It's Morphin' Time! Combating Linguistic Discrimination with Inflectional Perturbations
Not on the map. Why?
Abstract (arXiv)
Training on only perfect Standard English corpora predisposes pre-trained neural networks to discriminate against minorities from non-standard linguistic backgrounds (e.g., African American Vernacular English, Colloquial Singapore English, etc.). We perturb the inflectional morphology of words to craft plausible and semantically similar adversarial examples that expose these biases in popular NLP models, e.g., BERT and Transformer, and show that adversarially fine-tuning them for a single epoch significantly improves robustness without sacrificing performance on clean data.
Key facts. Cited by 64 papers in the map (data through 7 Oct 2026). First posted on arXiv 9 May 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 25; 2022: 13; 2023: 10; 2024: 6; 2025: 7; 2026: 3.
64 papers.
Sort:
By area:
- 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 619
- 2022Prompting GPT-3 To Be Reliablecited by 258
- 2021Post-hoc Interpretability for Neural NLP: A Surveycited by 155
- 2021Measure and Improve Robustness in NLP Models: A Surveycited by 107
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2021Quantifying Social Biases in NLP: A Generalization and Empirical Comparison of Extrinsic Fairness Metricscited by 83
- 2021A Survey of Race, Racism, and Anti-Racism in NLPcited by 74
- 2021NL-Augmenter: A Framework for Task-Sensitive Natural Language Augmentationcited by 72
- 2021Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasurescited by 69
- 2022Incorporating Hierarchy into Text Encoder: a Contrastive Learning Approach for Hierarchical Text Classificationcited by 52
- 2021CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understandingcited by 50
- 2021Domain Adaptation and Multi-Domain Adaptation for Neural Machine Translation: A Surveycited by 46
38 more
- 2021Generating Syntactically Controlled Paraphrases without Using Annotated Parallel Pairscited by 45
- 2022VALUE: Understanding Dialect Disparity in NLUcited by 45
- 2022Order-Disorder: Imitation Adversarial Attacks for Black-box Neural Ranking Modelscited by 37
- 2022Data Governance in the Age of Large-Scale Data-Driven Language Technologycited by 32
- 2023Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attackscited by 32
- 2023Sociodemographic Bias in Language Models: A Survey and Forward Pathcited by 27
- 2021Reliability Testing for Natural Language Processing Systemscited by 25
- 2021Code-Mixing on Sesame Street: Dawn of the Adversarial Polyglotscited by 23
- 2021Achieving Model Robustness through Discrete Adversarial Trainingcited by 23
- 2022Generalized but not Robust? Comparing the Effects of Data Modification Methods on Out-of-Domain Generalization and Adversarial Robustnesscited by 23
- 2021Efficient Combinatorial Optimization for Word-level Adversarial Textual Attackcited by 17
- 2021Token-Modification Adversarial Attacks for Natural Language Processing: A Surveycited by 12
- 2021On the Robustness of Intent Classification and Slot Labeling in Goal-oriented Dialog Systems to Real-world Noisecited by 9
- 2021A Differentiable Language Model Adversarial Attack on Text Classifierscited by 9
- 2022Robustification of Multilingual Language Models to Real-world Noise in Crosslingual Zero-shot Settings with Robust Contrastive Pretrainingcited by 9
- 2021Evaluating the Morphosyntactic Well-formedness of Generated Textscited by 8
- 2022Can Question Rewriting Help Conversational Question Answering?cited by 8
- 2023Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Textcited by 8
- 2022A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challengescited by 7
- 2021Addressing the Vulnerability of NMT in Input Perturbationscited by 6
- 2021Morph Call: Probing Morphosyntactic Content of Multilingual Transformerscited by 5
- 2021Spinning Sequence-to-Sequence Models with Meta-Backdoorscited by 5
- 2021Effective and Imperceptible Adversarial Textual Attack via Multi-objectivizationcited by 5
- 2022The Risks of Machine Learning Systemscited by 5
