Synthetic and Natural Noise Both Break Neural Machine Translation
Not on the map. Why?
Abstract (arXiv)
Character-based neural machine translation (NMT) models alleviate out-of-vocabulary issues, learn morphology, and move us closer to completely end-to-end translation systems. Unfortunately, they are also very brittle and easily falter when presented with noisy data. In this paper, we confront NMT models with synthetic and natural sources of noise. We find that state-of-the-art models fail to translate even moderately noisy texts that humans have no trouble comprehending. We explore two approaches to increase model robustness: structure-invariant word representations and robust training on noisy texts. We find that a model based on a character convolutional neural network is able to simultaneously learn representations robust to multiple kinds of noise.
Key facts. Cited by 304 papers in the map (data through 7 Oct 2026). First posted on arXiv 6 Nov 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 89; 2022: 54; 2023: 67; 2024: 43; 2025: 26; 2026: 25.
304 papers.
Sort:
By area:
- 2021Datasets: A Community Library for Natural Language Processingcited by 526
- 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
- 2021XL-Sum: Large-Scale Multilingual Abstractive Summarization for 44 Languagescited by 346
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attackscited by 189
- 2023Do LLMs exhibit human-like response biases? A case study in survey designcited by 176
- 2021Charformer: Fast Character Transformers via Gradient-based Subword Tokenizationcited by 158
- 2021Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfercited by 147
- 2021MultiBench: Multiscale Benchmarks for Multimodal Representation Learningcited by 143
- 2023AugGPT: Leveraging ChatGPT for Text Data Augmentationcited by 128
- 2021A Survey on Data Augmentation for Text Classificationcited by 111
- 2021Robustness Gym: Unifying the NLP Evaluation Landscapecited by 107
- 2021Measure and Improve Robustness in NLP Models: A Surveycited by 107
38 more
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2023Waffling around for Performance: Visual Classification with Random Words and Broad Conceptscited by 100
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validationcited by 91
- 2021Evaluating the Robustness of Neural Language Models to Input Perturbationscited by 87
- 2021Leveraging Automated Unit Tests for Unsupervised Code Translationcited by 82
- 2021Bad Characters: Imperceptible NLP Attackscited by 69
- 2024LLM2LLM: Boosting LLMs with Novel Iterative Data Enhancementcited by 69
- 2021Towards Robustness Against Natural Language Word Substitutionscited by 68
- 2025Dynamic Chunking for End-to-End Hierarchical Sequence Modelingcited by 65
- 2021CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understandingcited by 50
- 2021How Should Pre-Trained Language Models Be Fine-Tuned Towards Adversarial Robustness?cited by 49
- 2021Robust Open-Vocabulary Translation from Visual Text Representationscited by 47
- 2022VALUE: Understanding Dialect Disparity in NLUcited by 45
- 2023On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codexcited by 41
- 2024Changing Answer Order Can Decrease MMLU Accuracycited by 41
- 2022Order-Disorder: Imitation Adversarial Attacks for Black-box Neural Ranking Modelscited by 37
- 2022Can Rationalization Improve Robustness?cited by 36
- 2023In ChatGPT We Trust? Measuring and Characterizing the Reliability of ChatGPTcited by 35
- 2021On Compositional Generalization of Neural Machine Translationcited by 34
- 2021SGD-X: A Benchmark for Robust Generalization in Schema-Guided Dialogue Systemscited by 34
- 2021Towards Robust Classification Model by Counterfactual and Invariant Data Generationcited by 30
- 2021Challenges in Generalization in Open Domain Question Answeringcited by 30
- 2023Large Language Models for Healthcare Data Augmentation: An Example on Patient-Trial Matchingcited by 30
