On the Efficacy of Adversarial Data Collection for Question Answering: Results from a Large-Scale Randomized Study
Not on the map. Why?
Abstract (arXiv)
In adversarial data collection (ADC), a human workforce interacts with a model in real time, attempting to produce examples that elicit incorrect predictions. Researchers hope that models trained on these more challenging datasets will rely less on superficial patterns, and thus be less brittle. However, despite ADC's intuitive appeal, it remains unclear when training on adversarial datasets produces more robust models. In this paper, we conduct a large-scale controlled study focused on question answering, assigning workers at random to compose questions either (i) adversarially (with a model in the loop); or (ii) in the standard fashion (without a model). Across a variety of models and datasets, we find that models trained on adversarial data usually perform better on other adversarial datasets but worse on a diverse collection of out-of-domain evaluation sets. Finally, we provide a qualitative analysis of adversarial (vs standard) data, identifying key differences and offering guidance for future research.
Key facts. Cited by 30 papers in the map (data through 7 Oct 2026). Builds on 37 of its 53 references that are in the map. First posted on arXiv 2 Jun 2021.
Builds on
37 of 53 references.
References · 37
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,115
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,779
- 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,686
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,895
- 2018FEVER: a large-scale dataset for Fact Extraction and VERificationcited by 1,362
- 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 960
- 2019DROP: A Reading Comprehension Benchmark Requiring Discrete Reasoning Over Paragraphscited by 883
- 2017RACE: Large-scale ReAding Comprehension Dataset From Examinationscited by 851
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 798
25 more
- 2019Latent Retrieval for Weakly Supervised Open Domain Question Answeringcited by 691
- 2018Annotation Artifacts in Natural Language Inference Datacited by 656
- 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
- 2019Learning the Difference that Makes a Difference with Counterfactually-Augmented Datacited by 428
- 2017Zero-Shot Relation Extraction via Reading Comprehensioncited by 425
- 2018Detecting and Correcting for Label Shift with Black Box Predictorscited by 364
- 2018SWAG: A Large-Scale Adversarial Dataset for Grounded Commonsense Inferencecited by 333
- 2020Pretrained Transformers Improve Out-of-Distribution Robustnesscited by 293
- 2018Hypothesis Only Baselines in Natural Language Inferencecited by 291
- 2017SearchQA: A New Q&A Dataset Augmented with Context from a Search Enginecited by 221
- 2018ReCoRD: Bridging the Gap between Human and Machine Commonsense Reading Comprehensioncited by 198
- 2019MRQA 2019 Shared Task: Evaluating Generalization in Reading Comprehensioncited by 183
- 2019Build it Break it Fix it for Dialogue Safety: Robustness from Adversarial Human Attackcited by 176
- 2020An Empirical Study on Robustness to Spurious Correlations using Pre-trained Language Modelscited by 133
- 2020Beat the AI: Investigating Adversarial Human Annotation for Reading Comprehensioncited by 131
- 2019Quoref: A Reading Comprehension Dataset with Questions Requiring Coreferential Reasoningcited by 100
- 2018How Much Reading Does Reading Comprehension Require? A Critical Investigation of Popular Benchmarkscited by 86
- 2018DuoRC: Towards Complex Language Understanding with Paraphrased Reading Comprehensioncited by 70
- 2018Practical Obstacles to Deploying Active Learningcited by 68
- 2020Explaining The Efficacy of Counterfactually Augmented Datacited by 64
- 2020DynaSent: A Dynamic Benchmark for Sentiment Analysiscited by 63
- 2019Cloze-driven Pretraining of Self-attention Networkscited by 41
- 2020ANLIzing the Adversarial Natural Language Inference Datasetcited by 36
- 2017Towards Linguistically Generalizable NLP Systems: A Workshop and Shared Taskcited by 24
- 2017Mastering the Dungeon: Grounded Language Learning by Mechanical Turker Descentcited by 10
Built on by
Citing papers per year: 2021: 7; 2022: 12; 2023: 6; 2024: 3; 2025: 1; 2026: 1.
30 papers.
