{"total":151,"rows":[{"id":"2105.03075","title":"A Survey of Data Augmentation Approaches for NLP","created":"2021-05-07","cited_by_count":409,"area":null},{"id":"2111.02840","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","created":"2021-11-04","cited_by_count":232,"area":null},{"id":"2112.07566","title":"VALSE: A Task-Independent Benchmark for Vision and Language Models Centered on Linguistic Phenomena","created":"2021-12-14","cited_by_count":135,"area":null},{"id":"2104.14690","title":"Entailment as Few-Shot Learner","created":"2021-04-29","cited_by_count":123,"area":null},{"id":"2112.08313","title":"Measure and Improve Robustness in NLP Models: A Survey","created":"2021-12-15","cited_by_count":107,"area":null},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2109.00544","title":"Towards Improving Adversarial Training of NLP Models","created":"2021-09-01","cited_by_count":79,"area":null},{"id":"2106.09898","title":"Bad Characters: Imperceptible NLP Attacks","created":"2021-06-18","cited_by_count":71,"area":null},{"id":"2107.13541","title":"Towards Robustness Against Natural Language Word Substitutions","created":"2021-07-28","cited_by_count":69,"area":null},{"id":"2305.14950","title":"Adversarial Demonstration Attacks on Large Language Models","created":"2023-05-24","cited_by_count":63,"area":null},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2108.12777","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","created":"2021-08-29","cited_by_count":56,"area":null},{"id":"2105.03640","title":"On Guaranteed Optimal Robust Explanations for NLP Models","created":"2021-05-08","cited_by_count":54,"area":null},{"id":"2106.06052","title":"Dynaboard: An Evaluation-As-A-Service Platform for Holistic Next-Generation Benchmarking","created":"2021-05-21","cited_by_count":53,"area":null},{"id":"2112.11668","title":"How Should Pre-Trained Language Models Be Fine-Tuned Towards Adversarial Robustness?","created":"2021-12-22","cited_by_count":49,"area":null},{"id":"2301.12868","title":"On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codex","created":"2023-01-30","cited_by_count":41,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2104.08782","title":"On the Sensitivity and Stability of Model Interpretations in NLP","created":"2021-04-18","cited_by_count":30,"area":null},{"id":"2105.14553","title":"Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrifice","created":"2021-05-30","cited_by_count":30,"area":null},{"id":"2308.11804","title":"Adversarial Illusions in Multi-Modal Embeddings","created":"2023-08-22","cited_by_count":29,"area":null},{"id":"2103.11576","title":"Grey-box Adversarial Attack And Defence For Sentiment Classification","created":"2021-03-22","cited_by_count":28,"area":null},{"id":"2109.13986","title":"Symbolic Brittleness in Sequence Models: on Systematic Generalization in Symbolic Mathematics","created":"2021-09-28","cited_by_count":27,"area":null},{"id":"2403.09606","title":"Large Language Models and Causal Inference in Collaboration: A Survey","created":"2024-03-14","cited_by_count":26,"area":null},{"id":"2106.05532","title":"How Robust are Model Rankings: A Leaderboard Customization Approach for Equitable Evaluation","created":"2021-06-10","cited_by_count":24,"area":null},{"id":"2204.04636","title":"\"That Is a Suspicious Reaction!\": Interpreting Logits Variation to Detect NLP Adversarial Attacks","created":"2022-04-10","cited_by_count":24,"area":null},{"id":"2205.12331","title":"Certified Robustness Against Natural Language Attacks by Causal Intervention","created":"2022-05-24","cited_by_count":24,"area":null},{"id":"2104.05062","title":"Achieving Model Robustness through Discrete Adversarial Training","created":"2021-04-11","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2203.07653","title":"Generalized but not Robust? Comparing the Effects of Data Modification Methods on Out-of-Domain Generalization and Adversarial Robustness","created":"2022-03-15","cited_by_count":23,"area":null},{"id":"2205.10710","title":"Phrase-level Textual Adversarial Attack with Label Preservation","created":"2022-05-22","cited_by_count":23,"area":null},{"id":"2307.07171","title":"Certified Robustness for Large Language Models with Self-Denoising","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2103.11263","title":"Self-Supervised Test-Time Learning for Reading Comprehension","created":"2021-03-20","cited_by_count":22,"area":null},{"id":"2104.08645","title":"Improving Zero-Shot Cross-Lingual Transfer Learning via Robust Training","created":"2021-04-17","cited_by_count":21,"area":null},{"id":"2106.10826","title":"Does Robustness Improve Fairness? Approaching Fairness with Word Substitution Robustness Methods for Text Classification","created":"2021-06-21","cited_by_count":20,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2102.07818","title":"Certified Robustness to Programmable Transformations