Different from previous works, we evaluate the robustness of our model by creating adversarial examples with the hope to investigate the impact of introducing more syntactic information on robustness.
we create two types of adversarial examples and conduct experiments on the ATIS dataset.