{"total":80,"rows":[{"id":"2111.02840","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","created":"2021-11-04","cited_by_count":232,"area":null},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2109.00544","title":"Towards Improving Adversarial Training of NLP Models","created":"2021-09-01","cited_by_count":79,"area":null},{"id":"2107.13541","title":"Towards Robustness Against Natural Language Word Substitutions","created":"2021-07-28","cited_by_count":69,"area":null},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2108.12777","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","created":"2021-08-29","cited_by_count":56,"area":null},{"id":"2105.03640","title":"On Guaranteed Optimal Robust Explanations for NLP Models","created":"2021-05-08","cited_by_count":54,"area":null},{"id":"2112.11668","title":"How Should Pre-Trained Language Models Be Fine-Tuned Towards Adversarial Robustness?","created":"2021-12-22","cited_by_count":49,"area":null},{"id":"2106.11420","title":"Policy Smoothing for Provably Robust Reinforcement Learning","created":"2021-06-21","cited_by_count":40,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2104.08782","title":"On the Sensitivity and Stability of Model Interpretations in NLP","created":"2021-04-18","cited_by_count":30,"area":null},{"id":"2105.14553","title":"Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrifice","created":"2021-05-30","cited_by_count":30,"area":null},{"id":"2103.11576","title":"Grey-box Adversarial Attack And Defence For Sentiment Classification","created":"2021-03-22","cited_by_count":28,"area":null},{"id":"2205.12331","title":"Certified Robustness Against Natural Language Attacks by Causal Intervention","created":"2022-05-24","cited_by_count":24,"area":null},{"id":"2104.05062","title":"Achieving Model Robustness through Discrete Adversarial Training","created":"2021-04-11","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2307.07171","title":"Certified Robustness for Large Language Models with Self-Denoising","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2104.08645","title":"Improving Zero-Shot Cross-Lingual Transfer Learning via Robust Training","created":"2021-04-17","cited_by_count":21,"area":null},{"id":"2103.08187","title":"Adversarial Training is Not Ready for Robot Learning","created":"2021-03-15","cited_by_count":20,"area":null},{"id":"2106.10826","title":"Does Robustness Improve Fairness? Approaching Fairness with Word Substitution Robustness Methods for Text Classification","created":"2021-06-21","cited_by_count":20,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2102.07818","title":"Certified Robustness to Programmable Transformations in LSTMs","created":"2021-02-15","cited_by_count":18,"area":null},{"id":"2102.09701","title":"Center Smoothing: Certified Robustness for Networks with Structured Outputs","created":"2021-02-19","cited_by_count":18,"area":null},{"id":"2206.05511","title":"Improving the Adversarial Robustness of NLP Models by Information Bottleneck","created":"2022-06-11","cited_by_count":17,"area":null},{"id":"2112.07605","title":"The King is Naked: on the Notion of Robustness for Natural Language Processing","created":"2021-12-13","cited_by_count":16,"area":null},{"id":"2203.14207","title":"Text Adversarial Purification as Defense against Adversarial Attacks","created":"2022-03-27","cited_by_count":16,"area":null},{"id":"2203.10378","title":"On Robust Prefix-Tuning for Text Classification","created":"2022-03-19","cited_by_count":15,"area":null},{"id":"2107.08176","title":"Automatic Fairness Testing of Neural Classifiers through Adversarial Sampling","created":"2021-07-17","cited_by_count":14,"area":null},{"id":"2306.03048","title":"From Robustness to Explainability and Back Again","created":"2023-06-05","cited_by_count":14,"area":null},{"id":"2202.13817","title":"Robust Textual Embedding against Word-level Adversarial Attacks","created":"2022-02-28","cited_by_count":12,"area":null},{"id":"2203.12709","title":"Adversarial