In order to increase the robustness, they inject noise to input sentences by randomly changing the internal representation of sentences.
these previous approaches often depend on heuristics to generate synthetic noises, which do not always reflect the real noises on training and inference.