PID Control-Based Self-Healing to Improve the Robustness of Large Language Models
Not on the map. Why?
Abstract (arXiv)
Despite the effectiveness of deep neural networks in numerous natural language processing applications, recent findings have exposed the vulnerability of these language models when minor perturbations are introduced. While appearing semantically indistinguishable to humans, these perturbations can significantly reduce the performance of well-trained language models, raising concerns about the reliability of deploying them in safe-critical situations. In this work, we construct a computationally efficient self-healing process to correct undesired model behavior during online inference when perturbations are applied to input data. This is formulated as a trajectory optimization problem in which the internal states of the neural network layers are automatically corrected using a PID (Proportional-Integral-Derivative) control mechanism. The P controller targets immediate state adjustments, while the I and D controllers consider past states and future dynamical trends, respectively. We leverage the geometrical properties of the training data to design effective linear PID controllers. This approach reduces the computational cost to that of using just the P controller, instead of the full PID control. Further, we introduce an analytical method for approximating the optimal control solutions, enhancing the real-time inference capabilities of this controlled system. Moreover, we conduct a theoretical error analysis of the analytic solution in a simplified setting. The proposed PID control-based self-healing is a low cost framework that improves the robustness of pre-trained large language models, whether standard or robustly trained, against a wide range of perturbations. A detailed implementation can be found in:https://github.com/zhuotongchen/PID-Control-Based-Self-Healing-to-Improve-the-Robustness-of-Large-Language-Models.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 35 of its 59 references that are in the map. First posted on arXiv 31 Mar 2024.
Builds on
35 of 59 references.
References · 35
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,243
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,665
- 2015A large annotated corpus for learning natural language inferencecited by 1,837
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 798
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 709
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 663
- 2019Adversarial Training for Free!cited by 638
23 more
- 2019ClinicalBERT: Modeling Clinical Notes and Predicting Hospital Readmissioncited by 487
- 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 376
- 2014Deep Speech: Scaling up end-to-end speech recognitioncited by 354
- 2017Stable Architectures for Deep Neural Networkscited by 340
- 2019FreeLB: Enhanced Adversarial Training for Natural Language Understandingcited by 261
- 2019SMART: Robust and Efficient Fine-Tuning for Pre-trained Natural Language Models through Principled Regularized Optimizationcited by 253
- 2019Adversarial Training and Robustness for Multiple Perturbationscited by 182
- 2019You Only Propagate Once: Accelerating Adversarial Training via Maximal Principlecited by 181
- 2021Towards Improving Adversarial Training of NLP Modelscited by 79
- 2017Maximum Principle Based Algorithms for Deep Learningcited by 77
- 2018A Mean-Field Optimal Control Formulation of Deep Learningcited by 67
- 2020CAT-Gen: Improving Robustness in NLP Models via Controlled Adversarial Text Generationcited by 43
- 2021Grey-box Adversarial Attack And Defence For Sentiment Classificationcited by 28
- 2019Deep Learning Theory Review: An Optimal Control and Dynamical Systems Perspectivecited by 26
- 2021Bayesian Inference with Certifiable Adversarial Robustnesscited by 26
- 2018An Optimal Control Approach to Deep Learning and Applications to Discrete-Weight Neural Networkscited by 25
- 2021Towards Robust Neural Networks via Close-loop Controlcited by 23
- 2021The King is Naked: on the Notion of Robustness for Natural Language Processingcited by 16
- 2023Toward Adversarial Training on Contextualized Language Representationcited by 10
- 2021RAILS: A Robust Adversarial Immune-inspired Learning Systemcited by 8
- 2022Self-Healing Robust Neural Networks via Closed-Loop Controlcited by 5
- 2020DDPNOpt: Differential Dynamic Programming Neural Optimizercited by 4
- 2023Asymptotically Fair Participation in Machine Learning Models: an Optimal Control Perspectivecited by 1
Built on by
Citing papers per year: 2024: 1; 2025: 1; 2026: 1.
3 papers.