BPE-Dropout: Simple and Effective Subword Regularization
Not on the map. Why?
Abstract (arXiv)
Subword segmentation is widely used to address the open vocabulary problem in machine translation. The dominant approach to subword segmentation is Byte Pair Encoding (BPE), which keeps the most frequent words intact while splitting the rare ones into multiple tokens. While multiple segmentations are possible even with the same vocabulary, BPE splits words into unique sequences; this may prevent a model from better learning the compositionality of words and being robust to segmentation errors. So far, the only way to overcome this BPE imperfection, its deterministic nature, was to create another subword segmentation algorithm (Kudo, 2018). In contrast, we show that BPE itself incorporates the ability to produce multiple segmentations of the same word. We introduce BPE-dropout - simple and effective subword regularization method based on and compatible with conventional BPE. It stochastically corrupts the segmentation procedure of BPE, which leads to producing multiple segmentations within the same fixed BPE framework. Using BPE-dropout during training and the standard BPE during inference improves translation quality up to 3 BLEU compared to BPE and up to 0.9 BLEU compared to the previous subword regularization.
Key facts. Cited by 189 papers in the map (data through 7 Oct 2026). First posted on arXiv 29 Oct 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 28; 2022: 29; 2023: 32; 2024: 42; 2025: 28; 2026: 30.
189 papers.
Sort:
By area:
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2022Robust Speech Recognition via Large-Scale Weak Supervisioncited by 3,972
- 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 608
- 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 328
- 2022Efficient Training of Language Models to Fill in the Middlecited by 248
- 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 233
- 2021CANINE: Pre-training an Efficient Tokenization-Free Encoder for Language Representationcited by 229
- 2023Language Modeling Is Compressioncited by 225
- 2024ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMscited by 197
- 2023Do All Languages Cost the Same? Tokenization in the Era of Commercial Language Modelscited by 186
- 2024Lessons from the Trenches on Reproducible Evaluation of Language Modelscited by 172
- 2021Charformer: Fast Character Transformers via Gradient-based Subword Tokenizationcited by 158
38 more
- 2021Between words and characters: A Brief History of Open-Vocabulary Modeling and Tokenization in NLPcited by 130
- 2021Survey of Low-Resource Machine Translationcited by 92
- 2024Tokenization Is More Than Compressioncited by 87
- 2024JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Modelscited by 67
- 2024Getting the most out of your tokenizer for pre-training and domain adaptationcited by 65
- 2022Impact of Tokenization on Language Models: An Analysis for Turkishcited by 62
- 2024Unpacking Tokenization: Evaluating Text Compression and its Correlation with Model Performancecited by 61
- 2023Tokenization and the Noiseless Channelcited by 58
- 2025SuperBPE: Space Travel for Language Modelscited by 58
- 2022Language Modelling with Pixelscited by 53
- 2021HerBERT: Efficiently Pretrained Transformer-based Language Model for Polishcited by 51
- 2025Intern-S1: A Scientific Multimodal Foundation Modelcited by 49
- 2021Robust Open-Vocabulary Translation from Visual Text Representationscited by 47
- 2024From Tokens to Words: On the Inner Lexicon of LLMscited by 46
- 2024Fishing for Magikarp: Automatically Detecting Under-trained Tokens in Large Language Modelscited by 45
- 2021Consistency Regularization for Cross-Lingual Fine-Tuningcited by 41
- 2022Identifying Weaknesses in Machine Translation Metrics Through Minimum Bayes Risk Decoding: A Case Study for COMETcited by 41
