{"total":273,"rows":[{"id":"2305.01937","title":"Can Large Language Models Be an Alternative to Human Evaluations?","created":"2023-05-03","cited_by_count":734,"area":null},{"id":"2309.01029","title":"Explainability for Large Language Models: A Survey","created":"2023-09-02","cited_by_count":333,"area":null},{"id":"2104.13733","title":"Gradient-based Adversarial Attacks against Text Transformers","created":"2021-04-15","cited_by_count":234,"area":null},{"id":"2111.02840","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","created":"2021-11-04","cited_by_count":232,"area":null},{"id":"2302.08500","title":"Auditing large language models: a three-layered approach","created":"2023-02-16","cited_by_count":137,"area":null},{"id":"2402.14016","title":"Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessment","created":"2024-02-21","cited_by_count":126,"area":null},{"id":"2101.04840","title":"Robustness Gym: Unifying the NLP Evaluation Landscape","created":"2021-01-13","cited_by_count":108,"area":null},{"id":"2112.08313","title":"Measure and Improve Robustness in NLP Models: A Survey","created":"2021-12-15","cited_by_count":107,"area":null},{"id":"2103.15670","title":"On the Adversarial Robustness of Vision Transformers","created":"2021-03-29","cited_by_count":106,"area":null},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2106.07499","title":"An Empirical Survey of Data Augmentation for Limited Data Learning in NLP","created":"2021-06-14","cited_by_count":101,"area":null},{"id":"2109.00544","title":"Towards Improving Adversarial Training of NLP Models","created":"2021-09-01","cited_by_count":79,"area":null},{"id":"2108.13230","title":"AEDA: An Easier Data Augmentation Technique for Text Classification","created":"2021-08-30","cited_by_count":67,"area":null},{"id":"2110.02797","title":"Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNs","created":"2021-10-06","cited_by_count":57,"area":null},{"id":"2108.12777","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","created":"2021-08-29","cited_by_count":56,"area":null},{"id":"2206.00052","title":"CodeAttack: Code-Based Adversarial Attacks for Pre-trained Programming Language Models","created":"2022-05-31","cited_by_count":53,"area":null},{"id":"2107.00440","title":"CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understanding","created":"2021-07-01","cited_by_count":50,"area":null},{"id":"2209.10797","title":"DFX: A Low-latency Multi-FPGA Appliance for Accelerating Transformer-based Text Generation","created":"2022-09-22","cited_by_count":48,"area":null},{"id":"2205.01287","title":"SemAttack: Natural Textual Attacks via Different Semantic Spaces","created":"2022-05-03","cited_by_count":42,"area":null},{"id":"2210.13915","title":"Towards Formal XAI: Formally Approximate Minimal Explanations of Neural Networks","created":"2022-10-25","cited_by_count":42,"area":null},{"id":"2305.14791","title":"Prompting Large Language Models for Counterfactual Generation: An Empirical Study","created":"2023-05-24","cited_by_count":37,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2108.06332","title":"FlipDA: Effective and Robust Data Augmentation for Few-Shot Learning","created":"2021-08-13","cited_by_count":32,"area":null},{"id":"2203.01677","title":"Detection of Word Adversarial Examples in Text Classification: Benchmark and Baseline via Robust Density Estimation","created":"2022-03-03","cited_by_count":32,"area":null},{"id":"2406.12223","title":"ToxiCloakCN: Evaluating Robustness of Offensive Language Detection in Chinese with Cloaking Perturbations","created":"2024-06-18","cited_by_count":31,"area":null},{"id":"2105.14553","title":"Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrifice","created":"2021-05-30","cited_by_count":30,"area":null},{"id":"2305.10235","title":"Assessing Hidden Risks of LLMs: An Empirical Study on