{"total":306,"rows":[{"id":"2104.13733","title":"Gradient-based Adversarial Attacks against Text Transformers","created":"2021-04-15","cited_by_count":234,"area":null},{"id":"2111.02840","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","created":"2021-11-04","cited_by_count":232,"area":null},{"id":"2401.14446","title":"Black-Box Access is Insufficient for Rigorous AI Audits","created":"2024-01-25","cited_by_count":126,"area":null},{"id":"2103.11943","title":"BERT: A Review of Applications in Natural Language Processing and Understanding","created":"2021-03-22","cited_by_count":109,"area":null},{"id":"2112.08313","title":"Measure and Improve Robustness in NLP Models: A Survey","created":"2021-12-15","cited_by_count":107,"area":null},{"id":"2306.04618","title":"Revisiting Out-of-distribution Robustness in NLP: Benchmark, Analysis, and LLMs Evaluations","created":"2023-06-07","cited_by_count":97,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2308.12833","title":"Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilities","created":"2023-08-24","cited_by_count":82,"area":null},{"id":"2106.09898","title":"Bad Characters: Imperceptible NLP Attacks","created":"2021-06-18","cited_by_count":71,"area":null},{"id":"2310.04655","title":"VLATTACK: Multimodal Adversarial Attacks on Vision-Language Tasks via Pre-trained Models","created":"2023-10-07","cited_by_count":68,"area":null},{"id":"2106.06663","title":"TDGIA:Effective Injection Attacks on Graph Neural Networks","created":"2021-06-12","cited_by_count":67,"area":null},{"id":"2305.14950","title":"Adversarial Demonstration Attacks on Large Language Models","created":"2023-05-24","cited_by_count":63,"area":null},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2204.05239","title":"Exploring the Universal Vulnerability of Prompt-based Learning Paradigm","created":"2022-04-11","cited_by_count":57,"area":null},{"id":"2108.12777","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","created":"2021-08-29","cited_by_count":56,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2103.10013","title":"Model Extraction and Adversarial Transferability, Your BERT is Vulnerable!","created":"2021-03-18","cited_by_count":53,"area":null},{"id":"2206.00052","title":"CodeAttack: Code-Based Adversarial Attacks for Pre-trained Programming Language Models","created":"2022-05-31","cited_by_count":53,"area":null},{"id":"2112.13214","title":"NeuronFair: Interpretable White-Box Fairness Testing through Biased Neuron Identification","created":"2021-12-25","cited_by_count":42,"area":null},{"id":"2205.01287","title":"SemAttack: Natural Textual Attacks via Different Semantic Spaces","created":"2022-05-03","cited_by_count":42,"area":null},{"id":"2301.12868","title":"On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codex","created":"2023-01-30","cited_by_count":41,"area":null},{"id":"2304.08979","title":"In ChatGPT We Trust? Measuring and Characterizing the Reliability of ChatGPT","created":"2023-04-18","cited_by_count":37,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2309.01686","title":"MathAttack: Attacking Large Language Models Towards Math Solving Ability","created":"2023-09-04","cited_by_count":32,"area":null},{"id":"2108.04990","title":"Perturbing Inputs for Fragile Interpretations in Deep Natural Language Processing","created":"2021-08-11","cited_by_count":30,"area":null},{"id":"2305.10235","title":"Assessing Hidden Risks of LLMs: An Empirical Study on Robustness, Consistency, and Credibility","created":"2023-05-15","cited_by_count":30,"area":null},{"id":"2110.15317","title":"Bridge the Gap Between CV and NLP! A Gradient-based Textual Adversarial Attack Framework","created":"2021-10-28","cited_by_count":28,"area":null},{"id":"2111.02705","title":"Benchmarking Multimodal AutoML for Tabular Data with Text Fields","created":"2021-11-04","cited_by_count":26,"area":null},{"id":"2402.11638","title":"Stumbling Blocks: Stress Testing the Robustness of Machine-Generated Text Detectors Under Attacks","created":"2024-02-18","cited_by_count":26,"area":null},{"id":"2105.02590","title":"Reliability Testing for Natural Language Processing Systems","created":"2021-05-06","cited_by_count":25,"area":null},{"id":"2106.05251","title":"Bayesian Attention Belief Networks","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2508.13152","title":"RepreGuard: Detecting LLM-Generated Text by Revealing Hidden Representation Patterns","created":"2025-08-18","cited_by_count":24,"area":null},{"id":"2103.09593","title":"Code-Mixing on Sesame Street: Dawn of the Adversarial Polyglots","created":"2021-03-17","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2205.10710","title":"Phrase-level Textual Adversarial Attack with Label Preservation","created":"2022-05-22","cited_by_count":23,"area":null},{"id":"2307.07171","title":"Certified Robustness for Large Language Models with