- 2024Number Cookbook: Number Understanding of Language Models and How to Improve Itcited by 41
- 2021Multi-view Subword Regularizationcited by 40
- 2021Low Frequency Names Exhibit Bias and Overfitting in Contextualizing Language Modelscited by 39
- 2022What do tokens know about their characters and how do they know it?cited by 36
- 2023SLTUNET: A Simple Unified Model for Sign Language Translationcited by 35
- 2024Greed is All You Need: An Evaluation of Tokenizer Inference Methodscited by 34
- 2023Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Informationcited by 32
- 2021Many-to-English Machine Translation Tools, Data, and Pretrained Modelscited by 31
- 2024BPE Gets Picky: Efficient Vocabulary Refinement During Tokenizer Trainingcited by 30
- 2021You should evaluate your language model on marginal likelihood over tokenisationscited by 29
- 2021How BPE Affects Memorization in Transformerscited by 29
- 2024From Language Models over Tokens to Language Models over Characterscited by 28
- 2021Why don't people use character-level machine translation?cited by 27
- 2022Overlap-based Vocabulary Generation Improves Cross-lingual Transfer Among Related Languagescited by 25
- 2022The SIGMORPHON 2022 Shared Task on Morpheme Segmentationcited by 25
- 2022Analyzing Generalization of Vision and Language Navigation to Unseen Outdoor Areascited by 24
- 2024h4rm3l: A language for Composable Jailbreak Attack Synthesiscited by 23
- 2025MorphBPE: A Morpho-Aware Tokenizer Bridging Linguistic Complexity for Efficient LLM Training Across Morphologiescited by 23
- 2021Learning Word-Level Confidence For Subword End-to-End ASRcited by 22
- 2022Gating Dropout: Communication-efficient Regularization for Sparsely Activated Transformerscited by 22
- 2023UniCoRN: Unified Cognitive Signal ReconstructioN bridging cognitive signals and human languagecited by 22
50 most cited of 189 All 189 (JSON)
- 2026TOAST: Stochastic Robot Action Tokenization for Autoregressive Vision-Language-Action Models1 Oct 2026
- 2026LEMON-ZEST: Evolution-Informed Tokenization for Efficient Protein Language Modeling29 Sep 2026
- 2026Same Bytes, Different Authority: Reserved-Token Representations in Chat-Template Prompt Injection28 Sep 2026
- 2026Nested Byte-Level Vocabularies Are Cheap to Deploy and Expensive to Share: A Pre-Registered Negative Result28 Aug 2026
- 2026What Tokens are Learned when Tokenization is Optimized Jointly with Language Modeling?18 Aug 2026
- 2026Pruned BPE: Post-training Visibility Pruning and Token Reallocation for Byte Pair Encoding1 Aug 2026
- 2026CompileRover: Revolutionizing Virtual Machine Compiler Optimization with a Tri-Role LLM-Driven Framework21 Jul 2026
- 2026Where to cut, how deep: BPE and Unigram-LM on chemistry SMILES6 Jul 2026
- 2026Emergent retokenization symmetry in large language models: phenomenology and applications14 Jun 2026
- 2026PACUTE: Phonology-, Affix-, and Character-level Understanding of Tokens for Filipino13 Jun 2026
- 2026SuTRA : Structurally-Unified Tokenization with Root Awareness5 Jun 2026
- 2026Pretraining Language Models with Subword Regularization: An Empirical Study of BPE Dropout in Low-Resource NLP13 May 2026
38 more
- 2026Re-Triggering Safeguards within LLMs for Jailbreak Detection11 May 2026
- 2026Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing11 May 2026
- 2026Why do Large Language Models Fail in Low-resource Translation? Unraveling the Token Dynamics of Large Language Models for Machine Translation8 May 2026
- 2026Compute Optimal Tokenization2 May 2026
- 2026Decoupling the Benefits of Subword Tokenization for Language Model Training via Byte-level Simulation29 Apr 2026
- 2026Stochasticity in Tokenisation Improves Robustness17 Apr 2026