Robustness, Consistency, and Credibility","created":"2023-05-15","cited_by_count":30,"area":null},{"id":"2210.17004","title":"Character-level White-Box Adversarial Attacks against Transformers via Attachable Subwords Substitution","created":"2022-10-31","cited_by_count":28,"area":null},{"id":"2402.10882","title":"Universal Prompt Optimizer for Safe Text-to-Image Generation","created":"2024-02-16","cited_by_count":28,"area":null},{"id":"2105.02590","title":"Reliability Testing for Natural Language Processing Systems","created":"2021-05-06","cited_by_count":25,"area":null},{"id":"2106.05251","title":"Bayesian Attention Belief Networks","created":"2021-06-09","cited_by_count":25,"area":null},{"id":"2204.04636","title":"\"That Is a Suspicious Reaction!\": Interpreting Logits Variation to Detect NLP Adversarial Attacks","created":"2022-04-10","cited_by_count":24,"area":null},{"id":"2103.09593","title":"Code-Mixing on Sesame Street: Dawn of the Adversarial Polyglots","created":"2021-03-17","cited_by_count":23,"area":null},{"id":"2104.05062","title":"Achieving Model Robustness through Discrete Adversarial Training","created":"2021-04-11","cited_by_count":23,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2203.07653","title":"Generalized but not Robust? Comparing the Effects of Data Modification Methods on Out-of-Domain Generalization and Adversarial Robustness","created":"2022-03-15","cited_by_count":23,"area":null},{"id":"2205.10710","title":"Phrase-level Textual Adversarial Attack with Label Preservation","created":"2022-05-22","cited_by_count":23,"area":null},{"id":"2206.08575","title":"Query-Efficient and Scalable Black-Box Adversarial Attacks on Discrete Sequential Data via Bayesian Optimization","created":"2022-06-17","cited_by_count":22,"area":null},{"id":"2302.05706","title":"MTTM: Metamorphic Testing for Textual Content Moderation Software","created":"2023-02-11","cited_by_count":22,"area":null},{"id":"2104.08645","title":"Improving Zero-Shot Cross-Lingual Transfer Learning via Robust Training","created":"2021-04-17","cited_by_count":21,"area":null},{"id":"2212.09254","title":"TextGrad: Advancing Robustness Evaluation in NLP by Gradient-Driven Optimization","created":"2022-12-19","cited_by_count":21,"area":null},{"id":"2407.03993","title":"A Survey on Natural Language Counterfactual Generation","created":"2024-07-04","cited_by_count":21,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2102.07818","title":"Certified Robustness to Programmable Transformations in LSTMs","created":"2021-02-15","cited_by_count":18,"area":null},{"id":"2305.15587","title":"How do humans perceive adversarial text? A reality check on the validity and naturalness of word-based adversarial attacks","created":"2023-05-24","cited_by_count":18,"area":null},{"id":"2405.04793","title":"Zero-shot LLM-guided Counterfactual Generation: A Case Study on NLP Model Evaluation","created":"2024-05-08","cited_by_count":18,"area":null},{"id":"2104.08570","title":"Crossing the Conversational Chasm: A Primer on Natural Language Processing for Multilingual Task-Oriented Dialogue Systems","created":"2021-04-17","cited_by_count":17,"area":null},{"id":"2109.04775","title":"A Strong Baseline for Query Efficient Attacks in a Black Box Setting","created":"2021-09-10","cited_by_count":16,"area":null},{"id":"2110.11589","title":"Text Counterfactuals via Latent Optimization and Shapley-Guided Search","created":"2021-10-22","cited_by_count":16,"area":null},{"id":"2203.14207","title":"Text Adversarial Purification as Defense against Adversarial Attacks","created":"2022-03-27","cited_by_count":16,"area":null},{"id":"2211.03013","title":"Robust Lottery Tickets for Pre-trained Language Models","created":"2022-11-06","cited_by_count":16,"area":null},{"id":"2402.01806","title":"HQA-Attack: Toward High Quality Black-Box Hard-Label Adversarial Attack