Salvato in:
Dettagli Bibliografici
Autori principali: Yang, Zhenning, Krawec, Ryan, Wu, Liang-Yuan
Natura: Preprint
Pubblicazione: 2024
Soggetti:
Accesso online:https://arxiv.org/abs/2405.00289
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866909187504603136
author Yang, Zhenning
Krawec, Ryan
Wu, Liang-Yuan
author_facet Yang, Zhenning
Krawec, Ryan
Wu, Liang-Yuan
contents As the deployment of NLP systems in critical applications grows, ensuring the robustness of large language models (LLMs) against adversarial attacks becomes increasingly important. Large language models excel in various NLP tasks but remain vulnerable to low-cost adversarial attacks. Focusing on the domain of conversation entailment, where multi-turn dialogues serve as premises to verify hypotheses, we fine-tune a transformer model to accurately discern the truthfulness of these hypotheses. Adversaries manipulate hypotheses through synonym swapping, aiming to deceive the model into making incorrect predictions. To counteract these attacks, we implemented innovative fine-tuning techniques and introduced an embedding perturbation loss method to significantly bolster the model's robustness. Our findings not only emphasize the importance of defending against adversarial attacks in NLP but also highlight the real-world implications, suggesting that enhancing model robustness is critical for reliable NLP applications.
format Preprint
id arxiv_https___arxiv_org_abs_2405_00289
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Adversarial Attacks and Defense for Conversation Entailment Task
Yang, Zhenning
Krawec, Ryan
Wu, Liang-Yuan
Computation and Language
Artificial Intelligence
As the deployment of NLP systems in critical applications grows, ensuring the robustness of large language models (LLMs) against adversarial attacks becomes increasingly important. Large language models excel in various NLP tasks but remain vulnerable to low-cost adversarial attacks. Focusing on the domain of conversation entailment, where multi-turn dialogues serve as premises to verify hypotheses, we fine-tune a transformer model to accurately discern the truthfulness of these hypotheses. Adversaries manipulate hypotheses through synonym swapping, aiming to deceive the model into making incorrect predictions. To counteract these attacks, we implemented innovative fine-tuning techniques and introduced an embedding perturbation loss method to significantly bolster the model's robustness. Our findings not only emphasize the importance of defending against adversarial attacks in NLP but also highlight the real-world implications, suggesting that enhancing model robustness is critical for reliable NLP applications.
title Adversarial Attacks and Defense for Conversation Entailment Task
topic Computation and Language
Artificial Intelligence
url https://arxiv.org/abs/2405.00289