Robust Machine Comprehension Models via Adversarial Training
Not on the map. Why?
Abstract (arXiv)
It is shown that many published models for the Stanford Question Answering Dataset (Rajpurkar et al., 2016) lack robustness, suffering an over 50% decrease in F1 score during adversarial evaluation based on the AddSent (Jia and Liang, 2017) algorithm. It has also been shown that retraining models on data generated by AddSent has limited effect on their robustness. We propose a novel alternative adversary-generation algorithm, AddSentDiverse, that significantly increases the variance within the adversarial training data by providing effective examples that punish the model for making certain superficial assumptions. Further, in order to improve robustness to AddSent's semantic perturbations (e.g., antonyms), we jointly improve the model's semantic-relationship learning capabilities in addition to our AddSentDiverse-based adversarial training data augmentation. With these additions, we show that we can make a state-of-the-art model significantly more robust, achieving a 36.5% increase in F1 score under many different types of adversarial evaluation while maintaining performance on the regular SQuAD task.
Key facts. Cited by 44 papers in the map (data through 14 Oct 2026). First posted on arXiv 17 Apr 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 16; 2022: 8; 2023: 13; 2024: 6; 2025: 0; 2026: 1.
44 papers.
Sort:
By area:
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attackscited by 194
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validationcited by 93
- 2021CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understandingcited by 50
- 2021Can NLI Models Verify QA Systems' Predictions?cited by 46
- 2021HiddenCut: Simple Data Augmentation for Natural Language Understanding with Better Generalizationcited by 32
- 2022A Survey of Adversarial Defences and Robustness in NLPcited by 23
- 2021Certified Robustness to Programmable Transformations in LSTMscited by 18
- 2022Debiasing Masks: A New Framework for Shortcut Mitigation in NLUcited by 16
- 2022Recent Advances in Neural Text Generation: A Task-Agnostic Surveycited by 14
- 2021Contrastive Fine-tuning Improves Robustness for Neural Rankerscited by 12
- 2021Unifying Model Explainability and Robustness for Joint Text Classification and Rationale Extractioncited by 11
32 more
- 2024PIDformer: Transformer Meets Control Theorycited by 11
- 2023Improving Conversational Recommendation Systems via Counterfactual Data Simulationcited by 10
- 2023Model-tuning Via Prompts Makes NLP Models Adversarially Robustcited by 9
- 2022Residue-Based Natural Language Adversarial Attack Detectioncited by 8
- 2021Improving the robustness and accuracy of biomedical language models through adversarial trainingcited by 7
- 2024Desiderata for the Context Use of Question Answering Systemscited by 7
- 2021Are Multilingual BERT models robust? A Case Study on Adversarial Attacks for Multilingual Question Answeringcited by 6
- 2023LEAP: Efficient and Automated Test Method for NLP Softwarecited by 6
- 2021Virtual Data Augmentation: A Robust and General Framework for Fine-tuning Pre-trained Modelscited by 5
- 2021Enhancing Model Robustness By Incorporating Adversarial Knowledge Into Semantic Representationcited by 4
- 2021Reasoning Chain Based Adversarial Attack for Multi-hop Question Answeringcited by 4
- 2022A Survey on Measuring and Mitigating Reasoning Shortcuts in Machine Reading Comprehensioncited by 4
- 2023The Impacts of Unanswerable Questions on the Robustness of Machine Reading Comprehension Modelscited by 4
- 2021Towards Confident Machine Reading Comprehensioncited by 3
- 2023Adversary for Social Good: Leveraging Adversarial Attacks to Protect Personal Attribute Privacycited by 3
- 2021Model Agnostic Answer Reranking System for Adversarial Question Answeringcited by 2
- 2021Improving Robustness of Malware Classifiers using Adversarial Strings Generated from Perturbed Latent Representationscited by 2
- 2023Data Augmentation for Neural NLPcited by 2
- 2023Mitigating Shortcuts in Language Models with Soft Label Encodingcited by 2
- 2024The Impact of Quantization on the Robustness of Transformer-based Text Classifierscited by 2
- 2024Specification Overfitting in Artificial Intelligencecited by 2
- 2021CLLD: Contrastive Learning with Label Distance for Text Classificationcited by 1
- 2022Using calibrator to improve robustness in Machine Reading Comprehensioncited by 0
- 2022Improving Lexical Embeddings for Robust Question Answeringcited by 0
- 2022An Understanding-Oriented Robust Machine Reading Comprehension Modelcited by 0
- 2023Evaluating the Robustness of Machine Reading Comprehension Models to Low Resource Entity Renamingcited by 0
- 2023SCAT: Robust Self-supervised Contrastive Learning via Adversarial Training for Text Classificationcited by 0
- 2023No offence, Bert -- I insult only humans! Multiple addressees sentence-level attack on toxicity detection neural networkcited by 0
- 2023A Lightweight Method to Generate Unanswerable Questions in Englishcited by 0
- 2024Contextual Breach: Assessing the Robustness of Transformer-based QA Modelscited by 0
- 2024Towards Robust Extractive Question Answering Models: Rethinking the Training Methodologycited by 0
- 2026Operational Robustness of LLMs on Code Generationcited by 0
- 2026Operational Robustness of LLMs on Code Generation21 Feb 2026
- 2024Towards Robust Extractive Question Answering Models: Rethinking the Training Methodology29 Sep 2024
- 2024Contextual Breach: Assessing the Robustness of Transformer-based QA Models17 Sep 2024
- 2024Specification Overfitting in Artificial Intelligence13 Mar 2024