Self-Denoising","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2302.05706","title":"MTTM: Metamorphic Testing for Textual Content Moderation Software","created":"2023-02-11","cited_by_count":22,"area":null},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2405.02764","title":"Assessing Adversarial Robustness of Large Language Models: An Empirical Study","created":"2024-05-04","cited_by_count":21,"area":null},{"id":"2306.15261","title":"A Survey on Out-of-Distribution Evaluation of Neural NLP Models","created":"2023-06-27","cited_by_count":20,"area":null},{"id":"2404.09754","title":"Resilience of Large Language Models for Noisy Instructions","created":"2024-04-15","cited_by_count":20,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2102.07818","title":"Certified Robustness to Programmable Transformations in LSTMs","created":"2021-02-15","cited_by_count":18,"area":null},{"id":"2305.15587","title":"How do humans perceive adversarial text? A reality check on the validity and naturalness of word-based adversarial attacks","created":"2023-05-24","cited_by_count":18,"area":null},{"id":"2107.08362","title":"Probabilistic Verification of Neural Networks Against Group Fairness","created":"2021-07-18","cited_by_count":17,"area":null},{"id":"2109.02229","title":"Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack","created":"2021-09-06","cited_by_count":17,"area":null},{"id":"2109.06777","title":"PETGEN: Personalized Text Generation Attack on Deep Sequence Embedding-based Classification Models","created":"2021-09-14","cited_by_count":17,"area":null},{"id":"2206.05511","title":"Improving the Adversarial Robustness of NLP Models by Information Bottleneck","created":"2022-06-11","cited_by_count":17,"area":null},{"id":"2504.02733","title":"Enhancing LLM Robustness to Perturbed Instructions: An Empirical Study","created":"2025-04-03","cited_by_count":17,"area":null},{"id":"2109.04775","title":"A Strong Baseline for Query Efficient Attacks in a Black Box Setting","created":"2021-09-10","cited_by_count":16,"area":null},{"id":"2210.03696","title":"LLMEffiChecker: Understanding and Testing Efficiency Degradation of Large Language Models","created":"2022-10-07","cited_by_count":16,"area":null},{"id":"2211.03013","title":"Robust Lottery Tickets for Pre-trained Language Models","created":"2022-11-06","cited_by_count":16,"area":null},{"id":"2402.01806","title":"HQA-Attack: Toward High Quality Black-Box Hard-Label Adversarial Attack on Text","created":"2024-02-02","cited_by_count":16,"area":null},{"id":"2403.10144","title":"NLP Verification: Towards a General Methodology for Certifying Robustness","created":"2024-03-15","cited_by_count":16,"area":null},{"id":"2202.03277","title":"On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2202.06043","title":"RoPGen: Towards Robust Code Authorship Attribution via Automatic Coding Style Transformation","created":"2022-02-12","cited_by_count":15,"area":null},{"id":"2203.10378","title":"On Robust Prefix-Tuning for Text Classification","created":"2022-03-19","cited_by_count":15,"area":null},{"id":"2205.06439","title":"AEON: A Method for Automatic Evaluation of NLP Test Cases","created":"2022-05-13","cited_by_count":15,"area":null},{"id":"2209.01882","title":"PromptAttack: Prompt-based Attack for Language Models via Gradient Search","created":"2022-09-05","cited_by_count":15,"area":null},{"id":"2210.15221","title":"TASA: Deceiving Question Answering Models by Twin Answer Sentences Attack","created":"2022-10-27","cited_by_count":15,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2107.08176","title":"Automatic Fairness Testing of Neural Classifiers through Adversarial Sampling","created":"2021-07-17","cited_by_count":14,"area":null},{"id":"2110.12567","title":"Alignment Attention by Matching Key and Query Distributions","created":"2021-10-25","cited_by_count":14,"area":null},{"id":"2305.03655","title":"White-Box Multi-Objective Adversarial Attack on Dialogue Generation","created":"2023-05-05","cited_by_count":14,"area":null},{"id":"2402.01096","title":"Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance","created":"2024-02-02","cited_by_count":14,"area":null},{"id":"2402.12100","title":"Groot: Adversarial Testing for Generative Text-to-Image Models with Tree-based Semantic Transformation","created":"2024-02-19","cited_by_count":14,"area":null},{"id":"2404.01574","title":"Multi-granular Adversarial Attacks against Black-box Neural Ranking Models","created":"2024-04-02","cited_by_count":14,"area":null},{"id":"2404.08690","title":"Towards Building a Robust Toxicity Predictor","created":"2024-04-09","cited_by_count":14,"area":null},{"id":"2501.16750","title":"HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns","created":"2025-01-28","cited_by_count":14,"area":null},{"id":"2104.05996","title":"Fall of Giants: How popular text-based MLaaS fall against a simple evasion attack","created":"2021-04-13","cited_by_count":13,"area":null},{"id":"2203.10346","title":"Perturbations