in LSTMs","created":"2021-02-15","cited_by_count":18,"area":null},{"id":"2105.12437","title":"The statistical advantage of automatic NLG metrics at the system level","created":"2021-05-26","cited_by_count":18,"area":null},{"id":"2305.15587","title":"How do humans perceive adversarial text? A reality check on the validity and naturalness of word-based adversarial attacks","created":"2023-05-24","cited_by_count":18,"area":null},{"id":"2104.11838","title":"On a Utilitarian Approach to Privacy Preserving Text Generation","created":"2021-04-23","cited_by_count":17,"area":null},{"id":"2110.08555","title":"On the Robustness of Reading Comprehension Models to Entity Renaming","created":"2021-10-16","cited_by_count":17,"area":null},{"id":"2206.05511","title":"Improving the Adversarial Robustness of NLP Models by Information Bottleneck","created":"2022-06-11","cited_by_count":17,"area":null},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17,"area":null},{"id":"2112.07605","title":"The King is Naked: on the Notion of Robustness for Natural Language Processing","created":"2021-12-13","cited_by_count":16,"area":null},{"id":"2203.09161","title":"How Many Data Samples is an Additional Instruction Worth?","created":"2022-03-17","cited_by_count":16,"area":null},{"id":"2203.14207","title":"Text Adversarial Purification as Defense against Adversarial Attacks","created":"2022-03-27","cited_by_count":16,"area":null},{"id":"2107.11252","title":"Adversarial Reinforced Instruction Attacker for Robust Vision-Language Navigation","created":"2021-07-23","cited_by_count":15,"area":null},{"id":"2203.10378","title":"On Robust Prefix-Tuning for Text Classification","created":"2022-03-19","cited_by_count":15,"area":null},{"id":"2205.06439","title":"AEON: A Method for Automatic Evaluation of NLP Test Cases","created":"2022-05-13","cited_by_count":15,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2407.06992","title":"Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspective","created":"2024-07-09","cited_by_count":15,"area":null},{"id":"2107.08176","title":"Automatic Fairness Testing of Neural Classifiers through Adversarial Sampling","created":"2021-07-17","cited_by_count":14,"area":null},{"id":"2202.13817","title":"Robust Textual Embedding against Word-level Adversarial Attacks","created":"2022-02-28","cited_by_count":12,"area":null},{"id":"2203.12709","title":"Adversarial Training for Improving Model Robustness? Look at Both Prediction and Interpretation","created":"2022-03-23","cited_by_count":12,"area":null},{"id":"2201.00768","title":"Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions","created":"2022-01-03","cited_by_count":11,"area":null},{"id":"2207.02152","title":"UniCR: Universally Approximated Certified Robustness via Randomized Smoothing","created":"2022-07-05","cited_by_count":10,"area":null},{"id":"2305.17627","title":"Robust Natural Language Understanding with Residual Attention Debiasing","created":"2023-05-28","cited_by_count":10,"area":null},{"id":"2104.05232","title":"Double Perturbation: On the Robustness of Robustness and Counterfactual Bias Evaluation","created":"2021-04-12","cited_by_count":9,"area":null},{"id":"2109.07403","title":"BERT is Robust! A Case Against Synonym-Based Adversarial Examples in Text Classification","created":"2021-09-15","cited_by_count":9,"area":null},{"id":"2110.07165","title":"Semantically Distributed Robust Optimization for Vision-and-Language Inference","created":"2021-10-14","cited_by_count":9,"area":null},{"id":"2112.08321","title":"Know Thy Strengths: Comprehensive Dialogue State Tracking Diagnostics","created":"2021-12-15","cited_by_count":9,"area":null},{"id":"2211.05523","title":"Impact of Adversarial Training on Robustness and Generalizability of Language Models","created":"2022-11-10","cited_by_count":9,"area":null},{"id":"2302.02568","title":"Less is More: Understanding Word-level Textual Adversarial Attack via n-gram Frequency Descend","created":"2023-02-06","cited_by_count":9,"area":null},{"id":"2303.07320","title":"Model-tuning Via Prompts Makes NLP Models Adversarially Robust","created":"2023-03-13","cited_by_count":9,"area":null},{"id":"2109.05698","title":"Detecting Textual Adversarial Examples through Randomized Substitution and Vote","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2302.02023","title":"TextShield: Beyond Successfully Detecting Adversarial Sentences in Text Classification","created":"2023-02-03","cited_by_count":8,"area":null},{"id":"2305.16444","title":"Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Text","created":"2023-05-25","cited_by_count":8,"area":null},{"id":"2402.06655","title":"Adversarial Text Purification: A Large Language Model Approach for Defense","created":"2024-02-05","cited_by_count":8,"area":null},{"id":"2411.11767","title":"Drowning in Documents: Consequences of Scaling Reranker