Defence algorithm against adversarial example based on local perturbation DAT-LP

Abstract

ABSTRACTWith further research into neural networks, their scope of application is becoming increasingly extensive. Among these, more neural network models are used in text classification tasks and have achieved excellent results. However, the crucial issue of derived adversarial examples has dramatically affected the stability and robustness of the neural network model. This issue confines the further expansion of the neural network application, especially in some security-sensitive tasks. Concerning the text classification task, our proposed DAT-LP (Defence with Adversarial Training Based on Local Perturbation) algorithm is designed to address the adversarial example issue, which uses local perturbation to enhance model performance based on adversarial training. Furthermore, SW-CStart (Cold-start Algorithm Based on Sliding Window) algorithm is designed to realise adversarial training in the model’s initialisation stage. The DAT-LP algorithm is evaluated by comparing with three baselines, including baseline models (BiLSTM, TextCNN), Dropout(regularisation method), and ADT (Adversarial Training method), respectively. As it turns out, DAT-LP’s performance is superior and demonstrates the best generalisation ability.KEYWORDS: DAT-LPdefence algorithmmachine learning securityrobustnessadversarial attack Disclosure statementNo potential conflict of interest was reported by the author(s).Additional informationFundingThis work was supported in part by the National Natural Science Foundation of China under Grant No. 62072319; the Sichuan Science and Technology Program under Grant No. 2023YFQ0022, 2022YFG0041, 2022YFG0155 and 2022YFG0157; the Luzhou Science and Technology Innovation R&D Program under Grant No. 2022CDLZ-6.