- 2023Don't blame Dataset Shift! Shortcut Learning due to Gradients and Cross Entropycited by 30
- 2023The Trickle-down Impact of Reward (In-)consistency on RLHFcited by 29
- 2022Towards Robustness of Text-to-SQL Models Against Natural and Realistic Adversarial Table Perturbationcited by 28
- 2023Assessing Hidden Risks of LLMs: An Empirical Study on Robustness, Consistency, and Credibilitycited by 28
- 2022Faithfulness in Natural Language Generation: A Systematic Survey of Analysis, Evaluation and Optimization Methodscited by 27
- 2023Dissociating language and thought in large language modelscited by 27
- 2021Substructure Substitution: Structured Data Augmentation for NLPcited by 25
- 2021NoiseQA: Challenge Set Evaluation for User-Centric Question Answeringcited by 25
- 2021Reliability Testing for Natural Language Processing Systemscited by 25
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputscited by 25
- 2021Data Augmentation in Natural Language Processing: A Novel Text Generation Approach for Long and Short Text Classifierscited by 24
- 2021How Robust are Model Rankings: A Leaderboard Customization Approach for Equitable Evaluationcited by 24
- 2024On Behalf of the Stakeholders: Trends in NLP Model Interpretability in the Era of LLMscited by 24
- 2022Phrase-level Textual Adversarial Attack with Label Preservationcited by 23
- 2022Certified Robustness Against Natural Language Attacks by Causal Interventioncited by 23
50 most cited of 304 All 304 (JSON)
- 2026Typographic Attack Against VLM-based AI-generated Image Detection30 Sep 2026
- 2026RMB: Reward Model Boosting Mitigates Reward Hacking27 Sep 2026
- 2026How Perturbations Propagate: A Multi-Level Analysis of Robustness in Large Language Models3 Sep 2026
- 2026Low-Latency Spell Correction for Japanese Music Search Queries2 Sep 2026
- 2026Beyond Scores: Understanding LLM-as-a-Judge Mechanisms in Summarization Evaluation1 Sep 2026
- 2026When Is Noise Response Universal? Tokenization as the Hidden Variable in Language Models26 Aug 2026
- 2026Lexical Perturbations Disrupt LLM Reasoning: An Empirical Study of Attention Diversion22 Aug 2026
- 2026Should We Type or Talk to LLM Agents? A Comprehensive Study of Voice and Keyboard Input Perturbations4 Aug 2026
- 2026Beyond the Bidirectional Promise: Re-evaluating the Robustness of Diffusion Language Models29 Jul 2026
- 2026Reasoning as a Double-Edged Sword: Architecture and Cross-Stage Robustness in Vision-Language-Action Models20 Jul 2026
- 2026Auto-DSM Under the Lens: A Black-Box Evaluation Framework for LLM-Based DSM Generation7 Jul 2026
- 2026Beyond Surface Forms: A Comprehensive, Mechanism-Oriented Taxonomy of Indirect Linguistic Encoding for LLM-Based Coded Language Detection25 Jun 2026
38 more
- 2026The Signal in the Noise: An Auditable Reliability Layer for Biomedical Text Classification16 Jun 2026
- 2026PiDA: Phonetically-Informed Data Augmentation for Robust Vietnamese Speech Translation11 Jun 2026
- 2026Does AI Reviewer See the Full Picture? Attacking and Defending Multimodal Peer Review10 Jun 2026
- 2026Do VLMs Read or Rewrite? On Transcription Faithfulness in Vision-Language Models29 May 2026
- 2026Mind Your Moras: Orthography-Aware Error Analysis of Neural Japanese Morphological Generation19 May 2026
- 2026Breaking Safety at the Token Boundary: How BPE Tokenization Creates Exploitable Gaps in LLM Alignment1 May 2026
- 2026Product-of-Experts Training Reduces Dataset Artifacts in Natural Language Inference21 Apr 2026
- 2026Individual and Combined Effects of English as a Second Language and Typos on LLM Performance6 Apr 2026
- 2026Noise-Response Calibration: A Causal Intervention Protocol for LLM-Judges17 Mar 2026
- 2026ByteFlow: Language Modeling through Adaptive Byte Compression without a Tokenizer3 Mar 2026
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivity27 Feb 2026
- 2026Pre-Editorial Normalization for Automatically Transcribed Medieval Manuscripts in Old French and Latin14 Feb 2026
