Johnny Still Receives Spam SMS: Assessing the Robustness of SMS Spam Detection
A multi-model ensemble that combines adversarial training with spam classifiers diverse in architecture and tokenization substantially improves robustness against both perceptible and imperceptible adversarial attacks while maintaining competitive classification accuracy.