Training for Improving Model Robustness? Look at Both Prediction and Interpretation","created":"2022-03-23","cited_by_count":12,"area":null},{"id":"2201.00768","title":"Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions","created":"2022-01-03","cited_by_count":11,"area":null},{"id":"2311.17400","title":"Improving the Robustness of Transformer-based Large Language Models with Dynamic Attention","created":"2023-11-29","cited_by_count":10,"area":null},{"id":"2104.05232","title":"Double Perturbation: On the Robustness of Robustness and Counterfactual Bias Evaluation","created":"2021-04-12","cited_by_count":9,"area":null},{"id":"2109.07403","title":"BERT is Robust! A Case Against Synonym-Based Adversarial Examples in Text Classification","created":"2021-09-15","cited_by_count":9,"area":null},{"id":"2211.05523","title":"Impact of Adversarial Training on Robustness and Generalizability of Language Models","created":"2022-11-10","cited_by_count":9,"area":null},{"id":"2302.02568","title":"Less is More: Understanding Word-level Textual Adversarial Attack via n-gram Frequency Descend","created":"2023-02-06","cited_by_count":9,"area":null},{"id":"2109.05698","title":"Detecting Textual Adversarial Examples through Randomized Substitution and Vote","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2302.02023","title":"TextShield: Beyond Successfully Detecting Adversarial Sentences in Text Classification","created":"2023-02-03","cited_by_count":8,"area":null},{"id":"2305.16444","title":"Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Text","created":"2023-05-25","cited_by_count":8,"area":null},{"id":"2305.04003","title":"ANTONIO: Towards a Systematic Method of Generating NLP Benchmarks for Verification","created":"2023-05-06","cited_by_count":6,"area":null},{"id":"2201.12440","title":"Certifying Model Accuracy under Distribution Shifts","created":"2022-01-28","cited_by_count":5,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2410.23182","title":"ProTransformer: Robustify Transformers via Plug-and-Play Paradigm","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2201.08555","title":"Identifying Adversarial Attacks on Text Classifiers","created":"2022-01-21","cited_by_count":4,"area":null},{"id":"2210.14957","title":"Disentangled Text Representation Learning with Information-Theoretic Perspective for Adversarial Robustness","created":"2022-10-26","cited_by_count":4,"area":null},{"id":"2203.11199","title":"Distinguishing Non-natural from Natural Adversarial Samples for More Robust Pre-trained Language Model","created":"2022-03-19","cited_by_count":3,"area":null},{"id":"2210.11498","title":"Balanced Adversarial Training: Balancing Tradeoffs between Fickleness and Obstinacy in NLP Models","created":"2022-10-20","cited_by_count":3,"area":null},{"id":"2301.02905","title":"REaaS: Enabling Adversarially Robust Downstream Classifiers via Robust Encoder as a Service","created":"2023-01-07","cited_by_count":3,"area":null},{"id":"2305.18503","title":"From Adversarial Arms Race to Model-centric Evaluation: Motivating a Unified Automatic Robustness Evaluation Framework","created":"2023-05-29","cited_by_count":3,"area":null},{"id":"2101.08675","title":"Adversarial Machine Learning in Text Analysis and Generation","created":"2021-01-14","cited_by_count":2,"area":null},{"id":"2201.03829","title":"Quantifying Robustness to Adversarial Word Substitutions","created":"2022-01-11","cited_by_count":2,"area":null},{"id":"2210.11598","title":"Identifying Human Strategies for Generating Word-Level Adversarial Examples","created":"2022-10-20","cited_by_count":2,"area":null},{"id":"2210.12233","title":"TCAB: A Large-Scale Text Classification Attack Benchmark","created":"2022-10-21","cited_by_count":2,"area":null},{"id":"2210.12396","title":"ADDMU: Detection of Far-Boundary Adversarial Examples with Data and Model Uncertainty Estimation","created":"2022-10-22","cited_by_count":2,"area":null},{"id":"2210.17406","title":"Emergent