- 2026KALE: Enhancing Knowledge Manipulation in Large Language Models via Knowledge-aware Learning12 Jan 2026
- 2025Governance-Aware Hybrid Fine-Tuning for Multilingual Large Language Models19 Dec 2025
- 2025Reward Auditor: Inference on Reward Modeling Suitability in Real-World Perturbed Scenarios30 Nov 2025
- 2025AdaptDel: Adaptable Deletion Rate Randomized Smoothing for Certified Robustness12 Nov 2025
- 2025Typoglycemia under the Hood: Investigating Language Models' Understanding of Scrambled Words24 Oct 2025
- 2025Style Attack Disguise: When Fonts Become a Camouflage for Adversarial Intent22 Oct 2025
- 2025SAGE: A Realistic Benchmark for Semantic Understanding25 Sep 2025
- 2025Middo: Model-Informed Dynamic Data Optimization for Enhanced LLM Fine-Tuning via Closed-Loop Learning29 Aug 2025
- 2025A New NMT Model for Translating Clinical Texts from English to Spanish26 Aug 2025
- 2025Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries10 Aug 2025
- 2025Rainbow Noise: Stress-Testing Multimodal Harmful-Meme Detectors on LGBTQ Content24 Jul 2025
- 2025How Important is `Perfect' English for Machine Translation Prompts?13 Jul 2025
- 2025Dynamic Chunking for End-to-End Hierarchical Sequence Modeling10 Jul 2025
- 2025Potemkin Understanding in Large Language Models26 Jun 2025
- 2025TokenBreak: Bypassing Text Classification Models Through Token Manipulation9 Jun 2025
- 2025Breaking the Reviewer: Assessing the Vulnerability of Large Language Models in Automated Peer Review Under Textual Adversarial Attacks8 Jun 2025
- 2025Robustness in Both Domains: CLIP Needs a Robust Text Encoder3 Jun 2025
- 2025A Representation Level Analysis of NMT Model Robustness to Grammatical Errors27 May 2025
- 2025A Comprehensive Analysis of Adversarial Attacks against Spam Filters4 May 2025
- 2025FLUKE: A Linguistically-Driven and Task-Agnostic Framework for Robustness Evaluation24 Apr 2025
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputs14 Mar 2025
- 2025AutoTestForge: A Multidimensional Automated Testing Framework for Natural Language Processing Models7 Mar 2025
- 2025Pay Attention to Real World Perturbations! Natural Robustness Evaluation in Machine Reading Comprehension23 Feb 2025
- 2025Diversity-oriented Data Augmentation with Large Language Models17 Feb 2025
- 2025Misspellings in Natural Language Processing: A survey28 Jan 2025
- 2025DialUp! Modeling the Language Continuum by Adapting Models to Dialects and Dialects to Models27 Jan 2025
50 newest of 304 All 304 (JSON)
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attackscited by 189
- 2021Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfercited by 147
- 2021Putting words into the system's mouth: A targeted attack on neural machine translation using monolingual data poisoningcited by 19
- 2023PromptAttack: Probing Dialogue State Trackers with Adversarial Promptscited by 6
- 2024Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Contextcited by 3
- 2026Does AI Reviewer See the Full Picture? Attacking and Defending Multimodal Peer Reviewcited by 1
- 2021Generating Watermarked Adversarial Textscited by 0
- 2026Does AI Reviewer See the Full Picture? Attacking and Defending Multimodal Peer Review10 Jun 2026
- 2024Human-Readable Adversarial Prompts: An Investigation into LLM Vulnerabilities Using Situational Context20 Dec 2024
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks16 Oct 2023
- 2023PromptAttack: Probing Dialogue State Trackers with Adversarial Prompts7 Jun 2023
- 2021Generating Watermarked Adversarial Texts25 Oct 2021
- 2021Mind the Style of Text! Adversarial and Backdoor Attacks Based on Text Style Transfer14 Oct 2021
- 2021Putting words into the system's mouth: A targeted attack on neural machine translation using monolingual data poisoning12 Jul 2021
- 2023The Trickle-down Impact of Reward (In-)consistency on RLHFcited by 29
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputscited by 25
- 2025Reward Auditor: Inference on Reward Modeling Suitability in Real-World Perturbed Scenarioscited by 7
