On Sensitivity of Deep Learning Based Text Classification Algorithms to Practical Input Perturbations
Not on the map. Why?
Abstract (arXiv)
Text classification is a fundamental Natural Language Processing task that has a wide variety of applications, where deep learning approaches have produced state-of-the-art results. While these models have been heavily criticized for their black-box nature, their robustness to slight perturbations in input text has been a matter of concern. In this work, we carry out a data-focused study evaluating the impact of systematic practical perturbations on the performance of the deep learning based text classification models like CNN, LSTM, and BERT-based algorithms. The perturbations are induced by the addition and removal of unwanted tokens like punctuation and stop-words that are minimally associated with the final performance of the model. We show that these deep learning approaches including BERT are sensitive to such legitimate input perturbations on four standard benchmark datasets SST2, TREC-6, BBC News, and tweet_eval. We observe that BERT is more susceptible to the removal of tokens as compared to the addition of tokens. Moreover, LSTM is slightly more sensitive to input perturbations as compared to CNN based model. The work also serves as a practical guide to assessing the impact of discrepancies in train-test conditions on the final performance of models.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 24 of its 32 references that are in the map. First posted on arXiv 2 Jan 2022.
Builds on
24 of 32 references.
References · 24
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 1,006
- 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 776
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
- 2020Towards Faithfully Interpretable NLP Systems: How should we define and evaluate faithfulness?cited by 599
- 2020TweetEval: Unified Benchmark and Comparative Evaluation for Tweet Classificationcited by 417
- 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 345
- 2019Text Classification Algorithms: A Surveycited by 163
- 2020Challenges in Deploying Machine Learning: a Survey of Case Studiescited by 152
- 2021Robustness Gym: Unifying the NLP Evaluation Landscapecited by 108
- 2015A Sensitivity Analysis of (and Practitioners' Guide to) Convolutional Neural Networks for Sentence Classificationcited by 92
- 2021Evaluating the Robustness of Neural Language Models to Input Perturbationscited by 87
12 more
- 2015A C-LSTM Neural Network for Text Classificationcited by 54
- 2020Robustness Testing of Language Understanding in Task-Oriented Dialogcited by 32
- 2021L3CubeMahaSent: A Marathi Tweet-based Sentiment Analysis Datasetcited by 31
- 2020Deep Learning for Hindi Text Classification: A Comparisoncited by 22
- 2021Experimental Evaluation of Deep Learning models for Marathi Text Classificationcited by 19
- 2021Evaluating Deep Learning Approaches for Covid19 Fake News Detectioncited by 16
- 2020Attention Meets Perturbations: Robust and Interpretable Attention with Adversarial Trainingcited by 12
- 2021Comparative Study of Long Document Classificationcited by 12
- 2020Assessing Robustness of Text Classification through Maximal Safe Radius Computationcited by 11
- 2018Training and Prediction Data Discrepancies: Challenges of Text Classification with Noisy, Historical Datacited by 5
- 2021ShufText: A Simple Black Box Approach to Evaluate the Fragility of Text Classification Modelscited by 5
- 2020Model Robustness with Text Classification: Semantic-preserving adversarial attackscited by 2
Built on by
Citing papers per year: 2023: 1; 2024: 1.
2 papers.