Robustness Gym: Unifying the NLP Evaluation Landscape
Not on the map. Why?
Abstract (arXiv)
Despite impressive performance on standard benchmarks, deep neural networks are often brittle when deployed in real-world systems. Consequently, recent research has focused on testing the robustness of such models, resulting in a diverse set of evaluation methodologies ranging from adversarial attacks to rule-based data transformations. In this work, we identify challenges with evaluating NLP systems and propose a solution in the form of Robustness Gym (RG), a simple and extensible evaluation toolkit that unifies 4 standard evaluation paradigms: subpopulations, transformations, evaluation sets, and adversarial attacks. By providing a common platform for evaluation, Robustness Gym enables practitioners to compare results from all 4 evaluation paradigms with just a few clicks, and to easily develop and share novel evaluation methods using a built-in set of abstractions. To validate Robustness Gym's utility to practitioners, we conducted a real-world case study with a sentiment-modeling team, revealing performance degradations of 18%+. To verify that Robustness Gym can aid novel research analyses, we perform the first study of state-of-the-art commercial and academic named entity linking (NEL) systems, as well as a fine-grained analysis of state-of-the-art summarization models. For NEL, commercial systems struggle to link rare entities and lag their academic counterparts by 10%+, while state-of-the-art summarization models struggle on examples that require abstraction and distillation, degrading by 9%+. Robustness Gym can be found at https://robustnessgym.com/
Key facts. Cited by 107 papers in the map (data through 7 Oct 2026). Builds on 64 of its 101 references that are in the map. First posted on arXiv 13 Jan 2021.
Builds on
64 of 101 references.
References · 64
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,874
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,665
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,201
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
- 2015A large annotated corpus for learning natural language inferencecited by 1,837
- 2019SuperGLUE: A Stickier Benchmark for General-Purpose Language Understanding Systemscited by 1,718
- 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,366
- 2019PEGASUS: Pre-training with Extracted Gap-sentences for Abstractive Summarizationcited by 1,100
- 2018Model Cards for Model Reportingcited by 1,068
- 2015Teaching Machines to Read and Comprehendcited by 1,039
38 more
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 979
- 2019Right for the Wrong Reasons: Diagnosing Syntactic Heuristics in Natural Language Inferencecited by 864
- 2018Efficient Neural Architecture Search via Parameter Sharingcited by 831
- 2019EDA: Easy Data Augmentation Techniques for Boosting Performance on Text Classification Taskscited by 800
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 798
- 2017Evasion Attacks against Machine Learning at Test Timecited by 686
- 2020SummEval: Re-evaluating Summarization Evaluationcited by 666
- 2018Gender Bias in Coreference Resolution: Evaluation and Debiasing Methodscited by 657
- 2018Annotation Artifacts in Natural Language Inference Datacited by 656
- 2019Explaining Machine Learning Classifiers through Diverse Counterfactual Explanationscited by 612
- 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 568
- 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 452
- 2018Gender Bias in Coreference Resolutioncited by 438
- 2019Learning the Difference that Makes a Difference with Counterfactually-Augmented Datacited by 428
- 2019Using Pre-Training Can Improve Model Robustness and Uncertaintycited by 373
