{"total":143,"rows":[{"id":"2105.13626","title":"ByT5: Towards a token-free future with pre-trained byte-to-byte models","created":"2021-05-28","cited_by_count":509,"area":null},{"id":"2103.06874","title":"CANINE: Pre-training an Efficient Tokenization-Free Encoder for Language Representation","created":"2021-03-11","cited_by_count":232,"area":null},{"id":"2311.04076","title":"Do LLMs exhibit human-like response biases? A case study in survey design","created":"2023-11-07","cited_by_count":180,"area":null},{"id":"2106.12672","title":"Charformer: Fast Character Transformers via Gradient-based Subword Tokenization","created":"2021-06-23","cited_by_count":160,"area":null},{"id":"2108.05542","title":"AMMUS : A Survey of Transformer-based Pretrained Models in Natural Language Processing","created":"2021-08-12","cited_by_count":131,"area":null},{"id":"2112.08313","title":"Measure and Improve Robustness in NLP Models: A Survey","created":"2021-12-15","cited_by_count":107,"area":null},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2206.09511","title":"The Fallacy of AI Functionality","created":"2022-06-20","cited_by_count":88,"area":null},{"id":"2108.12237","title":"Evaluating the Robustness of Neural Language Models to Input Perturbations","created":"2021-08-27","cited_by_count":87,"area":null},{"id":"2107.13541","title":"Towards Robustness Against Natural Language Word Substitutions","created":"2021-07-28","cited_by_count":69,"area":null},{"id":"2305.14950","title":"Adversarial Demonstration Attacks on Large Language Models","created":"2023-05-24","cited_by_count":63,"area":null},{"id":"2207.06991","title":"Language Modelling with Pixels","created":"2022-07-14","cited_by_count":55,"area":null},{"id":"2206.00052","title":"CodeAttack: Code-Based Adversarial Attacks for Pre-trained Programming Language Models","created":"2022-05-31","cited_by_count":53,"area":null},{"id":"2112.11668","title":"How Should Pre-Trained Language Models Be Fine-Tuned Towards Adversarial Robustness?","created":"2021-12-22","cited_by_count":49,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2109.06822","title":"LM-Critic: Language Models for Unsupervised Grammatical Error Correction","created":"2021-09-14","cited_by_count":33,"area":null},{"id":"2105.00827","title":"AMMU : A Survey of Transformer-based Biomedical Pretrained Language Models","created":"2021-04-16","cited_by_count":32,"area":null},{"id":"2203.01677","title":"Detection of Word Adversarial Examples in Text Classification: Benchmark and Baseline via Robust Density Estimation","created":"2022-03-03","cited_by_count":32,"area":null},{"id":"2105.14553","title":"Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrifice","created":"2021-05-30","cited_by_count":30,"area":null},{"id":"2210.04186","title":"Analogy Generation by Prompting Large Language Models: A Case Study of InstructGPT","created":"2022-10-09","cited_by_count":27,"area":null},{"id":"2204.04636","title":"\"That Is a Suspicious Reaction!\": Interpreting Logits Variation to Detect NLP Adversarial Attacks","created":"2022-04-10","cited_by_count":24,"area":null},{"id":"2205.12331","title":"Certified Robustness Against Natural Language Attacks by Causal Intervention","created":"2022-05-24","cited_by_count":24,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2203.07653","title":"Generalized but not Robust? Comparing the Effects of Data Modification Methods on Out-of-Domain Generalization and Adversarial Robustness","created":"2022-03-15","cited_by_count":23,"area":null},{"id":"2205.10710","title":"Phrase-level Textual Adversarial Attack with Label Preservation","created":"2022-05-22","cited_by_count":23,"area":null},{"id":"2111.05529","title":"Understanding the Generalization Benefit of Model Invariance from a Data