on Text","created":"2024-02-02","cited_by_count":16,"area":null},{"id":"2505.14279","title":"YESciEval: Robust LLM-as-a-Judge for Scientific Question Answering","created":"2025-05-20","cited_by_count":16,"area":null},{"id":"2203.10378","title":"On Robust Prefix-Tuning for Text Classification","created":"2022-03-19","cited_by_count":15,"area":null},{"id":"2205.01094","title":"A Word is Worth A Thousand Dollars: Adversarial Attack on Tweets Fools Stock Predictions","created":"2022-05-01","cited_by_count":15,"area":null},{"id":"2205.06439","title":"AEON: A Method for Automatic Evaluation of NLP Test Cases","created":"2022-05-13","cited_by_count":15,"area":null},{"id":"2404.17475","title":"CEval: A Benchmark for Evaluating Counterfactual Text Generation","created":"2024-04-26","cited_by_count":15,"area":null},{"id":"2406.04755","title":"LLM Whisperer: An Inconspicuous Attack to Bias LLM Responses","created":"2024-06-07","cited_by_count":15,"area":null},{"id":"2110.12567","title":"Alignment Attention by Matching Key and Query Distributions","created":"2021-10-25","cited_by_count":14,"area":null},{"id":"2402.12100","title":"Groot: Adversarial Testing for Generative Text-to-Image Models with Tree-based Semantic Transformation","created":"2024-02-19","cited_by_count":14,"area":null},{"id":"2404.08690","title":"Towards Building a Robust Toxicity Predictor","created":"2024-04-09","cited_by_count":14,"area":null},{"id":"2108.06665","title":"Accurate, yet inconsistent? Consistency Analysis on Language Understanding Models","created":"2021-08-15","cited_by_count":13,"area":null},{"id":"2405.20701","title":"Unveiling the Lexical Sensitivity of LLMs: Combinatorial Optimization for Prompt Enhancement","created":"2024-05-31","cited_by_count":13,"area":null},{"id":"2103.00676","title":"Token-Modification Adversarial Attacks for Natural Language Processing: A Survey","created":"2021-03-01","cited_by_count":12,"area":null},{"id":"2105.14897","title":"Connecting Language and Vision for Natural Language-Based Vehicle Retrieval","created":"2021-05-31","cited_by_count":12,"area":null},{"id":"2203.12709","title":"Adversarial Training for Improving Model Robustness? Look at Both Prediction and Interpretation","created":"2022-03-23","cited_by_count":12,"area":null},{"id":"2311.11861","title":"Generating Valid and Natural Adversarial Examples with Large Language Models","created":"2023-11-20","cited_by_count":12,"area":null},{"id":"2201.00768","title":"Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions","created":"2022-01-03","cited_by_count":11,"area":null},{"id":"2207.11237","title":"Defending Substitution-Based Profile Pollution Attacks on Sequential Recommenders","created":"2022-07-19","cited_by_count":11,"area":null},{"id":"2305.06522","title":"Randomized Smoothing with Masked Inference for Adversarially Robust Text Classifications","created":"2023-05-11","cited_by_count":11,"area":null},{"id":"2104.06901","title":"Enhancing Interpretable Clauses Semantically using Pretrained Word Representation","created":"2021-04-14","cited_by_count":10,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2201.08193","title":"TextHacker: Learning based Hybrid Local Search Algorithm for Text Hard-label Adversarial Attack","created":"2022-01-20","cited_by_count":10,"area":null},{"id":"2305.04557","title":"Toward Adversarial Training on Contextualized Language Representation","created":"2023-05-08","cited_by_count":10,"area":null},{"id":"2306.06707","title":"QUERT: Continual Pre-training of Language Model for Query Understanding in Travel Domain Search","created":"2023-06-11","cited_by_count":10,"area":null},{"id":"2104.05232","title":"Double Perturbation: On the Robustness of Robustness and Counterfactual Bias Evaluation","created":"2021-04-12","cited_by_count":9,"area":null},{"id":"2104.07284","title":"Consistency Training