Adversarial Robustness for Code
Not on the map. Why?
Abstract (arXiv)
Machine learning and deep learning in particular has been recently used to successfully address many tasks in the domain of code such as finding and fixing bugs, code completion, decompilation, type inference and many others. However, the issue of adversarial robustness of models for code has gone largely unnoticed. In this work, we explore this issue by: (i) instantiating adversarial attacks for code (a domain with discrete and highly structured inputs), (ii) showing that, similar to other domains, neural models for code are vulnerable to adversarial attacks, and (iii) combining existing and novel techniques to improve robustness while preserving high accuracy.
Key facts. Cited by 38 papers in the map (data through 14 Oct 2026). First posted on arXiv 11 Feb 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 6; 2022: 9; 2023: 7; 2024: 7; 2025: 5; 2026: 4.
38 papers.
Sort:
By area:
- 2022ReCode: Robustness Evaluation of Code Generation Modelscited by 103
- 2023Transformers Meet Directed Graphscited by 40
- 2021Scalable Certified Segmentation via Randomized Smoothingcited by 35
- 2023Uncovering the Limits of Machine Learning for Automatic Vulnerability Detectioncited by 30
- 2024Astraios: Parameter-Efficient Instruction Tuning Code Large Language Modelscited by 23
- 2021Generating Adversarial Computer Programs using Optimized Obfuscationscited by 22
- 2021Understanding Neural Code Intelligence Through Program Simplificationcited by 22
- 2023Deep Learning for Code Intelligence: Survey, Benchmark and Toolkitcited by 22
- 2021Memorization and Generalization in Neural Code Intelligence Modelscited by 19
- 2022RoPGen: Towards Robust Code Authorship Attribution via Automatic Coding Style Transformationcited by 15
- 2022On Distribution Shift in Learning-based Bug Detectorscited by 15
- 2023Do Large Language Models Pay Similar Attention Like Human Programmers When Generating Code?cited by 14
26 more
- 2023From Robustness to Explainability and Back Againcited by 14
- 2022HierarchyNet: Learning to Summarize Source Code with Heterogeneous Representationscited by 9
- 2023Boosting Source Code Learning with Text-Oriented Data Augmentation: An Empirical Studycited by 5
- 2024Impeding LLM-assisted Cheating in Introductory Programming Assignments via Adversarial Perturbationcited by 5
- 2021Towards Making Deep Learning-based Vulnerability Detectors Robustcited by 4
- 2022MIXCODE: Enhancing Code Classification by Mixup-Based Data Augmentationcited by 4
- 2024CodeFort: Robust Training for Code Generation Modelscited by 4
- 2024Measuring Impacts of Poisoning on Model Parameters and Embeddings for Large Language Models of Codecited by 4
- 2024Does Self-Attention Need Separate Weights in Transformers?cited by 4
- 2025XOXO: Stealthy Cross-Origin Context Poisoning Attacks against AI Coding Assistantscited by 4
- 2025The Hitchhiker's Guide to Program Analysis, Part II: Deep Thoughts by LLMscited by 4
- 2025EditLord: Learning Code Transformation Rules for Code Editingcited by 4
- 2022Characterizing and Understanding the Behavior of Quantized Models for Reliable Deploymentcited by 2
- 2022Semantic-Preserving Adversarial Code Comprehensioncited by 2
- 2022CLAWSAT: Towards Both Robust and Accurate Code Modelscited by 2
- 2023Transfer Attacks and Defenses for Large Language Models on Coding Taskscited by 2
- 2024GenCode: A Generic Data Augmentation Framework for Boosting Deep Learning-Based Code Understandingcited by 2
- 2025Semantic-Preserving Transformations as Mutation Operators: A Study on Their Effectiveness in Defect Detectioncited by 2
- 2026A Jagged Frontier: Evaluating Robustness of Code Agents to Semantics-Preserving Transformationscited by 2
- 2021Energy-bounded Learning for Robust Models of Codecited by 1
- 2022Unveiling Project-Specific Bias in Neural Code Modelscited by 1
- 2024Measuring Impacts of Poisoning on Model Parameters and Neuron Activations: A Case Study of Poisoning CodeBERTcited by 1
- 2025Cross-site scripting adversarial attacks based on deep reinforcement learning: Evaluation and extension studycited by 0
- 2026Learning Generalizable Multimodal Representations for Software Vulnerability Detectioncited by 0
- 2026Invariant Pretraining for Robust Code Representationscited by 0
- 2026On the Lexical Superstition of Large Language Models for Code Comprehension: Re-evaluation on Code of Low Lexical Qualitycited by 0
- 2026On the Lexical Superstition of Large Language Models for Code Comprehension: Re-evaluation on Code of Low Lexical Quality22 Sep 2026
- 2026A Jagged Frontier: Evaluating Robustness of Code Agents to Semantics-Preserving Transformations18 Aug 2026
- 2026Invariant Pretraining for Robust Code Representations15 Aug 2026
- 2026Learning Generalizable Multimodal Representations for Software Vulnerability Detection28 Apr 2026
- 2025The Hitchhiker's Guide to Program Analysis, Part II: Deep Thoughts by LLMs16 Apr 2025
- 2025Semantic-Preserving Transformations as Mutation Operators: A Study on Their Effectiveness in Defect Detection30 Mar 2025