- 2023Break it, Imitate it, Fix it: Robustness by Generating Human-Like Attackscited by 5
- 2021On the Universality of Deep Contextual Language Modelscited by 4
- 2022Are Synonym Substitution Attacks Really Synonym Substitution Attacks?cited by 4
- 2023Attack Named Entity Recognition by Entity Boundary Interferencecited by 4
- 2024Exploring the Robustness of Task-oriented Dialogue Systems for Colloquial German Varietiescited by 4
- 2024Extreme Miscalibration and the Illusion of Adversarial Robustnesscited by 4
- 2025Confidence Elicitation: A New Attack Vector for Large Language Modelscited by 4
- 2023From Adversarial Arms Race to Model-centric Evaluation: Motivating a Unified Automatic Robustness Evaluation Frameworkcited by 3
- 2024SemRoDe: Macro Adversarial Training to Learn Representations That are Robust to Word-Level Attackscited by 3
- 2025FLUKE: A Linguistically-Driven and Task-Agnostic Framework for Robustness Evaluationcited by 3
- 2021Adv-OLM: Generating Textual Adversaries via OLMcited by 2
- 2022Speciesist Language and Nonhuman Animal Bias in English Masked Language Modelscited by 2
- 2023Sample Attackability in Natural Language Adversarial Attackscited by 2
- 2024Algorithmic Fairness: A Tolerance Perspectivecited by 2
50 most cited of 64 All 64 (JSON)
- 2026The Generator-Eraser Paradox: Community Guidelines for Responsible LLM-Assisted Dialect Resource Creation4 Jun 2026
- 2026LLM NL2SQL Robustness: Surface Noise vs. Linguistic Variation in Traditional and Agentic Settings17 Mar 2026
- 2026Cross-Modal Robustness Transfer (CMRT): Training Robust Speech Translation Models Using Adversarial Text12 Feb 2026
- 2025Text Adversarial Attacks with Dynamic Outputs26 Sep 2025
- 2025Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries10 Aug 2025
- 2025Adversarial Defence without Adversarial Defence: Enhancing Language Model Robustness via Instance-level Principal Component Removal29 Jul 2025
- 2025A Representation Level Analysis of NMT Model Robustness to Grammatical Errors27 May 2025
- 2025FLUKE: A Linguistically-Driven and Task-Agnostic Framework for Robustness Evaluation24 Apr 2025
- 2025Pay Attention to Real World Perturbations! Natural Robustness Evaluation in Machine Reading Comprehension23 Feb 2025
- 2025Confidence Elicitation: A New Attack Vector for Large Language Models7 Feb 2025
- 2024Are Language Models Agnostic to Linguistically Grounded Perturbations? A Case Study of Indic Languages14 Dec 2024
- 2024Algorithmic Fairness: A Tolerance Perspective26 Apr 2024
38 more
- 2024SemRoDe: Macro Adversarial Training to Learn Representations That are Robust to Word-Level Attacks27 Mar 2024
- 2024Reversible Jump Attack to Textual Classifiers with Modification Reduction21 Mar 2024
- 2024Extreme Miscalibration and the Illusion of Adversarial Robustness27 Feb 2024
- 2024Exploring the Robustness of Task-oriented Dialogue Systems for Colloquial German Varieties3 Feb 2024
- 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automatically4 Dec 2023
- 2023Break it, Imitate it, Fix it: Robustness by Generating Human-Like Attacks25 Oct 2023
- 2023Using Weak Supervision and Data Augmentation in Question Answering28 Sep 2023
- 2023Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks31 Jul 2023
- 2023Sample Attackability in Natural Language Adversarial Attacks21 Jun 2023
- 2023Sociodemographic Bias in Language Models: A Survey and Forward Path13 Jun 2023
- 2023From Adversarial Arms Race to Model-centric Evaluation: Motivating a Unified Automatic Robustness Evaluation Framework29 May 2023
- 2023Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Text25 May 2023
- 2023Attack Named Entity Recognition by Entity Boundary Interference9 May 2023
- 2023READIN: A Chinese Multi-Task Benchmark with Realistic and Diverse Input Noises14 Feb 2023
- 2022Prompting GPT-3 To Be Reliable17 Oct 2022
- 2022Robustification of Multilingual Language Models to Real-world Noise in Crosslingual Zero-shot Settings with Robust Contrastive Pretraining10 Oct 2022
- 2022Are Synonym Substitution Attacks Really Synonym Substitution Attacks?6 Oct 2022
- 2022Order-Disorder: Imitation Adversarial Attacks for Black-box Neural Ranking Models14 Sep 2022