Inference","created":"2024-11-18","cited_by_count":8,"area":null},{"id":"2510.27055","title":"Detecting Data Contamination in LLMs via In-Context Learning","created":"2025-10-30","cited_by_count":8,"area":null},{"id":"2312.10329","title":"Perturbation-Invariant Adversarial Training for Neural Ranking Models: Improving the Effectiveness-Robustness Trade-Off","created":"2023-12-16","cited_by_count":7,"area":null},{"id":"2401.12461","title":"Fast Adversarial Training against Textual Adversarial Attacks","created":"2024-01-23","cited_by_count":7,"area":null},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2104.08453","title":"R&R: Metric-guided Adversarial Sentence Generation","created":"2021-04-17","cited_by_count":6,"area":null},{"id":"2106.05997","title":"Verifying Quantized Neural Networks using SMT-Based Model Checking","created":"2021-06-10","cited_by_count":6,"area":null},{"id":"2305.10773","title":"Rate-Adaptive Coding Mechanism for Semantic Communications With Multi-Modal Data","created":"2023-05-18","cited_by_count":6,"area":null},{"id":"2204.12316","title":"Systematicity, Compositionality and Transitivity of Deep NLP Models: a Metamorphic Testing Perspective","created":"2022-04-26","cited_by_count":5,"area":null},{"id":"2205.07315","title":"Learn2Weight: Parameter Adaptation against Similar-domain Adversarial Attacks","created":"2022-05-15","cited_by_count":5,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2310.16955","title":"Break it, Imitate it, Fix it: Robustness by Generating Human-Like Attacks","created":"2023-10-25","cited_by_count":5,"area":null},{"id":"2311.00508","title":"Robustness Tests for Automatic Machine Translation Metrics with Adversarial Attacks","created":"2023-11-01","cited_by_count":5,"area":null},{"id":"2311.05018","title":"Towards Effective Paraphrasing for Information Disguise","created":"2023-11-08","cited_by_count":5,"area":null},{"id":"2410.23182","title":"ProTransformer: Robustify Transformers via Plug-and-Play Paradigm","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2109.12456","title":"Auditing AI models for Verified Deployment under Semantic Specifications","created":"2021-09-25","cited_by_count":4,"area":null},{"id":"2201.08555","title":"Identifying Adversarial Attacks on Text Classifiers","created":"2022-01-21","cited_by_count":4,"area":null},{"id":"2202.05758","title":"Using Random Perturbations to Mitigate Adversarial Attacks on Sentiment Analysis Models","created":"2022-02-11","cited_by_count":4,"area":null},{"id":"2204.13309","title":"Improving robustness of language models from a geometry-aware perspective","created":"2022-04-28","cited_by_count":4,"area":null},{"id":"2210.14957","title":"Disentangled Text Representation Learning with Information-Theoretic Perspective for Adversarial Robustness","created":"2022-10-26","cited_by_count":4,"area":null},{"id":"2303.01234","title":"Frauds Bargain Attack: Generating Adversarial Text Samples via Word Manipulation Process","created":"2023-03-01","cited_by_count":4,"area":null},{"id":"2310.19152","title":"BERT Lost Patience Won't Be Robust to Adversarial Slowdown","created":"2023-10-29","cited_by_count":4,"area":null},{"id":"2406.08050","title":"Adversarial Evasion Attack Efficiency against Large Language Models","created":"2024-06-12","cited_by_count":4,"area":null},{"id":"2109.04385","title":"Contrasting Human- and Machine-Generated Word-Level Adversarial Examples for Text Classification","created":"2021-09-09","cited_by_count":3,"area":null},{"id":"2203.11199","title":"Distinguishing Non-natural from Natural Adversarial Samples for More Robust Pre-trained Language Model","created":"2022-03-19","cited_by_count":3,"area":null},{"id":"2204.07679","title":"DialAug: Mixing up Dialogue Contexts in Contrastive Learning for Robust Conversational Modeling","created":"2022-04-15","cited_by_count":3,"area":null},{"id":"2205.01714","title":"Don't sweat the small stuff, classify the rest: Sample Shielding to protect text classifiers against adversarial attacks","created":"2022-05-03","cited_by_count":3,"area":null},{"id":"2210.09917","title":"Controllable Fake Document Infilling for Cyber Deception","created":"2022-10-18","cited_by_count":3,"area":null},{"id":"2210.11498","title":"Balanced Adversarial Training: Balancing Tradeoffs between Fickleness and Obstinacy in NLP Models","created":"2022-10-20","cited_by_count":3,"area":null},{"id":"2301.02905","title":"REaaS: Enabling Adversarially Robust Downstream Classifiers via Robust Encoder as a Service","created":"2023-01-07","cited_by_count":3,"area":null},{"id":"2310.14001","title":"Toward Stronger Textual Attack Detectors","created":"2023-10-21","cited_by_count":3,"area":null},{"id":"2401.11373","title":"Finding a Needle in the Adversarial Haystack: A Targeted Paraphrasing Approach For Uncovering Edge Cases with Minimal Distribution Distortion","created":"2024-01-21","cited_by_count":3,"area":null}],"next_cursor":"100"}