Effective writing style transfer via combinatorial paraphrasing
Table 22: LSTM author profiler accuracy without→with adversarial training, on both original and transformed five-class test sets with randomized target authors on ParChoice-LSTM.
['Author', 'Original', 'Transformed']
Adversarial training is also expected to be more challenging when the number of classes is increased. We produced ParChoice-LSTM imitations with random target classes from the five-class training set, and appended them to the original five-class training data. We trained the LSTM profiler on this adversarial training data, and tested it against ParChoice-LSTM imitations with randomly selected targets. As predicted, the effectiveness of adversarial training was reduced, although still clearly present. However, the adversary could adopt a two-step profiling procedure of first detecting the imitation target by classifying the transformed document, and then producing the adversarial training set using this target.