{"total":61,"rows":[{"id":"2111.02840","title":"Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Models","created":"2021-11-04","cited_by_count":232,"area":null},{"id":"2103.15670","title":"On the Adversarial Robustness of Vision Transformers","created":"2021-03-29","cited_by_count":106,"area":null},{"id":"2210.10683","title":"Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP","created":"2022-10-19","cited_by_count":102,"area":null},{"id":"2305.11391","title":"A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation","created":"2023-05-19","cited_by_count":93,"area":null},{"id":"2105.03743","title":"Certified Robustness to Text Adversarial Attacks by Randomized [MASK]","created":"2021-05-08","cited_by_count":57,"area":null},{"id":"2108.12777","title":"Searching for an Effective Defender: Benchmarking Defense against Adversarial Word Substitution","created":"2021-08-29","cited_by_count":56,"area":null},{"id":"2307.16630","title":"Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks","created":"2023-07-31","cited_by_count":34,"area":null},{"id":"2105.14553","title":"Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrifice","created":"2021-05-30","cited_by_count":30,"area":null},{"id":"2205.12331","title":"Certified Robustness Against Natural Language Attacks by Causal Intervention","created":"2022-05-24","cited_by_count":24,"area":null},{"id":"2203.06414","title":"A Survey of Adversarial Defences and Robustness in NLP","created":"2022-03-12","cited_by_count":23,"area":null},{"id":"2307.07171","title":"Certified Robustness for Large Language Models with Self-Denoising","created":"2023-07-14","cited_by_count":23,"area":null},{"id":"2104.08645","title":"Improving Zero-Shot Cross-Lingual Transfer Learning via Robust Training","created":"2021-04-17","cited_by_count":21,"area":null},{"id":"2106.10826","title":"Does Robustness Improve Fairness? Approaching Fairness with Word Substitution Robustness Methods for Text Classification","created":"2021-06-21","cited_by_count":20,"area":null},{"id":"2211.02878","title":"Textual Manifold-based Defense Against Natural Language Adversarial Examples","created":"2022-11-05","cited_by_count":19,"area":null},{"id":"2102.07818","title":"Certified Robustness to Programmable Transformations in LSTMs","created":"2021-02-15","cited_by_count":18,"area":null},{"id":"2110.08555","title":"On the Robustness of Reading Comprehension Models to Entity Renaming","created":"2021-10-16","cited_by_count":17,"area":null},{"id":"2302.01757","title":"RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletion","created":"2023-01-31","cited_by_count":17,"area":null},{"id":"2403.10144","title":"NLP Verification: Towards a General Methodology for Certifying Robustness","created":"2024-03-15","cited_by_count":16,"area":null},{"id":"2203.10378","title":"On Robust Prefix-Tuning for Text Classification","created":"2022-03-19","cited_by_count":15,"area":null},{"id":"2203.12709","title":"Adversarial Training for Improving Model Robustness? Look at Both Prediction and Interpretation","created":"2022-03-23","cited_by_count":12,"area":null},{"id":"2201.00768","title":"Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions","created":"2022-01-03","cited_by_count":11,"area":null},{"id":"2305.06522","title":"Randomized Smoothing with Masked Inference for Adversarially Robust Text Classifications","created":"2023-05-11","cited_by_count":11,"area":null},{"id":"2211.05523","title":"Impact of Adversarial Training on Robustness and Generalizability of Language Models","created":"2022-11-10","cited_by_count":9,"area":null},{"id":"2302.02568","title":"Less is More: Understanding Word-level Textual Adversarial Attack via n-gram Frequency Descend","created":"2023-02-06","cited_by_count":9,"area":null},{"id":"2305.16444","title":"Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Text","created":"2023-05-25","cited_by_count":8,"area":null},{"id":"2108.09413","title":"Integer-arithmetic-only Certified Robustness for Quantized Neural Networks","created":"2021-08-21","cited_by_count":7,"area":null},{"id":"2312.10329","title":"Perturbation-Invariant Adversarial Training for Neural Ranking Models: Improving the Effectiveness-Robustness Trade-Off","created":"2023-12-16","cited_by_count":7,"area":null},{"id":"2401.12461","title":"Fast Adversarial Training against Textual Adversarial Attacks","created":"2024-01-23","cited_by_count":7,"area":null},{"id":"2501.19040","title":"Towards the Worst-case Robustness of Large Language Models","created":"2025-01-31","cited_by_count":7,"area":null},{"id":"2305.04003","title":"ANTONIO: Towards a Systematic Method of Generating NLP Benchmarks for Verification","created":"2023-05-06","cited_by_count":6,"area":null},{"id":"2208.10251","title":"Rethinking Textual Adversarial Defense for Pre-trained Language Models","created":"2022-07-21","cited_by_count":5,"area":null},{"id":"2304.08767","title":"Masked Language Model Based Textual