Sort:
By area:
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
- 2022WANLI: Worker and AI Collaboration for Natural Language Inference Dataset Creationcited by 200
- 2023Supporting Human-AI Collaboration in Auditing LLMs with LLMscited by 46
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Modelscited by 40
- 2021The Dangers of Underclaiming: Reasons for Caution When Reporting How NLP Systems Failcited by 38
- 2021Models in the Loop: Aiding Crowdworkers with Generative Annotation Assistantscited by 31
- 2021Retrieval-guided Counterfactual Generation for QAcited by 28
- 2021Analyzing Dynamic Adversarial Training Data in the Limitcited by 24
- 2022CORE: A Retrieve-then-Edit Framework for Counterfactual Data Generationcited by 23
- 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Modelscited by 19
- 2022Dynatask: A Framework for Creating Dynamic AI Benchmark Taskscited by 16
- 2022A Theory of Dynamic Benchmarkscited by 15
18 more
- 2021Adversarially Constructed Evaluation Sets Are More Challenging, but May Not Be Faircited by 12
- 2021Break, Perturb, Build: Automatic Perturbation of Reasoning Paths Through Question Decompositioncited by 11
- 2022What Makes Reading Comprehension Questions Difficult?cited by 11
- 2022AGRO: Adversarial Discovery of Error-prone groups for Robust Optimizationcited by 10
- 2022longhorns at DADC 2022: How many linguists does it take to fool a Question Answering model? A systematic approach to adversarial attackscited by 8
- 2022Benchmarking Long-tail Generalization with Likelihood Splitscited by 8
- 2024Is your benchmark truly adversarial? AdvScore: Evaluating Human-Grounded Adversarialnesscited by 7
- 2023Think Twice: Measuring the Efficiency of Eliminating Prediction Shortcuts of Question Answering Modelscited by 6
- 2023Fighting Bias with Bias: Promoting Model Robustness by Amplifying Dataset Biasescited by 5
- 2022Possible Stories: Evaluating Situated Commonsense Reasoning under Multiple Possible Scenarioscited by 3
- 2021Combining Data-driven Supervision with Human-in-the-loop Feedback for Entity Resolutioncited by 1
- 2022Resolving the Human Subjects Status of Machine Learning's Crowdworkerscited by 1
- 2022Bridging the Training-Inference Gap for Dense Phrase Retrievalcited by 1
- 2023On Degrees of Freedom in Defining and Testing Natural Language Understandingcited by 1
- 2022Collecting high-quality adversarial data for machine reading comprehension tasks with humans and models in the loopcited by 0
- 2023Implicit Design Choices and Their Impact on Emotion Recognition Model Development and Evaluationcited by 0
- 2025Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Modelscited by 0
- 2026Enhancing the QA Model through a Multi-domain Debiasing Frameworkcited by 0
- 2026Enhancing the QA Model through a Multi-domain Debiasing Framework1 Jan 2026
- 2025Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models28 Jun 2025
- 2024Is your benchmark truly adversarial? AdvScore: Evaluating Human-Grounded Adversarialness24 Jun 2024
- 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Models13 Jun 2024
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models14 Mar 2024
- 2023Implicit Design Choices and Their Impact on Emotion Recognition Model Development and Evaluation6 Sep 2023
- 2023Fighting Bias with Bias: Promoting Model Robustness by Amplifying Dataset Biases30 May 2023
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Models26 May 2023
- 2023On Degrees of Freedom in Defining and Testing Natural Language Understanding24 May 2023
- 2023Think Twice: Measuring the Efficiency of Eliminating Prediction Shortcuts of Question Answering Models11 May 2023
- 2023Supporting Human-AI Collaboration in Auditing LLMs with LLMs19 Apr 2023
- 2022AGRO: Adversarial Discovery of Error-prone groups for Robust Optimization2 Dec 2022
18 more
- 2022Bridging the Training-Inference Gap for Dense Phrase Retrieval25 Oct 2022
- 2022Benchmarking Long-tail Generalization with Likelihood Splits13 Oct 2022
- 2022CORE: A Retrieve-then-Edit Framework for Counterfactual Data Generation10 Oct 2022
- 2022A Theory of Dynamic Benchmarks6 Oct 2022
