{"total":352,"rows":[{"id":"2305.01937","title":"Can Large Language Models Be an Alternative to Human Evaluations?","created":"2023-05-03","cited_by_count":734,"area":null},{"id":"2208.03274","title":"A Holistic Approach to Undesired Content Detection in the Real World","created":"2022-08-05","cited_by_count":356,"area":null},{"id":"2102.01356","title":"Recent Advances in Adversarial Training for Adversarial Robustness","created":"2021-02-02","cited_by_count":279,"area":null},{"id":"2104.13733","title":"Gradient-based Adversarial Attacks against Text Transformers","created":"2021-04-15","cited_by_count":234,"area":null},{"id":"2303.04381","title":"Automatically Auditing Large Language Models via Discrete Optimization","created":"2023-03-08","cited_by_count":191,"area":null},{"id":"2302.13007","title":"AugGPT: Leveraging ChatGPT for Text Data Augmentation","created":"2023-02-25","cited_by_count":130,"area":null},{"id":"2107.03158","title":"A Survey on Data Augmentation for Text Classification","created":"2021-07-07","cited_by_count":111,"area":null},{"id":"2106.01065","title":"Towards Robustness of Text-to-SQL Models against Synonym Substitution","created":"2021-06-02","cited_by_count":110,"area":null},{"id":"2112.08313","title":"Measure and Improve Robustness in NLP Models: A Survey","created":"2021-12-15","cited_by_count":107,"area":null},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2106.07499","title":"An Empirical Survey of Data Augmentation for Limited Data Learning in NLP","created":"2021-06-14","cited_by_count":101,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2109.00544","title":"Towards Improving Adversarial Training of NLP Models","created":"2021-09-01","cited_by_count":79,"area":null},{"id":"2110.07736","title":"Identifying and Mitigating Spurious Correlations for Improving Robustness in NLP Models","created":"2021-10-14","cited_by_count":76,"area":null},{"id":"2310.14735","title":"Unleashing the potential of prompt engineering for large language models","created":"2023-10-23","cited_by_count":72,"area":null},{"id":"2106.09898","title":"Bad Characters: Imperceptible NLP Attacks","created":"2021-06-18","cited_by_count":71,"area":null},{"id":"2310.15654","title":"A Survey on Detection of LLMs-Generated Content","created":"2023-10-24","cited_by_count":71,"area":null},{"id":"2107.13541","title":"Towards Robustness Against Natural Language Word Substitutions","created":"2021-07-28","cited_by_count":69,"area":null},{"id":"2209.02128","title":"Evaluating the Susceptibility of Pre-Trained Language Models via Handcrafted Adversarial Examples","created":"2022-09-05","cited_by_count":69,"area":null},{"id":"2305.14950","title":"Adversarial Demonstration Attacks on Large Language Models","created":"2023-05-24","cited_by_count":63,"area":null},{"id":"2309.14700","title":"Structure Invariant Transformation for better Adversarial Transferability","created":"2023-09-26","cited_by_count":62,"area":null},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2108.12777","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","created":"2021-08-29","cited_by_count":56,"area":null},{"id":"2105.03640","title":"On Guaranteed Optimal Robust Explanations for NLP Models","created":"2021-05-08","cited_by_count":54,"area":null},{"id":"2206.00052","title":"CodeAttack: Code-Based Adversarial Attacks for Pre-trained Programming Language Models","created":"2022-05-31","cited_by_count":53,"area":null},{"id":"2203.03825","title":"Incorporating Hierarchy into Text Encoder: a Contrastive Learning Approach for Hierarchical Text Classification","created":"2022-03-08","cited_by_count":52,"area":null},{"id":"2107.00440","title":"CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understanding","created":"2021-07-01","cited_by_count":50,"area":null},{"id":"2112.11668","title":"How Should Pre-Trained Language Models Be Fine-Tuned Towards Adversarial Robustness?","created":"2021-12-22","cited_by_count":49,"area":null},{"id":"2203.08392","title":"Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?","created":"2022-03-16","cited_by_count":49,"area":null},{"id":"2311.08648","title":"Explore Spurious Correlations at the Concept Level in Language Models for Text Classification","created":"2023-11-15","cited_by_count":48,"area":null},{"id":"2204.03031","title":"VALUE: Understanding Dialect Disparity in NLU","created":"2022-04-06","cited_by_count":47,"area":null},{"id":"2101.10579","title":"Generating Syntactically Controlled Paraphrases without Using Annotated Parallel Pairs","created":"2021-01-26","cited_by_count":45,"area":null},{"id":"2410.07137","title":"Cheating Automatic LLM Benchmarks: Null Models Achieve High Win Rates","created":"2024-10-09","cited_by_count":45,"area":null},{"id":"2101.03453","title":"BERT & Family Eat Word Salad: Experiments with Text Understanding","created":"2021-01-10","cited_by_count":44,"area":null},{"id":"2205.01287","title":"SemAttack: Natural Textual Attacks via Different Semantic Spaces","created":"2022-05-03","cited_by_count":42,"area":null},{"id":"2301.12868","title":"On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codex","created":"2023-01-30","cited_by_count":41,"area":null},{"id":"2104.05824","title":"Evaluating Saliency Methods for Neural Language Models","created":"2021-04-12","cited_by_count":37,"area":null},{"id":"2106.15023","title":"Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent","created":"2021-06-28","cited_by_count":35,"area":null},{"id":"2305.09859","title":"Smaller Language Models are Better Black-box Machine-Generated Text Detectors","created":"2023-05-17","cited_by_count":35,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2309.14122","title":"SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitution","created":"2023-09-25","cited_by_count":34,"area":null},{"id":"2104.08782","title":"On the Sensitivity and Stability of Model Interpretations in NLP","created":"2021-04-18","cited_by_count":30,"area":null},{"id":"2105.14553","title":"Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrifice","created":"2021-05-30","cited_by_count":30,"area":null},{"id":"2108.04990","title":"Perturbing Inputs for Fragile Interpretations in Deep Natural Language Processing","created":"2021-08-11","cited_by_count":30,"area":null},{"id":"2305.10235","title":"Assessing Hidden Risks of LLMs: An Empirical Study on Robustness, Consistency, and Credibility","created":"2023-05-15","cited_by_count":30,"area":null},{"id":"2103.11576","title":"Grey-box Adversarial Attack And Defence For Sentiment Classification","created":"2021-03-22","cited_by_count":28,"area":null},{"id":"2110.15317","title":"Bridge the Gap Between CV and NLP! A Gradient-based Textual Adversarial Attack Framework","created":"2021-10-28","cited_by_count":28,"area":null},{"id":"2109.13986","title":"Symbolic Brittleness in Sequence Models: on Systematic Generalization in Symbolic Mathematics","created":"2021-09-28","cited_by_count":27,"area":null},{"id":"2101.00411","title":"Substructure Substitution: Structured Data Augmentation for NLP","created":"2021-01-02","cited_by_count":25,"area":null},{"id":"2105.02590","title":"Reliability Testing for Natural Language Processing Systems","created":"2021-05-06","cited_by_count":25,"area":null},{"id":"2203.07983","title":"Adversarial Robustness of Neural-Statistical Features in Detection of Generative Transformers","created":"2022-03-02","cited_by_count":25,"area":null},{"id":"2103.14453","title":"Data Augmentation in Natural Language Processing: A Novel Text Generation Approach for Long and Short Text Classifiers","created":"2021-03-26","cited_by_count":24,"area":null},{"id":"2204.04636","title":"\"That Is a Suspicious Reaction!\": Interpreting Logits Variation to Detect NLP Adversarial Attacks","created":"2022-04-10","cited_by_count":24,"area":null},{"id":"2205.12331","title":"Certified Robustness Against Natural Language Attacks by Causal Intervention","created":"2022-05-24","cited_by_count":24,"area":null},{"id":"2103.09593","title":"Code-Mixing on Sesame Street: Dawn of the Adversarial Polyglots","created":"2021-03-17","cited_by_count":23,"area":null},{"id":"2104.05062","title":"Achieving Model Robustness through Discrete Adversarial Training","created":"2021-04-11","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2203.07653","title":"Generalized but not Robust? Comparing the Effects of Data Modification Methods on Out-of-Domain Generalization and Adversarial Robustness","created":"2022-03-15","cited_by_count":23,"area":null},{"id":"2205.10710","title":"Phrase-level Textual Adversarial Attack with Label Preservation","created":"2022-05-22","cited_by_count":23,"area":null},{"id":"2209.07735","title":"Enhance the Visual Representation via Discrete Adversarial Training","created":"2022-09-16","cited_by_count":23,"area":null},{"id":"2103.11263","title":"Self-Supervised Test-Time Learning for Reading Comprehension","created":"2021-03-20","cited_by_count":22,"area":null},{"id":"2112.01156","title":"A Unified Framework for Adversarial Attack and Defense in Constrained Feature Space","created":"2021-12-02","cited_by_count":22,"area":null},{"id":"2206.08575","title":"Query-Efficient and Scalable Black-Box Adversarial Attacks on Discrete Sequential Data via Bayesian Optimization","created":"2022-06-17","cited_by_count":22,"area":null},{"id":"2301.02724","title":"Facilitating Contrastive Learning of Discourse Relational Senses by Exploiting the Hierarchy of Sense Relations","created":"2023-01-06","cited_by_count":22,"area":null},{"id":"2412.03597","title":"The Vulnerability of Language Model Benchmarks: Do They Accurately Reflect True LLM Performance?","created":"2024-12-02","cited_by_count":22,"area":null},{"id":"2104.08645","title":"Improving Zero-Shot Cross-Lingual Transfer Learning via Robust