{"total":71,"rows":[{"id":"2305.01937","title":"Can Large Language Models Be an Alternative to Human Evaluations?","created":"2023-05-03","cited_by_count":734,"area":null},{"id":"2104.13733","title":"Gradient-based Adversarial Attacks against Text Transformers","created":"2021-04-15","cited_by_count":234,"area":null},{"id":"2111.02840","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","created":"2021-11-04","cited_by_count":232,"area":null},{"id":"2112.08313","title":"Measure and Improve Robustness in NLP Models: A Survey","created":"2021-12-15","cited_by_count":107,"area":null},{"id":"2109.00544","title":"Towards Improving Adversarial Training of NLP Models","created":"2021-09-01","cited_by_count":79,"area":null},{"id":"2108.12777","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","created":"2021-08-29","cited_by_count":56,"area":null},{"id":"2110.08300","title":"The Dangers of Underclaiming: Reasons for Caution When Reporting How NLP Systems Fail","created":"2021-10-15","cited_by_count":38,"area":null},{"id":"2203.01677","title":"Detection of Word Adversarial Examples in Text Classification: Benchmark and Baseline via Robust Density Estimation","created":"2022-03-03","cited_by_count":32,"area":null},{"id":"2103.11576","title":"Grey-box Adversarial Attack And Defence For Sentiment Classification","created":"2021-03-22","cited_by_count":28,"area":null},{"id":"2205.10710","title":"Phrase-level Textual Adversarial Attack with Label Preservation","created":"2022-05-22","cited_by_count":23,"area":null},{"id":"2302.05706","title":"MTTM: Metamorphic Testing for Textual Content Moderation Software","created":"2023-02-11","cited_by_count":22,"area":null},{"id":"2305.15587","title":"How do humans perceive adversarial text? A reality check on the validity and naturalness of word-based adversarial attacks","created":"2023-05-24","cited_by_count":18,"area":null},{"id":"2112.07605","title":"The King is Naked: on the Notion of Robustness for Natural Language Processing","created":"2021-12-13","cited_by_count":16,"area":null},{"id":"2203.14207","title":"Text Adversarial Purification as Defense against Adversarial Attacks","created":"2022-03-27","cited_by_count":16,"area":null},{"id":"2202.03277","title":"On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Adversarial Attacks","created":"2022-02-07","cited_by_count":15,"area":null},{"id":"2203.11131","title":"Towards Explainable Evaluation Metrics for Natural Language Generation","created":"2022-03-21","cited_by_count":15,"area":null},{"id":"2205.06439","title":"AEON: A Method for Automatic Evaluation of NLP Test Cases","created":"2022-05-13","cited_by_count":15,"area":null},{"id":"2404.08690","title":"Towards Building a Robust Toxicity Predictor","created":"2024-04-09","cited_by_count":14,"area":null},{"id":"2205.12593","title":"Less Learn Shortcut: Analyzing and Mitigating Learning of Spurious Feature-Label Correlation","created":"2022-05-25","cited_by_count":13,"area":null},{"id":"2103.00676","title":"Token-Modification Adversarial Attacks for Natural Language Processing: A Survey","created":"2021-03-01","cited_by_count":12,"area":null},{"id":"2302.00944","title":"TransFool: An Adversarial Attack against Neural Machine Translation Models","created":"2023-02-02","cited_by_count":12,"area":null},{"id":"2109.07403","title":"BERT is Robust! A Case Against Synonym-Based Adversarial Examples in Text Classification","created":"2021-09-15","cited_by_count":9,"area":null},{"id":"2602.18735","title":"LaS-Comp: Zero-shot 3D Completion with Latent-Spatial Consistency","created":"2026-02-21","cited_by_count":9,"area":null},{"id":"2305.16444","title":"Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Text","created":"2023-05-25","cited_by_count":8,"area":null},{"id":"2204.03592","title":"Testing the limits of natural language models for predicting