with Virtual Adversarial Discrete Perturbation","created":"2021-04-15","cited_by_count":9,"area":null},{"id":"2107.11275","title":"A Differentiable Language Model Adversarial Attack on Text Classifiers","created":"2021-07-23","cited_by_count":9,"area":null},{"id":"2109.07403","title":"BERT is Robust! A Case Against Synonym-Based Adversarial Examples in Text Classification","created":"2021-09-15","cited_by_count":9,"area":null},{"id":"2211.05523","title":"Impact of Adversarial Training on Robustness and Generalizability of Language Models","created":"2022-11-10","cited_by_count":9,"area":null},{"id":"2302.02568","title":"Less is More: Understanding Word-level Textual Adversarial Attack via n-gram Frequency Descend","created":"2023-02-06","cited_by_count":9,"area":null},{"id":"2302.05892","title":"TextDefense: Adversarial Text Detection based on Word Importance Entropy","created":"2023-02-12","cited_by_count":9,"area":null},{"id":"2308.00319","title":"LimeAttack: Local Explainable Method for Textual Hard-Label Adversarial Attack","created":"2023-08-01","cited_by_count":9,"area":null},{"id":"2401.12097","title":"An Empirical Study of In-context Learning in LLMs for Machine Translation","created":"2024-01-22","cited_by_count":9,"area":null},{"id":"2510.09536","title":"Evaluating Robustness of Large Language Models Against Multilingual Typographical Errors","created":"2025-10-10","cited_by_count":9,"area":null},{"id":"2109.05698","title":"Detecting Textual Adversarial Examples through Randomized Substitution and Vote","created":"2021-09-13","cited_by_count":8,"area":null},{"id":"2109.07028","title":"Avengers Ensemble! Improving Transferability of Authorship Obfuscation","created":"2021-09-15","cited_by_count":8,"area":null},{"id":"2302.02023","title":"TextShield: Beyond Successfully Detecting Adversarial Sentences in Text Classification","created":"2023-02-03","cited_by_count":8,"area":null},{"id":"2303.08032","title":"Verifying the Robustness of Automatic Credibility Assessment","created":"2023-03-14","cited_by_count":8,"area":null},{"id":"2305.14453","title":"On Robustness of Finetuned Transformer-based NLP Models","created":"2023-05-23","cited_by_count":8,"area":null},{"id":"2305.16444","title":"Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Text","created":"2023-05-25","cited_by_count":8,"area":null},{"id":"2503.19540","title":"FLEX: A Benchmark for Evaluating Robustness of Fairness in Large Language Models","created":"2025-03-25","cited_by_count":8,"area":null},{"id":"2107.07970","title":"How Vulnerable Are Automatic Fake News Detection Methods to Adversarial Attacks?","created":"2021-07-16","cited_by_count":7,"area":null},{"id":"2205.10189","title":"Progressive Class Semantic Matching for Semi-supervised Text Classification","created":"2022-05-20","cited_by_count":7,"area":null},{"id":"2302.09665","title":"CitySpec with Shield: A Secure Intelligent Assistant for Requirement Formalization","created":"2023-02-19","cited_by_count":7,"area":null},{"id":"2306.01276","title":"Symmetric Replay Training: Enhancing Sample Efficiency in Deep Reinforcement Learning for Combinatorial Optimization","created":"2023-06-02","cited_by_count":7,"area":null},{"id":"2310.13191","title":"Towards Robust Pruning: An Adaptive Knowledge-Retention Pruning Strategy for Language Models","created":"2023-10-19","cited_by_count":7,"area":null},{"id":"2404.00303","title":"A Comprehensive Study on NLP Data Augmentation for Hate Speech Detection: Legacy Methods, BERT, and LLMs","created":"2024-03-30","cited_by_count":7,"area":null},{"id":"2104.08453","title":"R&R: Metric-guided Adversarial Sentence Generation","created":"2021-04-17","cited_by_count":6,"area":null},{"id":"2109.09075","title":"Adversarial Training with Contrastive Learning in NLP","created":"2021-09-19","cited_by_count":6,"area":null}],"next_cursor":"100"}