- 2026From Where Words Come: Efficient Regularization of Code Tokenizers Through Source Attribution15 Apr 2026
- 2026EvoLen: Evolution-Guided Tokenization for DNA Language Model9 Apr 2026
- 2026ClaimFlow: Tracing the Evolution of Scientific Claims in NLP17 Mar 2026
- 2026Word Recovery in Large Language Models Enables Character-Level Tokenization Robustness11 Mar 2026
- 2026GPUTOK: GPU Accelerated Byte Level BPE Tokenization3 Mar 2026
- 2026LiteToken: Removing Intermediate Merge Residues From BPE Tokenizers4 Feb 2026
- 2026ERNIE 5.0 Technical Report4 Feb 2026
- 2026From Lemmas to Dependencies: What Signals Drive Light Verbs Classification?4 Feb 2026
- 2026AdaptBPE: From General Purpose to Specialized Tokenizers29 Jan 2026
- 2026Say Anything but This: When Tokenizer Betrays Reasoning in LLMs21 Jan 2026
- 2026SubTokenTest: A Practical Benchmark for Real-World Sub-token Understanding14 Jan 2026
- 2026Training Language Models with homotokens Leads to Delayed Overfitting6 Jan 2026
- 2025TokSuite: Measuring the Impact of Tokenizer Choice on Language Model Behavior23 Dec 2025
- 2025Which Pieces Does Unigram Tokenization Really Need?14 Dec 2025
- 2025The Learning Dynamics of Subword Segmentation for Morphologically Diverse Languages12 Nov 2025
- 2025Decoding-Free Sampling Strategies for LLM Marginalization23 Oct 2025
- 2025Online Learning Defense against Iterative Jailbreak Attacks via Prompt Optimization19 Oct 2025
- 2025ArtPerception: ASCII Art-based Jailbreak on LLMs with Recognition Pre-test11 Oct 2025
- 2025Intern-S1: A Scientific Multimodal Foundation Model21 Aug 2025
- 2025Exploiting Vocabulary Frequency Imbalance in Language Model Pre-training21 Aug 2025
- 2025SupraTok: Cross-Boundary Tokenization for Enhanced Language Model Performance16 Aug 2025
- 2025Train It and Forget It: Merge Lists are Unnecessary for BPE Inference in Language Models8 Aug 2025
- 2025Pre-trained Models Perform the Best When Token Distributions Follow Zipf's Law30 Jul 2025
- 2025Broken Tokens? Your Language Model can Secretly Handle Non-Canonical Tokenizations23 Jun 2025
- 2025Less Is More: Reducing Token Counts Without Compromising Performance18 Jun 2025
- 2025Sampling from Your Language Model One Byte at a Time17 Jun 2025
- 2025Tokenization Multiplicity Leads to Arbitrary Price Variation in LLM-as-a-service6 Jun 2025
- 2025Beyond Text Compression: Evaluating Tokenizers Across Scales3 Jun 2025
- 2025Should LLM Safety Be More Than Refusing Harmful Instructions?3 Jun 2025
- 2025StochasTok: Improving Fine-Grained Subword Understanding in LLMs2 Jun 2025
- 2025Swedish Whispers; Leveraging a Massive Speech Corpus for Swedish Speech Recognition23 May 2025
- 2025Comparative analysis of subword tokenization approaches for Indian languages22 May 2025
50 newest of 189 All 189 (JSON)
- 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 328
- 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 233
- 2024ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMscited by 197
- 2023Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Informationcited by 32
- 2024h4rm3l: A language for Composable Jailbreak Attack Synthesiscited by 23
- 2024HSF: Defending against Jailbreak Attacks with Hidden State Filteringcited by 21
- 2024Large Language Models Are Involuntary Truth-Tellers: Exploiting Fallacy Failure for Jailbreak Attackscited by 17
- 2025Should LLM Safety Be More Than Refusing Harmful Instructions?cited by 6
- 2025Can Small Language Models Reliably Resist Jailbreak Attacks? A Comprehensive Evaluationcited by 3
- 2025Online Learning Defense against Iterative Jailbreak Attacks via Prompt Optimizationcited by 3
- 2025ArtPerception: ASCII Art-based Jailbreak on LLMs with Recognition Pre-testcited by 2
- 2026Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothingcited by 0
12 most cited of 13 All 13 (JSON)