- 2022Teacher Guided Training: An Efficient Framework for Knowledge Transfer14 Aug 2022
- 2022A Survey on AI Sustainability: Emerging Trends on Learning Algorithms and Research Challenges8 May 2022
- 2022Data Governance in the Age of Large-Scale Data-Driven Language Technology4 May 2022
- 2022The Risks of Machine Learning Systems21 Apr 2022
- 2022Can Question Rewriting Help Conversational Question Answering?13 Apr 2022
- 2022VALUE: Understanding Dialect Disparity in NLU6 Apr 2022
- 2022Generalized but not Robust? Comparing the Effects of Data Modification Methods on Out-of-Domain Generalization and Adversarial Robustness15 Mar 2022
- 2022Speciesist Language and Nonhuman Animal Bias in English Masked Language Models10 Mar 2022
- 2022Incorporating Hierarchy into Text Encoder: a Contrastive Learning Approach for Hierarchical Text Classification8 Mar 2022
- 2021Bridging the Gap: Using Deep Acoustic Representations to Learn Grounded Language from Percepts and Raw Speech27 Dec 2021
- 2021Measure and Improve Robustness in NLP Models: A Survey15 Dec 2021
- 2021Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures9 Dec 2021
- 2021NL-Augmenter: A Framework for Task-Sensitive Natural Language Augmentation6 Dec 2021
- 2021Effective and Imperceptible Adversarial Textual Attack via Multi-objectivization2 Nov 2021
- 2021On the Universality of Deep Contextual Language Models15 Sep 2021
- 2021Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack6 Sep 2021
- 2021Post-hoc Interpretability for Neural NLP: A Survey10 Aug 2021
- 2021A Differentiable Language Model Adversarial Attack on Text Classifiers23 Jul 2021
- 2021Spinning Sequence-to-Sequence Models with Meta-Backdoors22 Jul 2021
- 2021CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understanding1 Jul 2021
50 newest of 64 All 64 (JSON)
- 2022Prompting GPT-3 To Be Reliablecited by 258
- 2021Post-hoc Interpretability for Neural NLP: A Surveycited by 155
- 2021Measure and Improve Robustness in NLP Models: A Surveycited by 107
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2021Quantifying Social Biases in NLP: A Generalization and Empirical Comparison of Extrinsic Fairness Metricscited by 83
- 2021A Survey of Race, Racism, and Anti-Racism in NLPcited by 74
- 2021NL-Augmenter: A Framework for Task-Sensitive Natural Language Augmentationcited by 72
- 2022Incorporating Hierarchy into Text Encoder: a Contrastive Learning Approach for Hierarchical Text Classificationcited by 52
- 2021CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understandingcited by 50
- 2021Domain Adaptation and Multi-Domain Adaptation for Neural Machine Translation: A Surveycited by 46
- 2021Generating Syntactically Controlled Paraphrases without Using Annotated Parallel Pairscited by 45
- 2022VALUE: Understanding Dialect Disparity in NLUcited by 45
12 most cited of 61 All 61 (JSON)
- 2026The Generator-Eraser Paradox: Community Guidelines for Responsible LLM-Assisted Dialect Resource Creation4 Jun 2026
- 2026Cross-Modal Robustness Transfer (CMRT): Training Robust Speech Translation Models Using Adversarial Text12 Feb 2026
- 2025Text Adversarial Attacks with Dynamic Outputs26 Sep 2025
- 2025Multi-task Adversarial Attacks against Black-box Model with Few-shot Queries10 Aug 2025
- 2025Adversarial Defence without Adversarial Defence: Enhancing Language Model Robustness via Instance-level Principal Component Removal29 Jul 2025
- 2025A Representation Level Analysis of NMT Model Robustness to Grammatical Errors27 May 2025
- 2025FLUKE: A Linguistically-Driven and Task-Agnostic Framework for Robustness Evaluation24 Apr 2025
- 2025Pay Attention to Real World Perturbations! Natural Robustness Evaluation in Machine Reading Comprehension23 Feb 2025
- 2025Confidence Elicitation: A New Attack Vector for Large Language Models7 Feb 2025
- 2024Are Language Models Agnostic to Linguistically Grounded Perturbations? A Case Study of Indic Languages14 Dec 2024
- 2024Algorithmic Fairness: A Tolerance Perspective26 Apr 2024
- 2024SemRoDe: Macro Adversarial Training to Learn Representations That are Robust to Word-Level Attacks27 Mar 2024
12 newest of 61 All 61 (JSON)