, y t−1 up to step t − 1 during decoding, the probability that the model makes an error at the next step t is maximized.
in the log-semiring, this translates into the following loss function: to previous methods, which don't consider meaning preservation, we propose simple modifications of the approach presented in §3.1 to create adversarial perturbations at the word level that are more likely to preserve meaning.