- 2022Possible Stories: Evaluating Situated Commonsense Reasoning under Multiple Possible Scenarios16 Sep 2022
- 2022longhorns at DADC 2022: How many linguists does it take to fool a Question Answering model? A systematic approach to adversarial attacks29 Jun 2022
- 2022Collecting high-quality adversarial data for machine reading comprehension tasks with humans and models in the loop28 Jun 2022
- 2022Resolving the Human Subjects Status of Machine Learning's Crowdworkers8 Jun 2022
- 2022Dynatask: A Framework for Creating Dynamic AI Benchmark Tasks5 Apr 2022
- 2022What Makes Reading Comprehension Questions Difficult?12 Mar 2022
- 2022WANLI: Worker and AI Collaboration for Natural Language Inference Dataset Creation16 Jan 2022
- 2021Models in the Loop: Aiding Crowdworkers with Generative Annotation Assistants16 Dec 2021
- 2021Combining Data-driven Supervision with Human-in-the-loop Feedback for Entity Resolution20 Nov 2021
- 2021Adversarially Constructed Evaluation Sets Are More Challenging, but May Not Be Fair16 Nov 2021
- 2021Analyzing Dynamic Adversarial Training Data in the Limit16 Oct 2021
- 2021The Dangers of Underclaiming: Reasons for Caution When Reporting How NLP Systems Fail15 Oct 2021
- 2021Retrieval-guided Counterfactual Generation for QA14 Oct 2021
- 2021Break, Perturb, Build: Automatic Perturbation of Reasoning Paths Through Question Decomposition29 Jul 2021
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Modelscited by 40
- 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Modelscited by 19
- 2025Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Modelscited by 0
- 2025Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models28 Jun 2025
- 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Models13 Jun 2024
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Models14 Mar 2024
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Models26 May 2023
- 2022WANLI: Worker and AI Collaboration for Natural Language Inference Dataset Creationcited by 200
- 2023Supporting Human-AI Collaboration in Auditing LLMs with LLMscited by 46
- 2021The Dangers of Underclaiming: Reasons for Caution When Reporting How NLP Systems Failcited by 38
- 2021Models in the Loop: Aiding Crowdworkers with Generative Annotation Assistantscited by 31
- 2021Retrieval-guided Counterfactual Generation for QAcited by 28
- 2021Analyzing Dynamic Adversarial Training Data in the Limitcited by 24
- 2022CORE: A Retrieve-then-Edit Framework for Counterfactual Data Generationcited by 23
- 2022Dynatask: A Framework for Creating Dynamic AI Benchmark Taskscited by 16
- 2022A Theory of Dynamic Benchmarkscited by 15
- 2021Adversarially Constructed Evaluation Sets Are More Challenging, but May Not Be Faircited by 12
- 2021Break, Perturb, Build: Automatic Perturbation of Reasoning Paths Through Question Decompositioncited by 11
- 2022What Makes Reading Comprehension Questions Difficult?cited by 11
12 most cited of 24 All 24 (JSON)
- 2026Enhancing the QA Model through a Multi-domain Debiasing Framework1 Jan 2026
- 2024Is your benchmark truly adversarial? AdvScore: Evaluating Human-Grounded Adversarialness24 Jun 2024
- 2023Implicit Design Choices and Their Impact on Emotion Recognition Model Development and Evaluation6 Sep 2023
- 2023Fighting Bias with Bias: Promoting Model Robustness by Amplifying Dataset Biases30 May 2023
- 2023On Degrees of Freedom in Defining and Testing Natural Language Understanding24 May 2023
- 2023Supporting Human-AI Collaboration in Auditing LLMs with LLMs19 Apr 2023
- 2022AGRO: Adversarial Discovery of Error-prone groups for Robust Optimization2 Dec 2022
- 2022Bridging the Training-Inference Gap for Dense Phrase Retrieval25 Oct 2022
- 2022Benchmarking Long-tail Generalization with Likelihood Splits13 Oct 2022
- 2022CORE: A Retrieve-then-Edit Framework for Counterfactual Data Generation10 Oct 2022
- 2022A Theory of Dynamic Benchmarks6 Oct 2022
- 2022longhorns at DADC 2022: How many linguists does it take to fool a Question Answering model? A systematic approach to adversarial attacks29 Jun 2022
12 newest of 24 All 24 (JSON)