in the Wild: Leveraging Human-Written Text Perturbations for Realistic Adversarial Attack and Defense","created":"2022-03-19","cited_by_count":13,"area":null},{"id":"2405.20701","title":"Unveiling the Lexical Sensitivity of LLMs: Combinatorial Optimization for Prompt Enhancement","created":"2024-05-31","cited_by_count":13,"area":null},{"id":"2103.00676","title":"Token-Modification Adversarial Attacks for Natural Language Processing: A Survey","created":"2021-03-01","cited_by_count":12,"area":null},{"id":"2202.13817","title":"Robust Textual Embedding against Word-level Adversarial Attacks","created":"2022-02-28","cited_by_count":12,"area":null},{"id":"2203.12709","title":"Adversarial Training for Improving Model Robustness? Look at Both Prediction and Interpretation","created":"2022-03-23","cited_by_count":12,"area":null},{"id":"2311.11861","title":"Generating Valid and Natural Adversarial Examples with Large Language Models","created":"2023-11-20","cited_by_count":12,"area":null},{"id":"2101.06930","title":"Generative Counterfactuals for Neural Networks via Attribute-Informed Perturbation","created":"2021-01-18","cited_by_count":11,"area":null},{"id":"2112.10424","title":"Unifying Model Explainability and Robustness for Joint Text Classification and Rationale Extraction","created":"2021-12-20","cited_by_count":11,"area":null},{"id":"2207.11237","title":"Defending Substitution-Based Profile Pollution Attacks on Sequential Recommenders","created":"2022-07-19","cited_by_count":11,"area":null},{"id":"2201.08193","title":"TextHacker: Learning based Hybrid Local Search Algorithm for Text Hard-label Adversarial Attack","created":"2022-01-20","cited_by_count":10,"area":null},{"id":"2309.01866","title":"Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting","created":"2023-09-05","cited_by_count":10,"area":null},{"id":"2311.17400","title":"Improving the Robustness of Transformer-based Large Language Models with Dynamic Attention","created":"2023-11-29","cited_by_count":10,"area":null},{"id":"2406.19230","title":"Spiking Convolutional Neural Networks for Text Classification","created":"2024-06-27","cited_by_count":10,"area":null},{"id":"2505.24341","title":"Exploring Multimodal Challenges in Toxic Chinese Detection: Taxonomy, Benchmark, and Findings","created":"2025-05-30","cited_by_count":10,"area":null},{"id":"2107.11275","title":"A Differentiable Language Model Adversarial Attack on Text Classifiers","created":"2021-07-23","cited_by_count":9,"area":null},{"id":"2302.02568","title":"Less is More: Understanding Word-level Textual Adversarial Attack via n-gram Frequency Descend","created":"2023-02-06","cited_by_count":9,"area":null},{"id":"2302.05892","title":"TextDefense: Adversarial Text Detection based on Word Importance Entropy","created":"2023-02-12","cited_by_count":9,"area":null},{"id":"2303.07320","title":"Model-tuning Via Prompts Makes NLP Models Adversarially Robust","created":"2023-03-13","cited_by_count":9,"area":null},{"id":"2308.00319","title":"LimeAttack: Local Explainable Method for Textual Hard-Label Adversarial Attack","created":"2023-08-01","cited_by_count":9,"area":null},{"id":"2510.09536","title":"Evaluating Robustness of Large Language Models Against Multilingual Typographical Errors","created":"2025-10-10","cited_by_count":9,"area":null},{"id":"2109.05698","title":"Detecting Textual Adversarial Examples through Randomized Substitution and Vote","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2109.07028","title":"Avengers Ensemble! Improving Transferability of Authorship Obfuscation","created":"2021-09-15","cited_by_count":8,"area":null},{"id":"2203.11331","title":"On The Robustness of Offensive Language Classifiers","created":"2022-03-21","cited_by_count":8,"area":null},{"id":"2204.10192","title":"Residue-Based Natural Language Adversarial Attack Detection","created":"2022-04-17","cited_by_count":8,"area":null},{"id":"2305.16444","title":"Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Text","created":"2023-05-25","cited_by_count":8,"area":null},{"id":"2306.16526","title":"Shilling Black-box Review-based Recommender Systems through Fake Review Generation","created":"2023-06-27","cited_by_count":8,"area":null},{"id":"2402.08183","title":"Pixel Sentence Representation Learning","created":"2024-02-13","cited_by_count":8,"area":null},{"id":"2503.19540","title":"FLEX: A Benchmark for Evaluating Robustness of Fairness in Large Language Models","created":"2025-03-25","cited_by_count":8,"area":null},{"id":"2107.07970","title":"How Vulnerable Are Automatic Fake News Detection Methods to Adversarial Attacks?","created":"2021-07-16","cited_by_count":7,"area":null},{"id":"2111.08529","title":"Improving the robustness and accuracy of biomedical language models through adversarial training","created":"2021-11-16","cited_by_count":7,"area":null}],"next_cursor":"100"}