Wang X, Yang Y, Deng Y, He K. Adversarial Training with Fast Gradient Projection Method against Synonym Substitution Based Text Attacks. AAAI [Internet]. 2021 May 18 [cited 2026 May 25];35(16):13997-4005. Available from: https://ojs.aaai.org/index.php/AAAI/article/view/17648