Wang, X., Yang, Y., Deng, Y., & He, K. (2021). Adversarial Training with Fast Gradient Projection Method against Synonym Substitution Based Text Attacks. Proceedings of the AAAI Conference on Artificial Intelligence, 35(16), 13997-14005. https://doi.org/10.1609/aaai.v35i16.17648