- 2017Snorkel: Rapid Training Data Creation with Weak Supervisioncited by 370
- 2020BAE: BERT-based Adversarial Examples for Text Classificationcited by 316
- 2017Synthetic and Natural Noise Both Break Neural Machine Translationcited by 304
- 2018Newsroom: A Dataset of 1.3 Million Summaries with Diverse Extractive Strategiescited by 292
- 2019InterpretML: A Unified Framework for Machine Learning Interpretabilitycited by 243
- 2018Stress Test Evaluation for Natural Language Inferencecited by 211
- 2019The What-If Tool: Interactive Probing of Machine Learning Modelscited by 207
- 2019Neural Text Summarization: A Critical Evaluationcited by 189
- 2019One Explanation Does Not Fit All: A Toolkit and Taxonomy of AI Explainability Techniquescited by 164
- 2018Breaking NLI Systems with Sentences that Require Simple Lexical Inferencescited by 134
- 2020The Language Interpretability Tool: Extensible, Interactive Visualizations and Analysis for NLP Modelscited by 125
- 2020The Effect of Natural Distribution Shift on Question Answering Modelscited by 104
- 2019FairVis: Visual Analytics for Discovering Intersectional Bias in Machine Learningcited by 93
- 2020OpenAttack: An Open-source Textual Adversarial Attack Toolkitcited by 84
- 2020Are Natural Language Inference Models IMPPRESsive? Learning IMPlicature and PRESuppositioncited by 76
- 2019AllenNLP Interpret: A Framework for Explaining Predictions of NLP Modelscited by 74
- 2018Content Selection in Deep Learning Models of Summarizationcited by 64
- 2020REL: An Entity Linker Standing on the Shoulders of Giantscited by 61
- 2019FairSight: Visual Analytics for Fairness in Decision Makingcited by 59
- 2018Manifold: A Model-Agnostic Framework for Interpretation and Diagnosis of Machine Learning Modelscited by 50
- 2018BanditSum: Extractive Summarization as a Contextual Banditcited by 46
- 2020TextAttack: A Framework for Adversarial Attacks, Data Augmentation, and Adversarial Training in NLPcited by 45
- 2019EQUATE: A Benchmark Evaluation Framework for Quantitative Reasoning in Natural Language Inferencecited by 39
50 most cited of 64 All 64 (JSON)
Built on by
Citing papers per year: 2021: 32; 2022: 26; 2023: 17; 2024: 11; 2025: 10; 2026: 11.
107 papers.
Sort:
By area:
- 2021Datasets: A Community Library for Natural Language Processingcited by 526
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
- 2022Domino: Discovering Systematic Errors with Cross-Modal Embeddingscited by 155
- 2022Repairing the Cracked Foundation: A Survey of Obstacles in Evaluation Practices for Generated Textcited by 154
- 2023Auditing large language models: a three-layered approachcited by 135
- 2021Measure and Improve Robustness in NLP Models: A Surveycited by 107
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2022Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLPcited by 99
- 2023Revisiting Out-of-distribution Robustness in NLP: Benchmark, Analysis, and LLMs Evaluationscited by 96
- 2022Shortcut Learning of Large Language Models in Natural Language Understandingcited by 83
- 2021NL-Augmenter: A Framework for Task-Sensitive Natural Language Augmentationcited by 72
- 2022Interactive Model Cards: A Human-Centered Approach to Model Documentationcited by 61
38 more
- 2021Mandoline: Model Evaluation under Distribution Shiftcited by 55
- 2021Dynaboard: An Evaluation-As-A-Service Platform for Holistic Next-Generation Benchmarkingcited by 53
- 2023Dr.Spider: A Diagnostic Evaluation Benchmark towards Text-to-SQL Robustnesscited by 50
- 2022On the Blind Spots of Model-Based Evaluation Metrics for Text Generationcited by 48
- 2023RobuT: A Systematic Study of Table QA Robustness Against Human-Annotated Adversarial Perturbationscited by 41
