre-Trained Transformer-Based Language Models via Efficient Large-Batch Adversarial Noisecited by 0
- 2024Bag of Lies: Robustness in Continuous Pre-training BERTcited by 0
- 2026Learning When to Trust in Contextual Social Banditscited by 0
- 2026Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoningcited by 0
- 2026Detect, Unlearn, Restore: Defending Text Summarization Models Against Data Poisoning24 Jun 2026
- 2026Weight Tying Biases Token Embeddings Towards the Output Space27 Mar 2026
- 2026Learning When to Trust in Contextual Social Bandits9 Mar 2026
- 2026On damage of interpolation to adversarial robustness in regression22 Jan 2026
- 2025Adversarial Defence without Adversarial Defence: Enhancing Language Model Robustness via Instance-level Principal Component Removal29 Jul 2025
- 2025Retrieval-Augmented Purifier for Robust LLM-Empowered Recommendation3 Apr 2025
- 2025Better Embeddings with Coupled Adam12 Feb 2025
- 2025Towards the Worst-case Robustness of Large Language Models31 Jan 2025
- 2024Adversarial Training: A Survey19 Oct 2024
- 2024Pandora's Box or Aladdin's Lamp: A Comprehensive Analysis Revealing the Role of RAG Noise in Large Language Models24 Aug 2024
- 2024Detecting and Understanding Vulnerabilities in Language Models via Mechanistic Interpretability29 Jul 2024
- 2024Bag of Lies: Robustness in Continuous Pre-training BERT14 Jun 2024
37 more
- 2023GenDet: Towards Good Generalizations for AI-Generated Image Detection12 Dec 2023
- 2023Prompt Optimization via Adversarial In-Context Learning5 Dec 2023
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly4 Dec 2023
- 2023Survey on AI Ethics: A Socio-technical Perspective28 Nov 2023
- 2023Evolving Diverse Red-team Language Models in Multi-round Multi-agent Games30 Sep 2023
- 2023EM-Network: Oracle Guided Self-distillation for Sequence Learning14 Jun 2023
- 2023Toward Adversarial Training on Contextualized Language Representation8 May 2023
- 2023A Review of ChatGPT Applications in Education, Marketing, Software Engineering, and Healthcare: Benefits, Drawbacks, and Research Directions29 Apr 2023
- 2023Benchmarking Robustness in Neural Radiance Fields10 Jan 2023
- 2022NOSMOG: Learning Noise-robust and Structure-aware MLPs on Graphs22 Aug 2022
- 2022Aug-NeRF: Training Stronger Neural Radiance Fields with Triple-Level Physically-Grounded Augmentations4 Jul 2022
- 2022Adversarial Self-Attention for Language Understanding25 Jun 2022
- 2022Dual Decomposition of Convex Optimization Layers for Consistent Attention in Medical Images6 Jun 2022
- 2022Bi-SimCut: A Simple Strategy for Boosting Neural Machine Translation6 Jun 2022
- 2022A Survey of Adversarial Defences and Robustness in NLP12 Mar 2022
- 2022ScaLA: Accelerating Adaptation of Pre-Trained Transformer-Based Language Models via Efficient Large-Batch Adversarial Noise29 Jan 2022
- 2021The Importance of the Current Input in Sequence Modeling22 Dec 2021
- 2021Spiral Language Modeling20 Dec 2021
- 2021CAP: Co-Adversarial Perturbation on Weights and Features for Improving Generalization of Graph Neural Networks28 Oct 2021
- 2021ARCH: Efficient Adversarial Regularized Training with Caching15 Sep 2021
- 2021BERT, mBERT, or BiBERT? A Study on Contextualized Embeddings for Neural Machine Translation9 Sep 2021
- 2021Rare Tokens Degenerate All Tokens: Improving Neural Text Generation via Adaptive Gradient Gating for Rare Token Embeddings7 Sep 2021
- 2021IsoScore: Measuring the Uniformity of Embedding Space Utilization16 Aug 2021
- 2021Adversarial Reinforced Instruction Attacker for Robust Vision-Language Navigation23 Jul 2021
- 2021Noisy Training Improves E2E ASR for the Edge9 Jul 2021
- 2021A Survey on Data Augmentation for Text Classification7 Jul 2021
- 2021Consistency Training with Virtual Adversarial Discrete Perturbation15 Apr 2021
- 2021Adversarial autoencoders and adversarial LSTM for improved forecasts of urban air pollution simulations13 Apr 2021
- 2021UniDrop: A Simple yet Effective Technique to Improve Transformer without Extra Cost11 Apr 2021
- 2021Adversarial Regularization as Stackelberg Game: An Unrolled Optimization Approach11 Apr 2021
- 2021Rethinking Perturbations in Encoder-Decoders for Fast Training5 Apr 2021
- 2021Adversarial Feature Augmentation and Normalization for Visual Recognition22 Mar 2021
- 2021IOT: Instance-wise Layer Reordering for Transformer Structures5 Mar 2021
- 2021An empirical analysis of phrase-based and neural machine translation4 Mar 2021
- 2021Data-Efficient GAN Training Beyond (Just) Augmentations: A Lottery Ticket Perspective28 Feb 2021
- 2021Adversarially trained LSTMs on reduced order models of urban air pollution simulations5 Jan 2021
- 2020Autoregressive Knowledge Distillation through Imitation Learning15 Sep 2020
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2021A Survey on Data Augmentation for Text Classificationcited by 111
- 2021IsoScore: Measuring the Uniformity of Embedding Space Utilizationcited by 52
- 2022Aug-NeRF: Training Stronger Neural Radiance Fields with Triple-Level Physically-Grounded Augmentationscited by 46
- 2023GenDet: Towards Good Generalizations for AI-Generated Image Detectioncited by 36
- 2021BERT, mBERT, or BiBERT? A Study on Contextualized Embeddings for Neural Machine Translationcited by 35
- 2023Prompt Optimization via Adversarial In-Context Learningcited by 33
- 2021Rare Tokens Degenerate All Tokens: Improving Neural Text Generation via Adaptive Gradient Gating for Rare Token Embeddingscited by 27
- 2021Data-Efficient GAN Training Beyond (Just) Augmentations: A Lottery Ticket Perspectivecited by 25
- 2022A Survey of Adversarial Defences and Robustness in NLPcited by 22
- 2021Rethinking Perturbations in Encoder-Decoders for Fast Trainingcited by 17
- 2021Adversarial Reinforced Instruction Attacker for Robust Vision-Language Navigationcited by 15
12 most cited of 44 All 44 (JSON)
- 2026Weight Tying Biases Token Embeddings Towards the Output Space27 Mar 2026
- 2026Learning When to Trust in Contextual Social Bandits9 Mar 2026
- 2026On damage of interpolation to adversarial robustness in regression22 Jan 2026
- 2025Adversarial Defence without Adversarial Defence: Enhancing Language Model Robustness via Instance-level Principal Component Removal29 Jul 2025
- 2025Better Embeddings with Coupled Adam12 Feb 2025
- 2025Towards the Worst-case Robustness of Large Language Models31 Jan 2025
- 2024Adversarial Training: A Survey19 Oct 2024
- 2024Detecting and Understanding Vulnerabilities in Language Models via Mechanistic Interpretability29 Jul 2024
- 2024Bag of Lies: Robustness in Continuous Pre-training BERT14 Jun 2024
- 2023GenDet: Towards Good Generalizations for AI-Generated Image Detection12 Dec 2023
- 2023Prompt Optimization via Adversarial In-Context Learning5 Dec 2023
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Ugly4 Dec 2023
12 newest of 44 All 44 (JSON)