MAT: Mixed-Strategy Game of Adversarial Training in Fine-tuning
Not on the map. Why?
Abstract (arXiv)
Fine-tuning large-scale pre-trained language models has been demonstrated effective for various natural language processing (NLP) tasks. Previous studies have established that incorporating adversarial training during the fine-tuning stage can significantly enhance model generalization and robustness. However, from the perspective of game theory, such utilizations of adversarial training correspond to pure-strategy games, which are inherently limited in terms of the scope of their strategies, thereby still having room for improvement. In order to push the performance boundaries, we propose a novel Mixed-strategy Adversarial Training algorithm (MAT). Methodologically, we derive the Nash equilibrium of a mixed-strategy game for adversarial training using Entropy Mirror Descent to establish MAT by sampling method. To verify the effectiveness of MAT, we conducted extensive benchmark experiments on large-scale pre-trained models, such as BERT and RoBERTa. MAT significantly outperforms the state-of-the-art methods on both the GLUE and ANLI benchmarks in terms of generalization and robustness.
Key facts. Cited by 1 paper in the map (data through 13 Oct 2026). Builds on 33 of its 53 references that are in the map. First posted on arXiv 27 Jun 2023.
Builds on
33 of 53 references.
References · 33
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,304
- 2014Adam: A Method for Stochastic Optimizationcited by 37,093
- 2020Language Models are Few-Shot Learnerscited by 32,320
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,223
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,549
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,322
- 2014Explaining and Harnessing Adversarial Examplescited by 7,336
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,379
- 2013Intriguing properties of neural networkscited by 5,137
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,880
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,133
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,676
21 more
- 2015A large annotated corpus for learning natural language inferencecited by 1,841
- 2018FEVER: a large-scale dataset for Fact Extraction and VERificationcited by 1,368
- 2017SemEval-2017 Task 1: Semantic Textual Similarity - Multilingual and Cross-lingual Focused Evaluationcited by 998
- 2018Neural Network Acceptability Judgmentscited by 957
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 804
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 668
- 2021Datasets: A Community Library for Natural Language Processingcited by 529
- 2016Adversarial Training Methods for Semi-Supervised Text Classificationcited by 280
- 2019FreeLB: Enhanced Adversarial Training for Natural Language Understandingcited by 263
- 2019SMART: Robust and Efficient Fine-Tuning for Pre-trained Natural Language Models through Principled Regularized Optimizationcited by 253
- 2017Training GANs with Optimismcited by 217
- 2020Invariant Risk Minimization Gamescited by 188
- 2019You Only Propagate Once: Accelerating Adversarial Training via Maximal Principlecited by 181
- 2017Generalization and Equilibrium in Generative Adversarial Nets (GANs)cited by 165
- 2020Better Fine-Tuning by Reducing Representational Collapsecited by 157
- 2015Preconditioned Stochastic Gradient Langevin Dynamics for Deep Neural Networkscited by 121
- 2020Adversarial Training for Large Neural Language Modelscited by 110
- 2017Deep Text Classification Can be Fooledcited by 106
- 2018Finding Mixed Nash Equilibria of Generative Adversarial Networkscited by 48
- 2021Adversarial Regularization as Stackelberg Game: An Unrolled Optimization Approachcited by 7
- 2020EvaLDA: Efficient Evasion Attacks Towards Latent Dirichlet Allocationcited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.