Scholarlink

<p>The integration of Artificial Intelligence (AI) into applications of Natural Language Processing (NLP), such as spam detection and sentiment analysis, necessitates robust and explainable defenses against adversarial attacks—subtle input perturbations that can compromise model integrity. In this paper, we propose two novel methods, driven by Explainable AI (XAI), for enhancing the robustness of deep learning models in NLP. Traditional methods for generating adversarial examples are often resource-intensive relative to the number of samples produced, limiting their effectiveness in large-scale adversarial training. To address this problem, we propose, as our first contribution, a Multi-Generation Attack Strategy (<Emphasis FontCategory="NonProportional">MGAS</Emphasis>) that leverages explainability techniques to generate a diverse set of adversarial examples for adversarial training. After a baseline adversarial text is crafted, we carefully perform three actions: swapping perturbations with alternatives, rolling back low-contributing words, and exchanging perturbed indices, thereby creating a diverse set of adversarial samples. Our second contribution introduces an additive correction defense mechanism that actively revises input texts at inference time. Using XAI to identify the most critical words in the input text, we substitute them with their most frequent suitable synonyms, thereby reducing the adversarial impact while preserving the model’s performance on clean data. Comprehensive evaluations demonstrate that both approaches, individually or combined, significantly enhance the robustness and transparency of AI models, offering a promising pathway for improving the security and reliability of NLP systems through XAI-driven techniques.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Raising the numbers: multi-generation adversarial attack and frequency-based defense for heightened NLP security

  • 期刊论文

  • 发表日期：

    2025年8月14日

查看全文
  • Salim Khemis,
  • Yacine Amara,
  • Mohamed Akrem Benatia,
  • Ishak Messalti,
  • Mohammed Elamin Ilyas Khanous,
  • Bernard De Baets

摘要

The integration of Artificial Intelligence (AI) into applications of Natural Language Processing (NLP), such as spam detection and sentiment analysis, necessitates robust and explainable defenses against adversarial attacks—subtle input perturbations that can compromise model integrity. In this paper, we propose two novel methods, driven by Explainable AI (XAI), for enhancing the robustness of deep learning models in NLP. Traditional methods for generating adversarial examples are often resource-intensive relative to the number of samples produced, limiting their effectiveness in large-scale adversarial training. To address this problem, we propose, as our first contribution, a Multi-Generation Attack Strategy (MGAS) that leverages explainability techniques to generate a diverse set of adversarial examples for adversarial training. After a baseline adversarial text is crafted, we carefully perform three actions: swapping perturbations with alternatives, rolling back low-contributing words, and exchanging perturbed indices, thereby creating a diverse set of adversarial samples. Our second contribution introduces an additive correction defense mechanism that actively revises input texts at inference time. Using XAI to identify the most critical words in the input text, we substitute them with their most frequent suitable synonyms, thereby reducing the adversarial impact while preserving the model’s performance on clean data. Comprehensive evaluations demonstrate that both approaches, individually or combined, significantly enhance the robustness and transparency of AI models, offering a promising pathway for improving the security and reliability of NLP systems through XAI-driven techniques.