attack
supporting facts changes: character replacement, replace the word (with a space embedding or near synonyms, conjugations, etc.)
As well as for the question of the attack.
Gradient descent, made attacks on embediing, how to decode a problem.
defense
If the sample is added to a large number of combat training with not enough training samples show that the role is not large, at any time there may be a new confrontation sample.
Tackling Adversarial Examples in QA via Answer Sentence Selection
of this talk is to screen candidate sentence, and then to answer reasoning.