arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2410.12759cs.CLcs.AI
收藏

用于鲁棒自然语言处理的酉多间隔 BERT

Unitary Multi-Margin BERT for Robust Natural Language Processing

University of California, Los Angeles(加州大学洛杉矶分校)

Hao-Yuan Chang, Kang L. Wang

AI总结:

本文提出 UniBERT 模型,通过结合酉权重与多间隔损失大幅提升 BERT 的对抗鲁棒性,将攻击后准确率提升 5.3% 至 73.8%,且可通过单一参数调节准确率权衡。

摘要:

近期针对深度学习的对抗攻击发展使许多关键任务自然语言处理(NLP)系统面临被利用的风险。为解决缺乏计算高效的对抗防御方法的问题,本文报告了一种新颖的通用技术,通过将酉权重与多间隔损失相结合,大幅提升了来自变换器的双向编码器表示(BERT)的鲁棒性。我们发现这两个简单想法的结合增强了对恶意干扰的防护。我们的模型,即酉多间隔 BERT(UniBERT),将攻击后分类准确率显著提升了 5.3% 至 73.8%,同时保持具竞争力的攻击前准确率。此外,攻击前与攻击后准确率的权衡可通过单一标量参数调整,以最好地适应目标应用的设计要求。

英文摘要:

Recent developments in adversarial attacks on deep learning leave many mission-critical natural language processing (NLP) systems at risk of exploitation. To address the lack of computationally efficient adversarial defense methods, this paper reports a novel, universal technique that drastically improves the robustness of Bidirectional Encoder Representations from Transformers (BERT) by combining the unitary weights with the multi-margin loss. We discover that the marriage of these two simple ideas amplifies the protection against malicious interference. Our model, the unitary multi-margin BERT (UniBERT), boosts post-attack classification accuracies significantly by 5.3% to 73.8% while maintaining competitive pre-attack accuracies. Furthermore, the pre-attack and post-attack accuracy tradeoff can be adjusted via a single scalar parameter to best fit the design requirements for the target applications.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