Training","created":"2021-04-17","cited_by_count":21,"area":null},{"id":"2109.04367","title":"Multi-granularity Textual Adversarial Attack with Behavior Cloning","created":"2021-09-09","cited_by_count":21,"area":null},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2405.02764","title":"Assessing Adversarial Robustness of Large Language Models: An Empirical Study","created":"2024-05-04","cited_by_count":21,"area":null},{"id":"2106.10826","title":"Does Robustness Improve Fairness? Approaching Fairness with Word Substitution Robustness Methods for Text Classification","created":"2021-06-21","cited_by_count":20,"area":null},{"id":"2109.05925","title":"Adversarial Examples for Evaluating Math Word Problem Solvers","created":"2021-09-13","cited_by_count":20,"area":null},{"id":"2306.15261","title":"A Survey on Out-of-Distribution Evaluation of Neural NLP Models","created":"2023-06-27","cited_by_count":20,"area":null},{"id":"2106.06685","title":"Adversarial Robustness via Fisher-Rao Regularization","created":"2021-06-12","cited_by_count":19,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2208.11613","title":"Unrestricted Black-box Adversarial Attack Using GAN with Limited Queries","created":"2022-08-24","cited_by_count":18,"area":null},{"id":"2305.15587","title":"How do humans perceive adversarial text? A reality check on the validity and naturalness of word-based adversarial attacks","created":"2023-05-24","cited_by_count":18,"area":null},{"id":"2106.01452","title":"BERT-Defense: A Probabilistic Model Based on BERT to Combat Cognitively Inspired Orthographic Adversarial Attacks","created":"2021-06-02","cited_by_count":17,"area":null},{"id":"2107.08362","title":"Probabilistic Verification of Neural Networks Against Group Fairness","created":"2021-07-18","cited_by_count":17,"area":null},{"id":"2109.02229","title":"Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack","created":"2021-09-06","cited_by_count":17,"area":null},{"id":"2206.05511","title":"Improving the Adversarial Robustness of NLP Models by Information Bottleneck","created":"2022-06-11","cited_by_count":17,"area":null},{"id":"2106.05894","title":"Synthesizing Adversarial Negative Responses for Robust Response Ranking and Evaluation","created":"2021-06-10","cited_by_count":16,"area":null},{"id":"2109.04775","title":"A Strong Baseline for Query Efficient Attacks in a Black Box Setting","created":"2021-09-10","cited_by_count":16,"area":null},{"id":"2112.07605","title":"The King is Naked: on the Notion of Robustness for Natural Language Processing","created":"2021-12-13","cited_by_count":16,"area":null},{"id":"2203.14207","title":"Text Adversarial Purification as Defense against Adversarial Attacks","created":"2022-03-27","cited_by_count":16,"area":null},{"id":"2402.01806","title":"HQA-Attack: Toward High Quality Black-Box Hard-Label Adversarial Attack on Text","created":"2024-02-02","cited_by_count":16,"area":null},{"id":"2505.14279","title":"YESciEval: Robust LLM-as-a-Judge for Scientific Question Answering","created":"2025-05-20","cited_by_count":16,"area":null},{"id":"2202.03277","title":"On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2203.10378","title":"On Robust Prefix-Tuning for Text Classification","created":"2022-03-19","cited_by_count":15,"area":null},{"id":"2203.11131","title":"Towards Explainable Evaluation Metrics for Natural Language Generation","created":"2022-03-21","cited_by_count":15,"area":null},{"id":"2205.01094","title":"A Word is Worth A Thousand Dollars: Adversarial Attack on Tweets Fools Stock Predictions","created":"2022-05-01","cited_by_count":15,"area":null},{"id":"2205.11097","title":"A Fine-grained Interpretability Evaluation Benchmark for Neural NLP","created":"2022-05-23","cited_by_count":15,"area":null},{"id":"2206.11433","title":"Shilling Black-box Recommender Systems by Learning to Generate Fake User Profiles","created":"2022-06-23","cited_by_count":15,"area":null},{"id":"2210.04992","title":"Extracting or Guessing? Improving Faithfulness of Event Temporal Relation Extraction","created":"2022-10-10","cited_by_count":15,"area":null},{"id":"2210.15221","title":"TASA: Deceiving Question Answering Models by Twin Answer Sentences Attack","created":"2022-10-27","cited_by_count":15,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2211.03769","title":"Are AlphaZero-like Agents Robust to Adversarial Perturbations?","created":"2022-11-07","cited_by_count":14,"area":null},{"id":"2404.08690","title":"Towards Building a Robust Toxicity Predictor","created":"2024-04-09","cited_by_count":14,"area":null},{"id":"2104.05996","title":"Fall of Giants: How popular text-based MLaaS fall against a simple evasion attack","created":"2021-04-13","cited_by_count":13,"area":null},{"id":"2205.12593","title":"Less Learn Shortcut: Analyzing and Mitigating Learning of Spurious Feature-Label Correlation","created":"2022-05-25","cited_by_count":13,"area":null}],"next_cursor":"100"}