- 2025XOXO: Stealthy Cross-Origin Context Poisoning Attacks against AI Coding Assistants18 Mar 2025
- 2025EditLord: Learning Code Transformation Rules for Code Editing10 Mar 2025
- 2025Cross-site scripting adversarial attacks based on deep reinforcement learning: Evaluation and extension study26 Feb 2025
- 2024Does Self-Attention Need Separate Weights in Transformers?30 Nov 2024
- 2024Impeding LLM-assisted Cheating in Introductory Programming Assignments via Adversarial Perturbation12 Oct 2024
- 2024Measuring Impacts of Poisoning on Model Parameters and Embeddings for Large Language Models of Code19 May 2024
26 more
- 2024CodeFort: Robust Training for Code Generation Models11 Apr 2024
- 2024GenCode: A Generic Data Augmentation Framework for Boosting Deep Learning-Based Code Understanding24 Feb 2024
- 2024Measuring Impacts of Poisoning on Model Parameters and Neuron Activations: A Case Study of Poisoning CodeBERT20 Feb 2024
- 2024Astraios: Parameter-Efficient Instruction Tuning Code Large Language Models1 Jan 2024
- 2023Deep Learning for Code Intelligence: Survey, Benchmark and Toolkit30 Dec 2023
- 2023Transfer Attacks and Defenses for Large Language Models on Coding Tasks22 Nov 2023
- 2023Uncovering the Limits of Machine Learning for Automatic Vulnerability Detection28 Jun 2023
- 2023From Robustness to Explainability and Back Again5 Jun 2023
- 2023Do Large Language Models Pay Similar Attention Like Human Programmers When Generating Code?2 Jun 2023
- 2023Boosting Source Code Learning with Text-Oriented Data Augmentation: An Empirical Study13 Mar 2023
- 2023Transformers Meet Directed Graphs31 Jan 2023
- 2022ReCode: Robustness Evaluation of Code Generation Models20 Dec 2022
- 2022CLAWSAT: Towards Both Robust and Accurate Code Models21 Nov 2022
- 2022MIXCODE: Enhancing Code Classification by Mixup-Based Data Augmentation6 Oct 2022
- 2022Semantic-Preserving Adversarial Code Comprehension12 Sep 2022
- 2022HierarchyNet: Learning to Summarize Source Code with Heterogeneous Representations31 May 2022
- 2022On Distribution Shift in Learning-based Bug Detectors21 Apr 2022
- 2022Characterizing and Understanding the Behavior of Quantized Models for Reliable Deployment8 Apr 2022
- 2022RoPGen: Towards Robust Code Authorship Attribution via Automatic Coding Style Transformation12 Feb 2022
- 2022Unveiling Project-Specific Bias in Neural Code Models19 Jan 2022
- 2021Energy-bounded Learning for Robust Models of Code20 Dec 2021
- 2021Towards Making Deep Learning-based Vulnerability Detectors Robust2 Aug 2021
- 2021Scalable Certified Segmentation via Randomized Smoothing1 Jul 2021
- 2021Memorization and Generalization in Neural Code Intelligence Models16 Jun 2021
- 2021Understanding Neural Code Intelligence Through Program Simplification7 Jun 2021
- 2021Generating Adversarial Computer Programs using Optimized Obfuscations18 Mar 2021
- 2022ReCode: Robustness Evaluation of Code Generation Modelscited by 103
- 2023Transformers Meet Directed Graphscited by 40
- 2021Scalable Certified Segmentation via Randomized Smoothingcited by 35
- 2023Uncovering the Limits of Machine Learning for Automatic Vulnerability Detectioncited by 30
- 2024Astraios: Parameter-Efficient Instruction Tuning Code Large Language Modelscited by 23
- 2021Generating Adversarial Computer Programs using Optimized Obfuscationscited by 22
- 2021Understanding Neural Code Intelligence Through Program Simplificationcited by 22
- 2023Deep Learning for Code Intelligence: Survey, Benchmark and Toolkitcited by 22
- 2021Memorization and Generalization in Neural Code Intelligence Modelscited by 19
- 2022RoPGen: Towards Robust Code Authorship Attribution via Automatic Coding Style Transformationcited by 15
- 2022On Distribution Shift in Learning-based Bug Detectorscited by 15
- 2023Do Large Language Models Pay Similar Attention Like Human Programmers When Generating Code?cited by 14
12 most cited of 35 All 35 (JSON)
- 2026On the Lexical Superstition of Large Language Models for Code Comprehension: Re-evaluation on Code of Low Lexical Quality22 Sep 2026
- 2026Invariant Pretraining for Robust Code Representations15 Aug 2026
- 2026Learning Generalizable Multimodal Representations for Software Vulnerability Detection28 Apr 2026
- 2025The Hitchhiker's Guide to Program Analysis, Part II: Deep Thoughts by LLMs16 Apr 2025
- 2025Semantic-Preserving Transformations as Mutation Operators: A Study on Their Effectiveness in Defect Detection30 Mar 2025
- 2025XOXO: Stealthy Cross-Origin Context Poisoning Attacks against AI Coding Assistants18 Mar 2025
- 2025EditLord: Learning Code Transformation Rules for Code Editing10 Mar 2025
- 2025Cross-site scripting adversarial attacks based on deep reinforcement learning: Evaluation and extension study26 Feb 2025
- 2024Does Self-Attention Need Separate Weights in Transformers?30 Nov 2024
- 2024Impeding LLM-assisted Cheating in Introductory Programming Assignments via Adversarial Perturbation12 Oct 2024
- 2024CodeFort: Robust Training for Code Generation Models11 Apr 2024
- 2024GenCode: A Generic Data Augmentation Framework for Boosting Deep Learning-Based Code Understanding24 Feb 2024
12 newest of 35 All 35 (JSON)