Perspective","created":"2021-11-10","cited_by_count":22,"area":null},{"id":"2109.04367","title":"Multi-granularity Textual Adversarial Attack with Behavior Cloning","created":"2021-09-09","cited_by_count":21,"area":null},{"id":"2305.15587","title":"How do humans perceive adversarial text? A reality check on the validity and naturalness of word-based adversarial attacks","created":"2023-05-24","cited_by_count":18,"area":null},{"id":"2106.01452","title":"BERT-Defense: A Probabilistic Model Based on BERT to Combat Cognitively Inspired Orthographic Adversarial Attacks","created":"2021-06-02","cited_by_count":17,"area":null},{"id":"2109.02229","title":"Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack","created":"2021-09-06","cited_by_count":17,"area":null},{"id":"2109.06777","title":"PETGEN: Personalized Text Generation Attack on Deep Sequence Embedding-based Classification Models","created":"2021-09-14","cited_by_count":17,"area":null},{"id":"2110.08555","title":"On the Robustness of Reading Comprehension Models to Entity Renaming","created":"2021-10-16","cited_by_count":17,"area":null},{"id":"2106.05894","title":"Synthesizing Adversarial Negative Responses for Robust Response Ranking and Evaluation","created":"2021-06-10","cited_by_count":16,"area":null},{"id":"2406.01179","title":"Are AI-Generated Text Detectors Robust to Adversarial Perturbations?","created":"2024-06-03","cited_by_count":16,"area":null},{"id":"2202.03277","title":"On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2203.10378","title":"On Robust Prefix-Tuning for Text Classification","created":"2022-03-19","cited_by_count":15,"area":null},{"id":"2203.11131","title":"Towards Explainable Evaluation Metrics for Natural Language Generation","created":"2022-03-21","cited_by_count":15,"area":null},{"id":"2210.15221","title":"TASA: Deceiving Question Answering Models by Twin Answer Sentences Attack","created":"2022-10-27","cited_by_count":15,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2404.01574","title":"Multi-granular Adversarial Attacks against Black-box Neural Ranking Models","created":"2024-04-02","cited_by_count":14,"area":null},{"id":"2203.10346","title":"Perturbations in the Wild: Leveraging Human-Written Text Perturbations for Realistic Adversarial Attack and Defense","created":"2022-03-19","cited_by_count":13,"area":null},{"id":"2202.13817","title":"Robust Textual Embedding against Word-level Adversarial Attacks","created":"2022-02-28","cited_by_count":12,"area":null},{"id":"2203.10714","title":"A Prompting-based Approach for Adversarial Example Generation and Robustness Enhancement","created":"2022-03-21","cited_by_count":12,"area":null},{"id":"2110.13658","title":"Can Character-based Language Models Improve Downstream Task Performance in Low-Resource and Noisy Language Scenarios?","created":"2021-10-26","cited_by_count":11,"area":null},{"id":"2201.00768","title":"Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions","created":"2022-01-03","cited_by_count":11,"area":null},{"id":"2104.07149","title":"On the Robustness of Intent Classification and Slot Labeling in Goal-oriented Dialog Systems to Real-world Noise","created":"2021-04-14","cited_by_count":9,"area":null},{"id":"2107.11275","title":"A Differentiable Language Model Adversarial Attack on Text Classifiers","created":"2021-07-23","cited_by_count":9,"area":null},{"id":"2110.07165","title":"Semantically Distributed Robust Optimization for Vision-and-Language Inference","created":"2021-10-14","cited_by_count":9,"area":null},{"id":"2203.07860","title":"Imputing Out-of-Vocabulary Embeddings with LOVE Makes Language Models Robust with Little Cost","created":"2022-03-15","cited_by_count":9,"area":null},{"id":"2210.08906","title":"A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities","created":"2022-10-17","cited_by_count":9,"area":null},{"id":"2302.02568","title":"Less