Generating Fluent Adversarial Examples for Natural Languages
Table 3: Robustness test results on IMDB.
['Model', 'Attack succ (%) Genetic', 'Attack succ (%)  [ITALIC] b-MHA', 'Attack succ (%)  [ITALIC] w-MHA']
To test the adversarial robustness, we attack the new models with all methods on IMDB. On the contrary, adversarial training with b-MHA or w-MHA decreases the success rate of genetic attack.