Adversarial Self-Attention for Language Understanding
Not on the map. Why?
Abstract (arXiv)
Deep neural models (e.g. Transformer) naturally learn spurious features, which create a ``shortcut'' between the labels and inputs, thus impairing the generalization and robustness. This paper advances the self-attention mechanism to its robust variant for Transformer-based pre-trained language models (e.g. BERT). We propose textitAdversarial Self-Attention mechanism (ASA), which adversarially biases the attentions to effectively suppress the model reliance on features (e.g. specific keywords) and encourage its exploration of broader semantics. We conduct a comprehensive evaluation across a wide range of tasks for both pre-training and fine-tuning stages. For pre-training, ASA unfolds remarkable performance gains compared to naive training for longer steps. For fine-tuning, ASA-empowered models outweigh naive models by a large margin considering both generalization and robustness.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Builds on 51 of its 69 references that are in the map. First posted on arXiv 25 Jun 2022.
Builds on
51 of 69 references.
References · 51
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networkscited by 4,861
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,115
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2020Longformer: The Long-Document Transformercited by 3,362
38 more
- 2019XLNet: Generalized Autoregressive Pretraining for Language Understandingcited by 2,801
- 2016Categorical Reparameterization with Gumbel-Softmaxcited by 2,708
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,665
- 2020DeBERTa: Decoding-enhanced BERT with Disentangled Attentioncited by 2,157
- 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,906
- 2020Big Bird: Transformers for Longer Sequencescited by 1,673
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
- 2017SemEval-2017 Task 1: Semantic Textual Similarity - Multilingual and Cross-lingual Focused Evaluationcited by 998
- 2017Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learningcited by 918
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 798
- 2018Learning to Reweight Examples for Robust Deep Learningcited by 670
- 2019Adversarial Training for Free!cited by 638
- 2019Reducing Transformer Depth on Demand with Structured Dropoutcited by 434
- 2019PAWS: Paraphrase Adversaries from Word Scramblingcited by 395
- 2016Adversarial Training Methods for Semi-Supervised Text Classificationcited by 280
- 2019FreeLB: Enhanced Adversarial Training for Natural Language Understandingcited by 261
- 2019SMART: Robust and Efficient Fine-Tuning for Pre-trained Natural Language Models through Principled Regularized Optimizationcited by 253
- 2020Synthesizer: Rethinking Self-Attention in Transformer Modelscited by 204
- 2019You Only Propagate Once: Accelerating Adversarial Training via Maximal Principlecited by 181
- 2019DREAM: A Challenge Dataset and Models for Dialogue-Based Reading Comprehensioncited by 156
- 2020Better Fine-Tuning by Reducing Representational Collapsecited by 156
- 2020Adversarial Training for Large Neural Language Modelscited by 109
- 2019Robust Neural Machine Translation with Doubly Adversarial Inputscited by 105
- 2020InfoBERT: Improving Robustness of Language Models from An Information Theoretic Perspectivecited by 92
- 2018Interpretable Adversarial Perturbation in Input Embedding Space for Textcited by 67
- 2020Robustness to Spurious Correlations via Human Annotationscited by 62
- 2019SG-Net: Syntax-Guided Machine Reading Comprehensioncited by 52
- 2019Improving Neural Language Modeling via Adversarial Trainingcited by 49
- 2021SparseBERT: Rethinking the Importance Analysis in Self-attentioncited by 46
- 2020Hard-Coded Gaussian Attention for Neural Machine Translationcited by 42
- 2021HiddenCut: Simple Data Augmentation for Natural Language Understanding with Better Generalizationcited by 31
- 2021Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrificecited by 30
- 2020Code Summarization with Structure-induced Transformercited by 29
- 2019A Multi-task Approach for Named Entity Recognition in Social Media Datacited by 18
- 2020Neural Mask Generator: Learning to Generate Adaptive Word Maskings for Language Model Adaptationcited by 14
- 2022Adversarial Training for Improving Model Robustness? Look at Both Prediction and Interpretationcited by 12
- 2020Pre-training Text Representations as Meta Learningcited by 5
- 2021Not All Attention Is All You Needcited by 5
50 most cited of 51 All 51 (JSON)
Built on by
Citing papers per year: 2022: 1; 2023: 4; 2024: 1; 2025: 1; 2026: 1.
8 papers.
- 2023Chinese Spelling Correction as Rephrasing Language Modelcited by 15
- 2023Toward Adversarial Training on Contextualized Language Representationcited by 10
- 2023Empower Nested Boolean Logic via Self-Supervised Curriculum Learningcited by 7
- 2022Forging Multiple Training Objectives for Pre-trained Language Models via Meta-Learningcited by 5
- 2023Attack Named Entity Recognition by Entity Boundary Interferencecited by 4
- 2025Advances and Challenges in Semantic Textual Similarity: A Comprehensive Surveycited by 1
- 2024Unveiling Vulnerability of Self-Attentioncited by 0
- 2026Self-Gating Attention for Efficient Time Series Forecastingcited by 0
- 2026Self-Gating Attention for Efficient Time Series Forecasting2 Jul 2026
- 2025Advances and Challenges in Semantic Textual Similarity: A Comprehensive Survey19 Dec 2025
- 2024Unveiling Vulnerability of Self-Attention26 Feb 2024
- 2023Empower Nested Boolean Logic via Self-Supervised Curriculum Learning9 Oct 2023
- 2023Chinese Spelling Correction as Rephrasing Language Model17 Aug 2023
- 2023Attack Named Entity Recognition by Entity Boundary Interference9 May 2023
- 2023Toward Adversarial Training on Contextualized Language Representation8 May 2023
- 2022Forging Multiple Training Objectives for Pre-trained Language Models via Meta-Learning19 Oct 2022