- 2022Quantifying Social Biases Using Templates is Unreliablecited by 38
- 2021What's in a Summary? Laying the Groundwork for Advances in Hospital-Course Summarizationcited by 35
- 2021SGD-X: A Benchmark for Robust Generalization in Schema-Guided Dialogue Systemscited by 34
- 2022Robustness of Learning from Task Instructionscited by 34
- 2024Examining the robustness of LLM evaluation to the distributional assumptions of benchmarkscited by 31
- 2023Benchmarking Robustness of Adaptation Methods on Pre-trained Vision-Language Modelscited by 30
- 2023The Trickle-down Impact of Reward (In-)consistency on RLHFcited by 29
- 2022ferret: a Framework for Benchmarking Explainers on Transformerscited by 26
- 2021Reliability Testing for Natural Language Processing Systemscited by 25
- 2024On Behalf of the Stakeholders: Trends in NLP Model Interpretability in the Era of LLMscited by 24
- 2021Achieving Model Robustness through Discrete Adversarial Trainingcited by 23
- 2022Exploring The Landscape of Distributional Robustness for Question Answering Modelscited by 23
- 2023An Overview on Language Models: Recent Developments and Outlookcited by 22
- 2022Evaluate & Evaluation on the Hub: Better Best Practices for Data and Model Measurementscited by 21
- 2021Automatic Construction of Evaluation Suites for Natural Language Generation Datasetscited by 18
- 2023Designerly Understanding: Information Needs for Model Transparency to Support Design Ideation for AI-Powered User Experiencecited by 18
- 2021Interpreting the Robustness of Neural NLP Models to Textual Perturbationscited by 17
- 2021Cross-Domain Data Integration for Named Entity Disambiguation in Biomedical Textcited by 15
- 2022SEAL : Interactive Tool for Systematic Error Analysis and Labelingcited by 15
- 2022A Survey on Medical Document Summarizationcited by 14
- 2021SummVis: Interactive Visual Analysis of Models, Data, and Evaluation for Text Summarizationcited by 13
- 2021Exploring Robust Architectures for Deep Artificial Neural Networkscited by 11
- 2021Break, Perturb, Build: Automatic Perturbation of Reasoning Paths Through Question Decompositioncited by 11
- 2022TAPE: Assessing Few-shot Russian Language Understandingcited by 11
- 2023Measuring the Robustness of NLP Models to Domain Shiftscited by 11
- 2023InterroLang: Exploring NLP Models and Datasets through Dialogue-based Explanationscited by 11
- 2022RGRecSys: A Toolkit for Robustness Evaluation of Recommender Systemscited by 10
- 2022What do we Really Know about State of the Art NER?cited by 10
- 2024SelfPrompt: Autonomously Evaluating LLM Robustness via Domain-Constrained Knowledge Guidelines and Refined Adversarial Promptscited by 10
- 2021On the Robustness of Intent Classification and Slot Labeling in Goal-oriented Dialog Systems to Real-world Noisecited by 9
- 2021Is My Model Using The Right Evidence? Systematic Probes for Examining Evidence-Based Tabular Reasoningcited by 9
- 2022Robust Natural Language Processing: Recent Advances, Challenges, and Future Directionscited by 9
- 2023Beyond Testers' Biases: Guiding Model Testing with Knowledge Bases using LLMscited by 9
50 most cited of 107 All 107 (JSON)
- 2026The Wording Effect: Quantifying Two-Way Drift in LLM Benchmark Performance12 Aug 2026
- 2026Measuring Behavior Portability in Large Language Models22 Jun 2026
- 2026FailureScope: Cross-Regime Behavioral Diagnosis of Language Model Weaknesses3 Jun 2026
- 2026Are LLMs Ready for Conflict Monitoring? Empirical Evidence from West Africa5 May 2026
- 2026When Stress Becomes Signal: Detecting Antifragility-Compatible Regimes in Multi-Agent LLM Systems4 May 2026
- 2026STaD: Scaffolded Task Design for Identifying Compositional Skill Gaps in LLMs20 Apr 2026
- 2026LLM Olympiad: Why Model Evaluation Needs a Sealed Exam24 Mar 2026