is More: Understanding Word-level Textual Adversarial Attack via n-gram Frequency Descend","created":"2023-02-06","cited_by_count":9,"area":null},{"id":"2302.05892","title":"TextDefense: Adversarial Text Detection based on Word Importance Entropy","created":"2023-02-12","cited_by_count":9,"area":null},{"id":"2303.07320","title":"Model-tuning Via Prompts Makes NLP Models Adversarially Robust","created":"2023-03-13","cited_by_count":9,"area":null},{"id":"2510.09536","title":"Evaluating Robustness of Large Language Models Against Multilingual Typographical Errors","created":"2025-10-10","cited_by_count":9,"area":null},{"id":"2109.05698","title":"Detecting Textual Adversarial Examples through Randomized Substitution and Vote","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2107.07970","title":"How Vulnerable Are Automatic Fake News Detection Methods to Adversarial Attacks?","created":"2021-07-16","cited_by_count":7,"area":null},{"id":"2109.01100","title":"How Suitable Are Subword Segmentation Strategies for Translating Non-Concatenative Morphology?","created":"2021-09-02","cited_by_count":7,"area":null},{"id":"2302.09665","title":"CitySpec with Shield: A Secure Intelligent Assistant for Requirement Formalization","created":"2023-02-19","cited_by_count":7,"area":null},{"id":"2508.14070","title":"Special-Character Adversarial Attacks on Open-Source Language Model","created":"2025-08-12","cited_by_count":7,"area":null},{"id":"2210.07904","title":"HashFormers: Towards Vocabulary-independent Pre-trained Transformers","created":"2022-10-14","cited_by_count":6,"area":null},{"id":"2308.11284","title":"LEAP: Efficient and Automated Test Method for NLP Software","created":"2023-08-22","cited_by_count":6,"area":null},{"id":"2402.17916","title":"Adversarial Math Word Problem Generation","created":"2024-02-27","cited_by_count":6,"area":null},{"id":"2509.21310","title":"SAGE: A Realistic Benchmark for Semantic Understanding","created":"2025-09-25","cited_by_count":6,"area":null},{"id":"2111.01528","title":"Effective and Imperceptible Adversarial Textual Attack via Multi-objectivization","created":"2021-11-02","cited_by_count":5,"area":null},{"id":"2202.00470","title":"An Assessment of the Impact of OCR Noise on Language Models","created":"2022-01-26","cited_by_count":5,"area":null},{"id":"2206.04137","title":"Adversarial Text Normalization","created":"2022-06-08","cited_by_count":5,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2211.04205","title":"Preserving Semantics in Textual Adversarial Attacks","created":"2022-11-08","cited_by_count":5,"area":null},{"id":"2304.08767","title":"Masked Language Model Based Textual Adversarial Example Detection","created":"2023-04-18","cited_by_count":5,"area":null},{"id":"2110.13980","title":"Adversarial Attacks and Defenses for Social Network Text Processing Applications: Techniques, Challenges and Future Research Directions","created":"2021-10-26","cited_by_count":4,"area":null},{"id":"2201.00912","title":"An Adversarial Benchmark for Fake News Detection Models","created":"2022-01-03","cited_by_count":4,"area":null},{"id":"2201.08555","title":"Identifying Adversarial Attacks on Text Classifiers","created":"2022-01-21","cited_by_count":4,"area":null},{"id":"2308.15246","title":"A Classification-Guided Approach for Adversarial Attacks against Neural Machine Translation","created":"2023-08-29","cited_by_count":4,"area":null},{"id":"2401.10407","title":"Learning High-Quality and General-Purpose Phrase Representations","created":"2024-01-18","cited_by_count":4,"area":null},{"id":"2405.04346","title":"Revisiting Character-level Adversarial Attacks for Language Models","created":"2024-05-07","cited_by_count":4,"area":null},{"id":"2406.08050","title":"Adversarial Evasion Attack Efficiency against Large