- 2024Stochastic Monkeys at Play: Random Augmentations Cheaply Break LLM Safety Alignmentcited by 5
- 2026Breaking Safety at the Token Boundary: How BPE Tokenization Creates Exploitable Gaps in LLM Alignmentcited by 0
- 2026RMB: Reward Model Boosting Mitigates Reward Hackingcited by 0
- 2026RMB: Reward Model Boosting Mitigates Reward Hacking27 Sep 2026
- 2026Breaking Safety at the Token Boundary: How BPE Tokenization Creates Exploitable Gaps in LLM Alignment1 May 2026
- 2025Reward Auditor: Inference on Reward Modeling Suitability in Real-World Perturbed Scenarios30 Nov 2025
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputs14 Mar 2025
- 2024Stochastic Monkeys at Play: Random Augmentations Cheaply Break LLM Safety Alignment5 Nov 2024
- 2023The Trickle-down Impact of Reward (In-)consistency on RLHF28 Sep 2023
- 2023Waffling around for Performance: Visual Classification with Random Words and Broad Conceptscited by 100
- 2023RoCOCO: Robustness Benchmark of MS-COCO to Stress-test Image-Text Matching Modelscited by 7
- 2026Do VLMs Read or Rewrite? On Transcription Faithfulness in Vision-Language Modelscited by 2
- 2026Typographic Attack Against VLM-based AI-generated Image Detectioncited by 0
- 2026Typographic Attack Against VLM-based AI-generated Image Detection30 Sep 2026
- 2026Do VLMs Read or Rewrite? On Transcription Faithfulness in Vision-Language Models29 May 2026
- 2023Waffling around for Performance: Visual Classification with Random Words and Broad Concepts12 Jun 2023
- 2023RoCOCO: Robustness Benchmark of MS-COCO to Stress-test Image-Text Matching Models21 Apr 2023
- 2023Dynamic Transformers Provide a False Sense of Efficiencycited by 11
- 2023Dynamic Transformers Provide a False Sense of Efficiency20 May 2023
- 2021Datasets: A Community Library for Natural Language Processingcited by 526
- 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
- 2021XL-Sum: Large-Scale Multilingual Abstractive Summarization for 44 Languagescited by 346
- 2023Do LLMs exhibit human-like response biases? A case study in survey designcited by 176
- 2021Charformer: Fast Character Transformers via Gradient-based Subword Tokenizationcited by 158
- 2021MultiBench: Multiscale Benchmarks for Multimodal Representation Learningcited by 143
- 2023AugGPT: Leveraging ChatGPT for Text Data Augmentationcited by 128
- 2021A Survey on Data Augmentation for Text Classificationcited by 111
- 2021Robustness Gym: Unifying the NLP Evaluation Landscapecited by 107
- 2021Measure and Improve Robustness in NLP Models: A Surveycited by 107
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validationcited by 91
12 most cited of 279 All 279 (JSON)
- 2026How Perturbations Propagate: A Multi-Level Analysis of Robustness in Large Language Models3 Sep 2026
- 2026Low-Latency Spell Correction for Japanese Music Search Queries2 Sep 2026
- 2026Beyond Scores: Understanding LLM-as-a-Judge Mechanisms in Summarization Evaluation1 Sep 2026
- 2026When Is Noise Response Universal? Tokenization as the Hidden Variable in Language Models26 Aug 2026
- 2026Auto-DSM Under the Lens: A Black-Box Evaluation Framework for LLM-Based DSM Generation7 Jul 2026
- 2026Beyond Surface Forms: A Comprehensive, Mechanism-Oriented Taxonomy of Indirect Linguistic Encoding for LLM-Based Coded Language Detection25 Jun 2026
- 2026The Signal in the Noise: An Auditable Reliability Layer for Biomedical Text Classification16 Jun 2026
- 2026PiDA: Phonetically-Informed Data Augmentation for Robust Vietnamese Speech Translation11 Jun 2026
- 2026Mind Your Moras: Orthography-Aware Error Analysis of Neural Japanese Morphological Generation19 May 2026
- 2026Product-of-Experts Training Reduces Dataset Artifacts in Natural Language Inference21 Apr 2026
- 2026Individual and Combined Effects of English as a Second Language and Typos on LLM Performance6 Apr 2026
- 2026Noise-Response Calibration: A Causal Intervention Protocol for LLM-Judges17 Mar 2026
12 newest of 279 All 279 (JSON)