Linguistic Structures in Neural Networks are Fragile","created":"2022-10-31","cited_by_count":2,"area":null},{"id":"2305.16998","title":"A Tale of Two Approximations: Tightening Over-Approximation for DNN Robustness Verification via Under-Approximation","created":"2023-05-26","cited_by_count":2,"area":null},{"id":"2306.01435","title":"Improving Adversarial Robustness of DEQs with Explicit Regulations Along the Neural Dynamics","created":"2023-06-02","cited_by_count":2,"area":null},{"id":"2403.05365","title":"The Impact of Quantization on the Robustness of Transformer-based Text Classifiers","created":"2024-03-08","cited_by_count":2,"area":null},{"id":"2408.00728","title":"CERT-ED: Certifiably Robust Text Classification for Edit Distance","created":"2024-08-01","cited_by_count":2,"area":null},{"id":"2506.03355","title":"Robustness in Both Domains: CLIP Needs a Robust Text Encoder","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2509.25979","title":"Reconcile Certified Robustness and Accuracy for DNN-based Smoothed Majority Vote Classifier","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2210.06213","title":"Probabilistic Inverse Modeling: An Application in Hydrology","created":"2022-10-12","cited_by_count":1,"area":null},{"id":"2303.16308","title":"Provable Robustness for Streaming Models with a Sliding Window","created":"2023-03-28","cited_by_count":1,"area":null},{"id":"2310.01452","title":"Fooling the Textual Fooler via Randomizing Latent Representations","created":"2023-10-02","cited_by_count":1,"area":null},{"id":"2507.10330","title":"Bridging Robustness and Generalization Against Word Substitution Attacks in NLP via the Growth Bound Matrix Approach","created":"2025-07-14","cited_by_count":1,"area":null},{"id":"2110.05748","title":"SEPP: Similarity Estimation of Predicted Probabilities for Defending and Detecting Adversarial Text","created":"2021-10-12","cited_by_count":0,"area":null},{"id":"2206.14575","title":"Why Robust Natural Language Understanding is a Challenge","created":"2022-06-21","cited_by_count":0,"area":null},{"id":"2210.00178","title":"On the tightness of linear relaxation based robustness certification methods","created":"2022-10-01","cited_by_count":0,"area":null},{"id":"2211.11186","title":"DualApp: Tight Over-Approximation for Neural Network Robustness Verification via Under-Approximation","created":"2022-11-21","cited_by_count":0,"area":null},{"id":"2404.02660","title":"Adversarial Attacks and Dimensionality in Text Classifiers","created":"2024-04-03","cited_by_count":0,"area":null},{"id":"2404.11538","title":"GenFighter: A Generative and Evolutive Textual Attack Removal","created":"2024-04-17","cited_by_count":0,"area":null},{"id":"2503.17172","title":"Principal Eigenvalue Regularization for Improved Worst-Class Certified Robustness of Smoothed Classifiers","created":"2025-03-21","cited_by_count":0,"area":null},{"id":"2505.12767","title":"Language Models That Walk the Talk: A Framework for Formal Fairness Certificates","created":"2025-05-19","cited_by_count":0,"area":null},{"id":"2511.09316","title":"AdaptDel: Adaptable Deletion Rate Randomized Smoothing for Certified Robustness","created":"2025-11-12","cited_by_count":0,"area":null},{"id":"2605.17288","title":"When Efficiency Backfires: Cascading LLMs Trigger Cascade Failure under Adversarial Attack","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2606.10610","title":"Small Data, Big Noise: Adversarial Training for Robust Parameter-Efficient Fine-Tuning","created":"2026-06-09","cited_by_count":0,"area":null},{"id":"2606.13439","title":"S-GBT: Smooth Growth Bound Tensor for Certified Robustness Against Word Substitution Attacks in NLP","created":"2026-06-11","cited_by_count":0,"area":null},{"id":"2609.23239","title":"SoK: Formal Methods for Fact-Checking and Information Integrity","created":"2026-09-19","cited_by_count":0,"area":null}],"next_cursor":null}