Language Models","created":"2024-06-12","cited_by_count":4,"area":null},{"id":"2504.08798","title":"Exploring Gradient-Guided Masked Language Model to Detect Textual Adversarial Attacks","created":"2025-04-08","cited_by_count":4,"area":null},{"id":"2110.08036","title":"Generating Natural Language Adversarial Examples through An Improved Beam Search Algorithm","created":"2021-10-15","cited_by_count":3,"area":null},{"id":"2203.11199","title":"Distinguishing Non-natural from Natural Adversarial Samples for More Robust Pre-trained Language Model","created":"2022-03-19","cited_by_count":3,"area":null},{"id":"2211.15363","title":"On the Security Vulnerabilities of Text-to-SQL Models","created":"2022-11-28","cited_by_count":3,"area":null},{"id":"2302.09207","title":"RETVec: Resilient and Efficient Text Vectorizer","created":"2023-02-18","cited_by_count":3,"area":null},{"id":"2303.05077","title":"Learning the Legibility of Visual Text Perturbations","created":"2023-03-09","cited_by_count":3,"area":null},{"id":"2305.04067","title":"The Best Defense is Attack: Repairing Semantics in Textual Adversarial Examples","created":"2023-05-06","cited_by_count":3,"area":null},{"id":"2305.18503","title":"From Adversarial Arms Race to Model-centric Evaluation: Motivating a Unified Automatic Robustness Evaluation Framework","created":"2023-05-29","cited_by_count":3,"area":null},{"id":"2306.04874","title":"Expanding Scope: Adapting English Adversarial Attacks to Chinese","created":"2023-06-08","cited_by_count":3,"area":null},{"id":"2310.14001","title":"Toward Stronger Textual Attack Detectors","created":"2023-10-21","cited_by_count":3,"area":null},{"id":"2501.16836","title":"Misspellings in Natural Language Processing: A survey","created":"2025-01-28","cited_by_count":3,"area":null},{"id":"2605.08044","title":"Fast Byte Latent Transformer","created":"2026-05-08","cited_by_count":3,"area":null},{"id":"2606.09658","title":"Muon Learns More Robust and Transferable Features than Adam","created":"2026-06-08","cited_by_count":3,"area":null},{"id":"2101.08523","title":"Adv-OLM: Generating Textual Adversaries via OLM","created":"2021-01-21","cited_by_count":2,"area":null},{"id":"2101.08675","title":"Adversarial Machine Learning in Text Analysis and Generation","created":"2021-01-14","cited_by_count":2,"area":null},{"id":"2203.12298","title":"Input-specific Attention Subnetworks for Adversarial Detection","created":"2022-03-23","cited_by_count":2,"area":null},{"id":"2204.13853","title":"Detecting Textual Adversarial Examples Based on Distributional Characteristics of Data Representations","created":"2022-04-29","cited_by_count":2,"area":null},{"id":"2210.12233","title":"TCAB: A Large-Scale Text Classification Attack Benchmark","created":"2022-10-21","cited_by_count":2,"area":null},{"id":"2210.12396","title":"ADDMU: Detection of Far-Boundary Adversarial Examples with Data and Model Uncertainty Estimation","created":"2022-10-22","cited_by_count":2,"area":null},{"id":"2306.12043","title":"Sample Attackability in Natural Language Adversarial Attacks","created":"2023-06-21","cited_by_count":2,"area":null},{"id":"2307.02912","title":"LEA: Improving Sentence Similarity Robustness to Typos Using Lexical Attention Bias","created":"2023-07-06","cited_by_count":2,"area":null},{"id":"2409.17774","title":"Faithfulness and the Notion of Adversarial Sensitivity in NLP Explanations","created":"2024-09-26","cited_by_count":2,"area":null},{"id":"2412.20087","title":"On the Validity of Traditional Vulnerability Scoring Systems for Adversarial Attacks against LLMs","created":"2024-12-28","cited_by_count":2,"area":null},{"id":"2501.02654","title":"Tougher Text, Smarter Models: Raising the Bar for Adversarial Defence Benchmarks","created":"2025-01-05","cited_by_count":2,"area":null}],"next_cursor":"100"}