{"id":"https://openalex.org/W7138366288","doi":"https://doi.org/10.1609/aaai.v40i36.40301","title":"Breaking the Adversarial Robustness-Performance Trade-off in Text Classification via Manifold Purification","display_name":"Breaking the Adversarial Robustness-Performance Trade-off in Text Classification via Manifold Purification","publication_year":2026,"publication_date":"2026-03-14","ids":{"openalex":"https://openalex.org/W7138366288","doi":"https://doi.org/10.1609/aaai.v40i36.40301"},"language":"en","primary_location":{"id":"doi:10.1609/aaai.v40i36.40301","doi":"https://doi.org/10.1609/aaai.v40i36.40301","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i36.40301","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/40301/44262","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-2","norway-1"],"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://ojs.aaai.org/index.php/AAAI/article/download/40301/44262","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120131802","display_name":"Chenhao Dang","orcid":"https://orcid.org/0009-0001-8608-4078","observed_orcids":["https://orcid.org/0009-0001-8608-4078"]},"institutions":[{"id":"https://openalex.org/I2800372957","display_name":"China Electronics Technology Group Corporation","ror":"https://ror.org/0098hst83","country_code":"CN","type":"company","lineage":["https://openalex.org/I2800372957"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenhao Dang","raw_affiliation_strings":["China Electronics Technology Group Corporation 15th Research Institute"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"China Electronics Technology Group Corporation 15th Research Institute","institution_ids":["https://openalex.org/I2800372957"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100670437","display_name":"Jing Ma","orcid":"https://orcid.org/0000-0002-5023-8434","observed_orcids":["https://orcid.org/0000-0002-5023-8434"]},"institutions":[{"id":"https://openalex.org/I78988378","display_name":"Renmin University of China","ror":"https://ror.org/041pakw92","country_code":"CN","type":"education","lineage":["https://openalex.org/I78988378"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Ma","raw_affiliation_strings":["BRAIN, Renmin University of China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"BRAIN, Renmin University of China","institution_ids":["https://openalex.org/I78988378"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.12514497,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"40","issue":"36","first_page":"30476","last_page":"30484"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-robustness","display_name":"adversarial robustness","score":0.921999990940094},{"id":"https://openalex.org/keywords/text-classification","display_name":"text classification","score":0.9739999771118164},{"id":"https://openalex.org/keywords/performance-robustness-trade-off","display_name":"performance-robustness trade-off","score":0.8619999885559082},{"id":"https://openalex.org/keywords/out-of-distribution-detection","display_name":"out-of-distribution detection","score":0.7599999904632568},{"id":"https://openalex.org/keywords/continuous-normalizing-flows","display_name":"continuous normalizing flows","score":0.7300000190734863},{"id":"https://openalex.org/keywords/sentence-embeddings","display_name":"sentence embeddings","score":0.5910000205039978}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8517000079154968},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6988000273704529},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.6639000177383423},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5658000111579895},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5584999918937683},{"id":"https://openalex.org/C2778770139","wikidata":"https://www.wikidata.org/wiki/Q1966904","display_name":"Solver","level":2,"score":0.508400022983551},{"id":"https://openalex.org/C165818556","wikidata":"https://www.wikidata.org/wiki/Q213488","display_name":"Geodesic","level":2,"score":0.507099986076355},{"id":"https://openalex.org/C529865628","wikidata":"https://www.wikidata.org/wiki/Q1790740","display_name":"Manifold (fluid mechanics)","level":2,"score":0.3944000005722046},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.35030001401901245},{"id":"https://openalex.org/C2777530160","wikidata":"https://www.wikidata.org/wiki/Q41796","display_name":"Sentence","level":2,"score":0.3357999920845032},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.323199987411499},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.30390000343322754},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.28459998965263367},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2838999927043915},{"id":"https://openalex.org/C5274069","wikidata":"https://www.wikidata.org/wiki/Q2285707","display_name":"Categorical variable","level":2,"score":0.26829999685287476},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.260699987411499},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.25949999690055847},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2567000091075897}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1609/aaai.v40i36.40301","doi":"https://doi.org/10.1609/aaai.v40i36.40301","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i36.40301","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/40301/44262","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-2","norway-1"],"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1609/aaai.v40i36.40301","doi":"https://doi.org/10.1609/aaai.v40i36.40301","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v40i36.40301","pdf_url":"https://ojs.aaai.org/index.php/AAAI/article/download/40301/44262","source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-2","norway-1"],"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7138366288.pdf","grobid_xml":"https://content.openalex.org/works/W7138366288.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W3177281527","https://openalex.org/W3175085978","https://openalex.org/W7128613856","https://openalex.org/W7201872310","https://openalex.org/W4225383331","https://openalex.org/W3048926460","https://openalex.org/W4316663276","https://openalex.org/W3154033929","https://openalex.org/W2981878122","https://openalex.org/W4311915778"],"abstract_inverted_index":{"A":[0,60],"persistent":[1],"challenge":[2,25],"in":[3,36,136,151],"text":[4,113],"classification":[5,114],"(TC)":[6,115],"is":[7],"that":[8,23,54,126],"enhancing":[9],"model":[10],"robustness":[11,138],"against":[12],"adversarial":[13,91,121,137],"attacks":[14],"typically":[15],"degrades":[16],"performance":[17,143],"on":[18,57,112,144],"clean":[19,34,72,145],"data.":[20],"We":[21,108],"argue":[22],"this":[24,42],"can":[26],"be":[27],"resolved":[28],"by":[29,83],"modeling":[30],"the":[31,37,46,68,71,95,99],"distribution":[32],"of":[33,70],"samples":[35],"encoder\u2019s":[38],"embedding":[39],"manifold.":[40,74],"To":[41],"end,":[43],"we":[44],"propose":[45],"Manifold-Correcting":[47],"Causal":[48],"Flow":[49,65],"(MC\u00b2F),":[50],"a":[51,84,103,133],"two-module":[52],"system":[53],"operates":[55],"directly":[56],"sentence":[58],"embeddings.":[59],"Stratified":[61],"Riemannian":[62],"Continuous":[63],"Normalizing":[64],"(SR-CNF)":[66],"learns":[67],"density":[69],"data":[73],"It":[75],"identifies":[76],"out-of-distribution":[77],"embeddings,":[78],"which":[79],"are":[80],"then":[81],"corrected":[82],"Geodesic":[85],"Purification":[86],"Solver.":[87],"This":[88],"solver":[89],"projects":[90],"points":[92],"back":[93],"onto":[94],"learned":[96],"manifold":[97],"via":[98],"shortest":[100],"path,":[101],"restoring":[102],"clean,":[104],"semantically":[105],"coherent":[106],"representation.":[107],"conducted":[109],"extensive":[110],"evaluations":[111],"across":[116],"three":[117],"datasets":[118],"and":[119],"multiple":[120],"attacks.":[122],"The":[123],"results":[124],"demonstrate":[125],"our":[127],"method,":[128],"MC\u00b2F,":[129],"not":[130],"only":[131],"establishes":[132],"new":[134],"state-of-the-art":[135],"but":[139],"also":[140],"fully":[141],"preserves":[142],"data,":[146],"even":[147],"yielding":[148],"modest":[149],"gains":[150],"Accuracy.":[152]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-02-04T00:00:00"}