human language judgments","created":"2022-04-07","cited_by_count":7,"area":null},{"id":"2104.08139","title":"Towards Variable-Length Textual Adversarial Attacks","created":"2021-04-16","cited_by_count":5,"area":null},{"id":"2211.04205","title":"Preserving Semantics in Textual Adversarial Attacks","created":"2022-11-08","cited_by_count":5,"area":null},{"id":"2310.16955","title":"Break it, Imitate it, Fix it: Robustness by Generating Human-Like Attacks","created":"2023-10-25","cited_by_count":5,"area":null},{"id":"2311.09694","title":"Whispers of Doubt Amidst Echoes of Triumph in NLP Robustness","created":"2023-11-16","cited_by_count":5,"area":null},{"id":"2410.09318","title":"Impeding LLM-assisted Cheating in Introductory Programming Assignments via Adversarial Perturbation","created":"2024-10-12","cited_by_count":5,"area":null},{"id":"2112.08609","title":"DuQM: A Chinese Dataset of Linguistically Perturbed Natural Questions for Evaluating the Robustness of Question Matching Models","created":"2021-12-16","cited_by_count":4,"area":null},{"id":"2209.01824","title":"A Survey on Measuring and Mitigating Reasoning Shortcuts in Machine Reading Comprehension","created":"2022-09-05","cited_by_count":4,"area":null},{"id":"2210.02844","title":"Are Synonym Substitution Attacks Really Synonym Substitution Attacks?","created":"2022-10-06","cited_by_count":4,"area":null},{"id":"2404.00463","title":"Addressing Both Statistical and Causal Gender Fairness in NLP Models","created":"2024-03-30","cited_by_count":4,"area":null},{"id":"2405.04346","title":"Revisiting Character-level Adversarial Attacks for Language Models","created":"2024-05-07","cited_by_count":4,"area":null},{"id":"2109.04385","title":"Contrasting Human- and Machine-Generated Word-Level Adversarial Examples for Text Classification","created":"2021-09-09","cited_by_count":3,"area":null},{"id":"2210.11498","title":"Balanced Adversarial Training: Balancing Tradeoffs between Fickleness and Obstinacy in NLP Models","created":"2022-10-20","cited_by_count":3,"area":null},{"id":"2302.05120","title":"Step by Step Loss Goes Very Far: Multi-Step Quantization for Adversarial Text Attacks","created":"2023-02-10","cited_by_count":3,"area":null},{"id":"2305.18503","title":"From Adversarial Arms Race to Model-centric Evaluation: Motivating a Unified Automatic Robustness Evaluation Framework","created":"2023-05-29","cited_by_count":3,"area":null},{"id":"2306.04874","title":"Expanding Scope: Adapting English Adversarial Attacks to Chinese","created":"2023-06-08","cited_by_count":3,"area":null},{"id":"2306.05079","title":"Enhancing Robustness of AI Offensive Code Generators via Data Augmentation","created":"2023-06-08","cited_by_count":3,"area":null},{"id":"2307.12507","title":"Gradient-Based Word Substitution for Obstinate Adversarial Examples Generation in Language Models","created":"2023-07-24","cited_by_count":3,"area":null},{"id":"2310.04539","title":"Generating Less Certain Adversarial Examples Improves Robust Generalization","created":"2023-10-06","cited_by_count":3,"area":null},{"id":"2310.14001","title":"Toward Stronger Textual Attack Detectors","created":"2023-10-21","cited_by_count":3,"area":null},{"id":"2311.06647","title":"Robust Text Classification: Analyzing Prototype-Based Networks","created":"2023-11-11","cited_by_count":3,"area":null},{"id":"2503.03417","title":"When Claims Evolve: Evaluating and Enhancing the Robustness of Embedding Models Against Misinformation Edits","created":"2025-03-05","cited_by_count":3,"area":null},{"id":"2210.11598","title":"Identifying Human Strategies for Generating Word-Level Adversarial Examples","created":"2022-10-20","cited_by_count":2,"area":null},{"id":"2210.12233","title":"TCAB: A Large-Scale Text Classification Attack Benchmark","created":"2022-10-21","cited_by_count":2,"area":null},{"id":"2210.12396","title":"ADDMU: Detection of Far-Boundary Adversarial Examples with Data and Model Uncertainty Estimation","created":"2022-10-22","cited_by_count":2,"area":null},{"id":"2306.12043","title":"Sample Attackability in Natural Language Adversarial Attacks","created":"2023-06-21","cited_by_count":2,"area":null},{"id":"2405.11904","title":"A Constraint-Enforcing Reward for Adversarial Attacks on Text Classifiers","created":"2024-05-20","cited_by_count":2,"area":null},{"id":"2410.05573","title":"TaeBench: Improving Quality of Toxic Adversarial Examples","created":"2024-10-08","cited_by_count":2,"area":null},{"id":"2506.03355","title":"Robustness in Both Domains: CLIP Needs a Robust Text Encoder","created":"2025-06-03","cited_by_count":2,"area":null},{"id":"2508.18306","title":"SALMAN: Stability Analysis of Language Models Through the Maps Between Graph-based Manifolds","created":"2025-08-23","cited_by_count":2,"area":null},{"id":"2605.30646","title":"Same Patient, Different Words, Different Diagnosis? Evaluating Semantic Stability in Clinical LLMs","created":"2026-05-28","cited_by_count":2,"area":null},{"id":"2204.04458","title":"Understanding, Detecting, and Separating Out-of-Distribution Samples and Adversarial Samples in Text Classification","created":"2022-04-09","cited_by_count":1,"area":null},{"id":"2206.09458","title":"A Universal Adversarial Policy for Text Classifiers","created":"2022-06-19","cited_by_count":1,"area":null},{"id":"2311.00801","title":"GIST: Generated Inputs Sets Transferability in Deep Learning","created":"2023-11-01","cited_by_count":1,"area":null},{"id":"2402.10527","title":"Assessing biomedical knowledge robustness in large language models by query-efficient sampling attacks","created":"2024-02-16","cited_by_count":1,"area":null},{"id":"2207.02639","title":"Adversarial Robustness of Visual Dialog","created":"2022-07-06","cited_by_count":0,"area":null},{"id":"2207.11500","title":"Catch Me If You Can: Deceiving Stance Detection and Geotagging Models to Protect Privacy of Individuals on Twitter","created":"2022-07-23","cited_by_count":0,"area":null},{"id":"2211.04364","title":"NaturalAdversaries: Can Naturalistic Adversaries Be as Effective as Artificial Adversaries?","created":"2022-11-08","cited_by_count":0,"area":null},{"id":"2409.04795","title":"Phrase-Level Adversarial Training for Mitigating Bias in Neural Network-based Automatic Essay Scoring","created":"2024-09-07","cited_by_count":0,"area":null},{"id":"2501.05962","title":"Effective faking of verbal deception detection with target-aligned adversarial attacks","created":"2025-01-10","cited_by_count":0,"area":null},{"id":"2501.12183","title":"Extend Adversarial Policy Against Neural Machine Translation via Unknown Token","created":"2025-01-21","cited_by_count":0,"area":null},{"id":"2510.20543","title":"The Dog the Cat Chased Stumped the Model: Measuring When Language Models Abandon Structure for Shortcuts","created":"2025-10-23","cited_by_count":0,"area":null},{"id":"2603.12582","title":"RTD-Guard: A Black-Box Textual Adversarial Detection Framework via Replacement Token Detection","created":"2026-03-13","cited_by_count":0,"area":null},{"id":"2604.07967","title":"AtomEval: Validity-Aware Atomic Evaluation of Adversarial Claim Rewriting in Fact Verification","created":"2026-04-09","cited_by_count":0,"area":null},{"id":"2606.09700","title":"What the Eyes See, the LLMs Miss: Exploiting Human Perception for Adversarial Text Attacks","created":"2026-06-08","cited_by_count":0,"area":null},{"id":"2607.25814","title":"Evaluation of Adversarial Robustness in Arabic Language Models","created":"2026-07-28","cited_by_count":0,"area":null},{"id":"2610.14477","title":"What Counts as the Same Task? Executable Contracts for Robustness Evaluation of Tool-Using Agents","created":"2026-10-10","cited_by_count":0,"area":null}],"next_cursor":null}