Wang, X.; Yang, Y.; Deng, Y.; He, K. Adversarial Training With Fast Gradient Projection Method Against Synonym Substitution Based Text Attacks. AAAI 2021, 35, 13997-14005.