- 2026In Transformer We Trust? A Perspective on Transformer Architecture Failure Modes15 Feb 2026
- 2026The Paradox of Robustness: Decoupling Rule-Based Logic from Affective Noise in High-Stakes Decision-Making29 Jan 2026
- 2026Contextual StereoSet: Stress-Testing Bias Alignment Robustness in Large Language Models15 Jan 2026
- 2026SEE: Signal Embedding Energy for Quantifying Noise Interference in Large Audio Language Models12 Jan 2026
- 2025LLMs on Drugs: Language Models Are Few-Shot Consumers21 Dec 2025
38 more
- 2025RIDE: Difficulty Evolving Perturbation with Item Response Theory for Mathematical Reasoning6 Nov 2025
- 2025Who's Asking? Evaluating LLM Robustness to Inquiry Personas in Factual Question Answering14 Oct 2025
- 2025Inverse-Free Wilson Loops for Transformers: A Practical Diagnostic for Invariance and Order Sensitivity9 Oct 2025
- 2025TRACEALIGN -- Tracing the Drift: Attributing Alignment Failures to Training-Time Belief Sources in LLMs4 Aug 2025
- 2025Look Within or Look Beyond? A Theoretical Comparison Between Parameter-Efficient and Full Fine-Tuning28 May 2025
- 2025Do LLMs Need to Think in One Language? Correlation between Latent Language and Task Performance27 May 2025
- 2025Relation Extraction or Pattern Matching? Unravelling the Generalisation Limits of Language Models for Biographical RE18 May 2025
- 2025Model Hemorrhage and the Robustness Limits of Large Language Models31 Mar 2025
- 2025Unified Enhancement of the Generalization and Robustness of Language Models via Bi-Stage Optimization19 Mar 2025
- 2024TACOMORE: Exploring a replicable prompting protocol for LLM-assisted corpus analysis13 Dec 2024
- 2024SelfPrompt: Autonomously Evaluating LLM Robustness via Domain-Constrained Knowledge Guidelines and Refined Adversarial Prompts1 Dec 2024
- 2024Beyond the Numbers: Transparency in Relation Extraction Benchmark Creation and Leaderboards7 Nov 2024
- 2024Enhancing adversarial robustness in Natural Language Inference using explanations11 Sep 2024
- 2024A Conceptual Framework for Ethical Evaluation of Machine Learning Systems5 Aug 2024
- 2024On Behalf of the Stakeholders: Trends in NLP Model Interpretability in the Era of LLMs27 Jul 2024
- 2024Auditing of AI: Legal, Ethical and Technical Approaches7 Jul 2024
- 2024Evaluating Model Performance Under Worst-case Subpopulations1 Jul 2024
- 2024KGPA: Robustness Evaluation for Large Language Models via Cross-Domain Knowledge Graphs16 Jun 2024
- 2024More RLHF, More Trust? On The Impact of Preference Alignment On Trustworthiness29 Apr 2024
- 2024Examining the robustness of LLM evaluation to the distributional assumptions of benchmarks25 Apr 2024
- 2023Augmenty: A Python Library for Structured Text Augmentation9 Dec 2023
- 2023Whispers of Doubt Amidst Echoes of Triumph in NLP Robustness16 Nov 2023
- 2023Beyond Testers' Biases: Guiding Model Testing with Knowledge Bases using LLMs14 Oct 2023
- 2023InterroLang: Exploring NLP Models and Datasets through Dialogue-based Explanations9 Oct 2023
- 2023The Trickle-down Impact of Reward (In-)consistency on RLHF28 Sep 2023
- 2023Investigating the Robustness of Sequential Recommender Systems Against Training Data Perturbations24 Jul 2023
- 2023RobuT: A Systematic Study of Table QA Robustness Against Human-Annotated Adversarial Perturbations25 Jun 2023
- 2023Revisiting Out-of-distribution Robustness in NLP: Benchmark, Analysis, and LLMs Evaluations7 Jun 2023
- 2023Benchmarking Robustness of Adaptation Methods on Pre-trained Vision-Language Models3 Jun 2023
- 2023Measuring the Robustness of NLP Models to Domain Shifts31 May 2023
- 2023From Adversarial Arms Race to Model-centric Evaluation: Motivating a Unified Automatic Robustness Evaluation Framework29 May 2023
