mlsanityData to 7 Oct 2026

On the Efficacy of Adversarial Data Collection for Question Answering: Results from a Large-Scale Randomized Study

arXiv 2106.00872 ↗First posted 2 Jun 2021cs.CL cs.AI cs.LGcited by 30

Not on the map. Why?

Abstract (arXiv)

In adversarial data collection (ADC), a human workforce interacts with a model in real time, attempting to produce examples that elicit incorrect predictions. Researchers hope that models trained on these more challenging datasets will rely less on superficial patterns, and thus be less brittle. However, despite ADC's intuitive appeal, it remains unclear when training on adversarial datasets produces more robust models. In this paper, we conduct a large-scale controlled study focused on question answering, assigning workers at random to compose questions either (i) adversarially (with a model in the loop); or (ii) in the standard fashion (without a model). Across a variety of models and datasets, we find that models trained on adversarial data usually perform better on other adversarial datasets but worse on a diverse collection of out-of-domain evaluation sets. Finally, we provide a qualitative analysis of adversarial (vs standard) data, identifying key differences and offering guidance for future research.

Key facts. Cited by 30 papers in the map (data through 7 Oct 2026). Builds on 37 of its 53 references that are in the map. First posted on arXiv 2 Jun 2021.

Builds on

37 of 53 references.

References · 37

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  2. 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
  3. 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,115
  4. 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
  5. 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,779
  6. 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,686
  7. 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,895
  8. 2018FEVER: a large-scale dataset for Fact Extraction and VERificationcited by 1,362
  9. 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 960
  10. 2019DROP: A Reading Comprehension Benchmark Requiring Discrete Reasoning Over Paragraphscited by 883
  11. 2017RACE: Large-scale ReAding Comprehension Dataset From Examinationscited by 851
  12. 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 798
25 more
  1. 2019Latent Retrieval for Weakly Supervised Open Domain Question Answeringcited by 691
  2. 2018Annotation Artifacts in Natural Language Inference Datacited by 656
  3. 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
  4. 2019Learning the Difference that Makes a Difference with Counterfactually-Augmented Datacited by 428
  5. 2017Zero-Shot Relation Extraction via Reading Comprehensioncited by 425
  6. 2018Detecting and Correcting for Label Shift with Black Box Predictorscited by 364
  7. 2018SWAG: A Large-Scale Adversarial Dataset for Grounded Commonsense Inferencecited by 333
  8. 2020Pretrained Transformers Improve Out-of-Distribution Robustnesscited by 293
  9. 2018Hypothesis Only Baselines in Natural Language Inferencecited by 291
  10. 2017SearchQA: A New Q&A Dataset Augmented with Context from a Search Enginecited by 221
  11. 2018ReCoRD: Bridging the Gap between Human and Machine Commonsense Reading Comprehensioncited by 198
  12. 2019MRQA 2019 Shared Task: Evaluating Generalization in Reading Comprehensioncited by 183
  13. 2019Build it Break it Fix it for Dialogue Safety: Robustness from Adversarial Human Attackcited by 176
  14. 2020An Empirical Study on Robustness to Spurious Correlations using Pre-trained Language Modelscited by 133
  15. 2020Beat the AI: Investigating Adversarial Human Annotation for Reading Comprehensioncited by 131
  16. 2019Quoref: A Reading Comprehension Dataset with Questions Requiring Coreferential Reasoningcited by 100
  17. 2018How Much Reading Does Reading Comprehension Require? A Critical Investigation of Popular Benchmarkscited by 86
  18. 2018DuoRC: Towards Complex Language Understanding with Paraphrased Reading Comprehensioncited by 70
  19. 2018Practical Obstacles to Deploying Active Learningcited by 68
  20. 2020Explaining The Efficacy of Counterfactually Augmented Datacited by 64
  21. 2020DynaSent: A Dynamic Benchmark for Sentiment Analysiscited by 63
  22. 2019Cloze-driven Pretraining of Self-attention Networkscited by 41
  23. 2020ANLIzing the Adversarial Natural Language Inference Datasetcited by 36
  24. 2017Towards Linguistically Generalizable NLP Systems: A Workshop and Shared Taskcited by 24
  25. 2017Mastering the Dungeon: Grounded Language Learning by Mechanical Turker Descentcited by 10

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 7; 2022: 12; 2023: 6; 2024: 3; 2025: 1; 2026: 1.

30 papers.

Sort:

By area:

  1. 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
  2. 2022WANLI: Worker and AI Collaboration for Natural Language Inference Dataset Creationcited by 200
  3. 2023Supporting Human-AI Collaboration in Auditing LLMs with LLMscited by 46
  4. 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Modelscited by 40
  5. 2021The Dangers of Underclaiming: Reasons for Caution When Reporting How NLP Systems Failcited by 38
  6. 2021Models in the Loop: Aiding Crowdworkers with Generative Annotation Assistantscited by 31
  7. 2021Retrieval-guided Counterfactual Generation for QAcited by 28
  8. 2021Analyzing Dynamic Adversarial Training Data in the Limitcited by 24
  9. 2022CORE: A Retrieve-then-Edit Framework for Counterfactual Data Generationcited by 23
  10. 2024MirrorCheck: Efficient Adversarial Defense for Vision-Language Modelscited by 19
  11. 2022Dynatask: A Framework for Creating Dynamic AI Benchmark Taskscited by 16
  12. 2022A Theory of Dynamic Benchmarkscited by 15
18 more
  1. 2021Adversarially Constructed Evaluation Sets Are More Challenging, but May Not Be Faircited by 12
  2. 2021Break, Perturb, Build: Automatic Perturbation of Reasoning Paths Through Question Decompositioncited by 11
  3. 2022What Makes Reading Comprehension Questions Difficult?cited by 11
  4. 2022AGRO: Adversarial Discovery of Error-prone groups for Robust Optimizationcited by 10
  5. 2022longhorns at DADC 2022: How many linguists does it take to fool a Question Answering model? A systematic approach to adversarial attackscited by 8
  6. 2022Benchmarking Long-tail Generalization with Likelihood Splitscited by 8
  7. 2024Is your benchmark truly adversarial? AdvScore: Evaluating Human-Grounded Adversarialnesscited by 7
  8. 2023Think Twice: Measuring the Efficiency of Eliminating Prediction Shortcuts of Question Answering Modelscited by 6
  9. 2023Fighting Bias with Bias: Promoting Model Robustness by Amplifying Dataset Biasescited by 5
  10. 2022Possible Stories: Evaluating Situated Commonsense Reasoning under Multiple Possible Scenarioscited by 3
  11. 2021Combining Data-driven Supervision with Human-in-the-loop Feedback for Entity Resolutioncited by 1
  12. 2022Resolving the Human Subjects Status of Machine Learning's Crowdworkerscited by 1
  13. 2022Bridging the Training-Inference Gap for Dense Phrase Retrievalcited by 1
  14. 2023On Degrees of Freedom in Defining and Testing Natural Language Understandingcited by 1
  15. 2022Collecting high-quality adversarial data for machine reading comprehension tasks with humans and models in the loopcited by 0
  16. 2023Implicit Design Choices and Their Impact on Emotion Recognition Model Development and Evaluationcited by 0
  17. 2025Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Modelscited by 0
  18. 2026Enhancing the QA Model through a Multi-domain Debiasing Frameworkcited by 0