X. Wang, Y. Yang, Y. Deng, and K. He, “Adversarial Training with Fast Gradient Projection Method against Synonym Substitution Based Text Attacks”, AAAI, vol. 35, no. 16, pp. 13997–14005, May 2021.