Adversarial Example Detection","created":"2023-04-18","cited_by_count":5,"area":null},{"id":"2410.23182","title":"ProTransformer: Robustify Transformers via Plug-and-Play Paradigm","created":"2024-10-30","cited_by_count":5,"area":null},{"id":"2201.08555","title":"Identifying Adversarial Attacks on Text Classifiers","created":"2022-01-21","cited_by_count":4,"area":null},{"id":"2204.13309","title":"Improving robustness of language models from a geometry-aware perspective","created":"2022-04-28","cited_by_count":4,"area":null},{"id":"2403.19080","title":"MMCert: Provable Defense against Adversarial Attacks to Multi-modal Models","created":"2024-03-28","cited_by_count":4,"area":null},{"id":"2203.11199","title":"Distinguishing Non-natural from Natural Adversarial Samples for More Robust Pre-trained Language Model","created":"2022-03-19","cited_by_count":3,"area":null},{"id":"2210.11498","title":"Balanced Adversarial Training: Balancing Tradeoffs between Fickleness and Obstinacy in NLP Models","created":"2022-10-20","cited_by_count":3,"area":null},{"id":"2403.18423","title":"SemRoDe: Macro Adversarial Training to Learn Representations That are Robust to Word-Level Attacks","created":"2024-03-27","cited_by_count":3,"area":null},{"id":"2201.03829","title":"Quantifying Robustness to Adversarial Word Substitutions","created":"2022-01-11","cited_by_count":2,"area":null},{"id":"2205.05137","title":"Sibylvariant Transformations for Robust Text Classification","created":"2022-05-10","cited_by_count":2,"area":null},{"id":"2210.12396","title":"ADDMU: Detection of Far-Boundary Adversarial Examples with Data and Model Uncertainty Estimation","created":"2022-10-22","cited_by_count":2,"area":null},{"id":"2403.05365","title":"The Impact of Quantization on the Robustness of Transformer-based Text Classifiers","created":"2024-03-08","cited_by_count":2,"area":null},{"id":"2405.17130","title":"Explaining the role of Intrinsic Dimensionality in Adversarial Training","created":"2024-05-27","cited_by_count":2,"area":null},{"id":"2406.13066","title":"MaskPure: Improving Defense Against Text Adversaries with Stochastic Purification","created":"2024-06-18","cited_by_count":2,"area":null},{"id":"2408.00728","title":"CERT-ED: Certifiably Robust Text Classification for Edit Distance","created":"2024-08-01","cited_by_count":2,"area":null},{"id":"2505.10983","title":"GenoArmory: A Unified Evaluation Framework for Adversarial Attacks on Genomic Foundation Models","created":"2025-05-16","cited_by_count":2,"area":null},{"id":"2507.21750","title":"Adversarial Defence without Adversarial Defence: Enhancing Language Model Robustness via Instance-level Principal Component Removal","created":"2025-07-29","cited_by_count":2,"area":null},{"id":"2508.11667","title":"Guided Perturbation Sensitivity (GPS): Detecting Adversarial Text via Embedding Stability and Word Importance","created":"2025-08-06","cited_by_count":2,"area":null},{"id":"2310.01452","title":"Fooling the Textual Fooler via Randomizing Latent Representations","created":"2023-10-02","cited_by_count":1,"area":null},{"id":"2406.01873","title":"CR-UTP: Certified Robustness against Universal Text Perturbations on Large Language Models","created":"2024-06-04","cited_by_count":1,"area":null},{"id":"2407.00248","title":"DiffuseDef: Improved Robustness to Adversarial Attacks via Iterative Denoising","created":"2024-06-28","cited_by_count":1,"area":null},{"id":"2507.10330","title":"Bridging Robustness and Generalization Against Word Substitution Attacks in NLP via the Growth Bound Matrix Approach","created":"2025-07-14","cited_by_count":1,"area":null},{"id":"2110.05748","title":"SEPP: Similarity Estimation of Predicted Probabilities for Defending and Detecting Adversarial Text","created":"2021-10-12","cited_by_count":0,"area":null},{"id":"2206.14575","title":"Why Robust Natural Language Understanding is a Challenge","created":"2022-06-21","cited_by_count":0,"area":null},{"id":"2404.11538","title":"GenFighter: A Generative and Evolutive Textual Attack Removal","created":"2024-04-17","cited_by_count":0,"area":null},{"id":"2511.09316","title":"AdaptDel: Adaptable Deletion Rate Randomized Smoothing for Certified Robustness","created":"2025-11-12","cited_by_count":0,"area":null},{"id":"2605.12876","title":"Certified Robustness under Heterogeneous Perturbations via Hybrid Randomized Smoothing","created":"2026-05-13","cited_by_count":0,"area":null},{"id":"2605.17288","title":"When Efficiency Backfires: Cascading LLMs Trigger Cascade Failure under Adversarial Attack","created":"2026-05-17","cited_by_count":0,"area":null},{"id":"2606.13439","title":"S-GBT: Smooth Growth Bound Tensor for Certified Robustness Against Word Substitution Attacks in NLP","created":"2026-06-11","cited_by_count":0,"area":null},{"id":"2609.23239","title":"SoK: Formal Methods for Fact-Checking and Information Integrity","created":"2026-09-19","cited_by_count":0,"area":null}],"next_cursor":null}