- 2024The Impact of Quantization on the Robustness of Transformer-based Text Classifiers8 Mar 2024
- 2024PIDformer: Transformer Meets Control Theory25 Feb 2024
- 2024Desiderata for the Context Use of Question Answering Systems31 Jan 2024
- 2023A Lightweight Method to Generate Unanswerable Questions in English30 Oct 2023
- 2023No offence, Bert -- I insult only humans! Multiple addressees sentence-level attack on toxicity detection neural network19 Oct 2023
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks16 Oct 2023
- 2023Mitigating Shortcuts in Language Models with Soft Label Encoding17 Sep 2023
- 2023LEAP: Efficient and Automated Test Method for NLP Software22 Aug 2023
32 more
- 2023SCAT: Robust Self-supervised Contrastive Learning via Adversarial Training for Text Classification4 Jul 2023
- 2023Improving Conversational Recommendation Systems via Counterfactual Data Simulation5 Jun 2023
- 2023Adversary for Social Good: Leveraging Adversarial Attacks to Protect Personal Attribute Privacy4 Jun 2023
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validation19 May 2023
- 2023Evaluating the Robustness of Machine Reading Comprehension Models to Low Resource Entity Renaming6 Apr 2023
- 2023Model-tuning Via Prompts Makes NLP Models Adversarially Robust13 Mar 2023
- 2023Data Augmentation for Neural NLP22 Feb 2023
- 2023The Impacts of Unanswerable Questions on the Robustness of Machine Reading Comprehension Models31 Jan 2023
- 2022Debiasing Masks: A New Framework for Shortcut Mitigation in NLU28 Oct 2022
- 2022A Survey on Measuring and Mitigating Reasoning Shortcuts in Machine Reading Comprehension5 Sep 2022
- 2022An Understanding-Oriented Robust Machine Reading Comprehension Model1 Jul 2022
- 2022Residue-Based Natural Language Adversarial Attack Detection17 Apr 2022
- 2022A Survey of Adversarial Defences and Robustness in NLP12 Mar 2022
- 2022Recent Advances in Neural Text Generation: A Task-Agnostic Survey6 Mar 2022
- 2022Improving Lexical Embeddings for Robust Question Answering28 Feb 2022
- 2022Using calibrator to improve robustness in Machine Reading Comprehension24 Feb 2022
- 2021Unifying Model Explainability and Robustness for Joint Text Classification and Rationale Extraction20 Dec 2021
- 2021Reasoning Chain Based Adversarial Attack for Multi-hop Question Answering17 Dec 2021
- 2021Improving the robustness and accuracy of biomedical language models through adversarial training16 Nov 2021
- 2021CLLD: Contrastive Learning with Label Distance for Text Classification25 Oct 2021
- 2021Improving Robustness of Malware Classifiers using Adversarial Strings Generated from Perturbed Latent Representations22 Oct 2021
- 2021Virtual Data Augmentation: A Robust and General Framework for Fine-tuning Pre-trained Models13 Sep 2021
- 2021CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understanding1 Jul 2021
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLP14 Jun 2021
- 2021HiddenCut: Simple Data Augmentation for Natural Language Understanding with Better Generalization31 May 2021
- 2021Contrastive Fine-tuning Improves Robustness for Neural Rankers27 May 2021
- 2021Can NLI Models Verify QA Systems' Predictions?18 Apr 2021
- 2021Are Multilingual BERT models robust? A Case Study on Adversarial Attacks for Multilingual Question Answering15 Apr 2021
- 2021Enhancing Model Robustness By Incorporating Adversarial Knowledge Into Semantic Representation23 Feb 2021
- 2021Certified Robustness to Programmable Transformations in LSTMs15 Feb 2021
- 2021Model Agnostic Answer Reranking System for Adversarial Question Answering5 Feb 2021
- 2021Towards Confident Machine Reading Comprehension20 Jan 2021
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validationcited by 93
- 2021CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understandingcited by 50
- 2021Can NLI Models Verify QA Systems' Predictions?cited by 46
- 2021HiddenCut: Simple Data Augmentation for Natural Language Understanding with Better Generalizationcited by 32
- 2022A Survey of Adversarial Defences and Robustness in NLPcited by 23
- 2021Certified Robustness to Programmable Transformations in LSTMscited by 18
- 2022Debiasing Masks: A New Framework for Shortcut Mitigation in NLUcited by 16
- 2022Recent Advances in Neural Text Generation: A Task-Agnostic Surveycited by 14
- 2021Contrastive Fine-tuning Improves Robustness for Neural Rankerscited by 12
- 2021Unifying Model Explainability and Robustness for Joint Text Classification and Rationale Extractioncited by 11
- 2024PIDformer: Transformer Meets Control Theorycited by 11
12 most cited of 43 All 43 (JSON)
- 2026Operational Robustness of LLMs on Code Generation21 Feb 2026
- 2024Towards Robust Extractive Question Answering Models: Rethinking the Training Methodology29 Sep 2024
- 2024Contextual Breach: Assessing the Robustness of Transformer-based QA Models17 Sep 2024
- 2024Specification Overfitting in Artificial Intelligence13 Mar 2024
- 2024The Impact of Quantization on the Robustness of Transformer-based Text Classifiers8 Mar 2024
- 2024PIDformer: Transformer Meets Control Theory25 Feb 2024
- 2024Desiderata for the Context Use of Question Answering Systems31 Jan 2024
- 2023A Lightweight Method to Generate Unanswerable Questions in English30 Oct 2023
- 2023No offence, Bert -- I insult only humans! Multiple addressees sentence-level attack on toxicity detection neural network19 Oct 2023
- 2023Mitigating Shortcuts in Language Models with Soft Label Encoding17 Sep 2023
- 2023LEAP: Efficient and Automated Test Method for NLP Software22 Aug 2023
- 2023SCAT: Robust Self-supervised Contrastive Learning via Adversarial Training for Text Classification4 Jul 2023
12 newest of 43 All 43 (JSON)