- 2026Re-Triggering Safeguards within LLMs for Jailbreak Detection11 May 2026
- 2026Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing11 May 2026
- 2025Online Learning Defense against Iterative Jailbreak Attacks via Prompt Optimization19 Oct 2025
- 2025ArtPerception: ASCII Art-based Jailbreak on LLMs with Recognition Pre-test11 Oct 2025
- 2025Should LLM Safety Be More Than Refusing Harmful Instructions?3 Jun 2025
- 2025Can Small Language Models Reliably Resist Jailbreak Attacks? A Comprehensive Evaluation9 Mar 2025
- 2024HSF: Defending against Jailbreak Attacks with Hidden State Filtering31 Aug 2024
- 2024h4rm3l: A language for Composable Jailbreak Attack Synthesis9 Aug 2024
- 2024Large Language Models Are Involuntary Truth-Tellers: Exploiting Fallacy Failure for Jailbreak Attacks1 Jul 2024
- 2024ArtPrompt: ASCII Art-based Jailbreak Attacks against Aligned LLMs19 Feb 2024
- 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decoding14 Feb 2024
- 2023Token-Level Adversarial Prompt Detection Based on Perplexity Measures and Contextual Information20 Nov 2023
12 newest of 13 All 13 (JSON)
- 2025Intern-S1: A Scientific Multimodal Foundation Modelcited by 49
- 2022Gating Dropout: Communication-efficient Regularization for Sparsely Activated Transformerscited by 22
- 2026ERNIE 5.0 Technical Reportcited by 9
- 2026ERNIE 5.0 Technical Report4 Feb 2026
- 2025Intern-S1: A Scientific Multimodal Foundation Model21 Aug 2025
- 2022Gating Dropout: Communication-efficient Regularization for Sparsely Activated Transformers28 May 2022
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2022Robust Speech Recognition via Large-Scale Weak Supervisioncited by 3,972
- 2022Efficient Training of Language Models to Fill in the Middlecited by 248
- 2021CANINE: Pre-training an Efficient Tokenization-Free Encoder for Language Representationcited by 229
- 2023Language Modeling Is Compressioncited by 225
- 2023Do All Languages Cost the Same? Tokenization in the Era of Commercial Language Modelscited by 186
- 2024Lessons from the Trenches on Reproducible Evaluation of Language Modelscited by 172
- 2021Charformer: Fast Character Transformers via Gradient-based Subword Tokenizationcited by 158
- 2021Between words and characters: A Brief History of Open-Vocabulary Modeling and Tokenization in NLPcited by 130
- 2021Survey of Low-Resource Machine Translationcited by 92
- 2024Tokenization Is More Than Compressioncited by 87
- 2024Getting the most out of your tokenizer for pre-training and domain adaptationcited by 65
12 most cited of 164 All 164 (JSON)
- 2026LEMON-ZEST: Evolution-Informed Tokenization for Efficient Protein Language Modeling29 Sep 2026
- 2026Nested Byte-Level Vocabularies Are Cheap to Deploy and Expensive to Share: A Pre-Registered Negative Result28 Aug 2026
- 2026What Tokens are Learned when Tokenization is Optimized Jointly with Language Modeling?18 Aug 2026
- 2026Pruned BPE: Post-training Visibility Pruning and Token Reallocation for Byte Pair Encoding1 Aug 2026
- 2026CompileRover: Revolutionizing Virtual Machine Compiler Optimization with a Tri-Role LLM-Driven Framework21 Jul 2026
- 2026Where to cut, how deep: BPE and Unigram-LM on chemistry SMILES6 Jul 2026
- 2026Emergent retokenization symmetry in large language models: phenomenology and applications14 Jun 2026
- 2026PACUTE: Phonology-, Affix-, and Character-level Understanding of Tokens for Filipino13 Jun 2026
- 2026SuTRA : Structurally-Unified Tokenization with Root Awareness5 Jun 2026
- 2026Pretraining Language Models with Subword Regularization: An Empirical Study of BPE Dropout in Low-Resource NLP13 May 2026
- 2026Why do Large Language Models Fail in Low-resource Translation? Unraveling the Token Dynamics of Large Language Models for Machine Translation8 May 2026
- 2026Compute Optimal Tokenization2 May 2026
12 newest of 164 All 164 (JSON)