- 2023Has It All Been Solved? Open NLP Research Questions Not Solved by Large Language Models21 May 2023
- 2023An Overview on Language Models: Recent Developments and Outlook10 Mar 2023
- 2023Greener yet Powerful: Taming Large Code Generation Models with Quantization9 Mar 2023
- 2023Designerly Understanding: Information Needs for Model Transparency to Support Design Ideation for AI-Powered User Experience21 Feb 2023
- 2023Auditing large language models: a three-layered approach16 Feb 2023
- 2023Dr.Spider: A Diagnostic Evaluation Benchmark towards Text-to-SQL Robustness21 Jan 2023
- 2022On the Blind Spots of Model-Based Evaluation Metrics for Text Generation20 Dec 2022
50 newest of 107 All 107 (JSON)
- 2022Enhancing Tabular Reasoning with Pattern Exploiting Trainingcited by 3
- 2025Do LLMs Need to Think in One Language? Correlation between Latent Language and Task Performancecited by 1
- 2025RIDE: Difficulty Evolving Perturbation with Item Response Theory for Mathematical Reasoningcited by 1
- 2025Inverse-Free Wilson Loops for Transformers: A Practical Diagnostic for Invariance and Order Sensitivitycited by 0
- 2025RIDE: Difficulty Evolving Perturbation with Item Response Theory for Mathematical Reasoning6 Nov 2025
- 2025Inverse-Free Wilson Loops for Transformers: A Practical Diagnostic for Invariance and Order Sensitivity9 Oct 2025
- 2025Do LLMs Need to Think in One Language? Correlation between Latent Language and Task Performance27 May 2025
- 2022Enhancing Tabular Reasoning with Pattern Exploiting Training21 Oct 2022
- 2021Datasets: A Community Library for Natural Language Processingcited by 526
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
- 2022Domino: Discovering Systematic Errors with Cross-Modal Embeddingscited by 155
- 2022Repairing the Cracked Foundation: A Survey of Obstacles in Evaluation Practices for Generated Textcited by 154
- 2023Auditing large language models: a three-layered approachcited by 135
- 2021Measure and Improve Robustness in NLP Models: A Surveycited by 107
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2022Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLPcited by 99
- 2023Revisiting Out-of-distribution Robustness in NLP: Benchmark, Analysis, and LLMs Evaluationscited by 96
- 2022Shortcut Learning of Large Language Models in Natural Language Understandingcited by 83
- 2021NL-Augmenter: A Framework for Task-Sensitive Natural Language Augmentationcited by 72
- 2022Interactive Model Cards: A Human-Centered Approach to Model Documentationcited by 61
12 most cited of 97 All 97 (JSON)
- 2026The Wording Effect: Quantifying Two-Way Drift in LLM Benchmark Performance12 Aug 2026
- 2026Measuring Behavior Portability in Large Language Models22 Jun 2026
- 2026FailureScope: Cross-Regime Behavioral Diagnosis of Language Model Weaknesses3 Jun 2026
- 2026Are LLMs Ready for Conflict Monitoring? Empirical Evidence from West Africa5 May 2026
- 2026STaD: Scaffolded Task Design for Identifying Compositional Skill Gaps in LLMs20 Apr 2026
- 2026LLM Olympiad: Why Model Evaluation Needs a Sealed Exam24 Mar 2026
- 2026In Transformer We Trust? A Perspective on Transformer Architecture Failure Modes15 Feb 2026
- 2026The Paradox of Robustness: Decoupling Rule-Based Logic from Affective Noise in High-Stakes Decision-Making29 Jan 2026
- 2026Contextual StereoSet: Stress-Testing Bias Alignment Robustness in Large Language Models15 Jan 2026
- 2026SEE: Signal Embedding Energy for Quantifying Noise Interference in Large Audio Language Models12 Jan 2026
- 2025LLMs on Drugs: Language Models Are Few-Shot Consumers21 Dec 2025
- 2025Who's Asking? Evaluating LLM Robustness to Inquiry Personas in Factual Question Answering14 Oct 2025
12 newest of 97 All 97 (JSON)