Before revision:  Such performanceenables us to incorporate FGPM with adversarial training as an effective defense method , and scale to large neural networks and datasets. Experiments show that the adversarial training with FGPM (ATF)significantly improves the model robustness , and blocks the transferability of adversarial examples without any decay on the model generalization .
After revision:  Such performanceenables us to incorporate FGPM with adversarial training and propose a text defense method called Adversarial Training with FGPM enhanced by Logit pairing (ATFL). Experiments show that ATFL could significantly improve the model robustness , and blocks the transferability of adversarial examples without any decay on the model generalization .