Towards Robustness of Text-to-SQL Models against Synonym Substitution
Not on the map. Why?
Abstract (arXiv)
Recently, there has been significant progress in studying neural networks to translate text descriptions into SQL queries. Despite achieving good performance on some public benchmarks, existing text-to-SQL models typically rely on the lexical matching between words in natural language (NL) questions and tokens in table schemas, which may render the models vulnerable to attacks that break the schema linking mechanism. In this work, we investigate the robustness of text-to-SQL models to synonym substitution. In particular, we introduce Spider-Syn, a human-curated dataset based on the Spider benchmark for text-to-SQL translation. NL questions in Spider-Syn are modified from Spider, by replacing their schema-related words with manually selected synonyms that reflect real-world question paraphrases. We observe that the accuracy dramatically drops by eliminating such explicit correspondence between NL questions and table schemas, even if the synonyms are not adversarially selected to conduct worst-case adversarial attacks. Finally, we present two categories of approaches to improve the model robustness. The first category of approaches utilizes additional synonym annotations for table schemas by modifying the model input, while the second category is based on adversarial training. We demonstrate that both categories of approaches significantly outperform their counterparts without the defense, and the first category of approaches are more effective.
Key facts. Cited by 110 papers in the map (data through 7 Oct 2026). Builds on 20 of its 35 references that are in the map. First posted on arXiv 2 Jun 2021.
Builds on
20 of 35 references.
References · 20
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2018Spider: A Large-Scale Human-Labeled Dataset for Complex and Cross-Domain Semantic Parsing and Text-to-SQL Taskcited by 1,120
- 2019EDA: Easy Data Augmentation Techniques for Boosting Performance on Text Classification Taskscited by 800
- 2017Seq2SQL: Generating Structured Queries from Natural Language using Reinforcement Learningcited by 679
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 663
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 488
- 2018Generating Natural Language Adversarial Examplescited by 422
- 2019RAT-SQL: Relation-Aware Schema Encoding and Linking for Text-to-SQL Parserscited by 420
- 2019Towards Complex Text-to-SQL in Cross-Domain Database with Intermediate Representationcited by 210
- 2016Counter-fitting Word Vectors to Linguistic Constraintscited by 138
- 2017Learning a Neural Semantic Parser from User Feedbackcited by 98
- 2019Editing-Based SQL Query Generation for Cross-Domain Context-Dependent Questionscited by 80
8 more
- 2018SyntaxSQLNet: Syntax Tree Networks for Complex and Cross-DomainText-to-SQL Taskcited by 74
- 2019Representing Schema Structure with Graph Neural Networks for Text-to-SQL Parsingcited by 74
- 2020Generating Fluent Adversarial Examples for Natural Languagescited by 49
- 2019Global Reasoning over Database Structures for Text-to-SQL Parsingcited by 43
- 2020Photon: A Robust Cross-Domain Text-to-SQL Systemcited by 26
- 2019SpatialNLI: A Spatial Domain Natural Language Interface to Databases Using Spatial Comprehensioncited by 5
- 2020Generating Semantically Valid Adversarial Questions for TableQAcited by 4
- 2018Transferable Natural Language Interface to Structured Queries aided by Adversarial Generationcited by 2
Built on by
Citing papers per year: 2021: 1; 2022: 13; 2023: 25; 2024: 23; 2025: 31; 2026: 17.
110 papers.
Sort:
By area:
- 2023Can LLM Already Serve as A Database Interface? A BIg Bench for Large-Scale Database Grounded Text-to-SQLscited by 667
- 2023StructGPT: A General Framework for Large Language Model to Reason over Structured Datacited by 339
- 2023RESDSQL: Decoupling Schema Linking and Skeleton Parsing for Text-to-SQLcited by 191
- 2024CodeS: Towards Building Open-source Language Models for Text-to-SQLcited by 183
- 2023A comprehensive evaluation of ChatGPT's zero-shot Text-to-SQL capabilitycited by 118
- 2024Next-Generation Database Interfaces: A Survey of LLM-based Text-to-SQLcited by 118
- 2023Graphix-T5: Mixing Pre-Trained Transformers with Graph-Aware Layers for Text-to-SQL Parsingcited by 93
- 2021Exploring Underexplored Limitations of Cross-Domain Text-to-SQL Generalizationcited by 92
- 2025VerlTool: Towards Holistic Agentic Reinforcement Learning with Tool Usecited by 92
- 2025OmniSQL: Synthesizing High-quality Text-to-SQL Data at Scalecited by 90
- 2022Natural Language to Code Generation in Interactive Data Science Notebookscited by 86
- 2024A Survey on Employing Large Language Models for Text-to-SQL Taskscited by 67
38 more
- 2023ACT-SQL: In-Context Learning for Text-to-SQL with Automatically-Generated Chain-of-Thoughtcited by 65
- 2025Reasoning-SQL: Reinforcement Learning with SQL Tailored Partial Rewards for Reasoning-Enhanced Text-to-SQLcited by 59
- 2024A Survey of Text-to-SQL in the Era of LLMs: Where are we, and where are we going?cited by 54
- 2024Synthesizing Text-to-SQL Data from Weak and Strong LLMscited by 53
- 2022A Survey on Text-to-SQL Parsing: Concepts, Methods, and Future Directionscited by 51
- 2023Dr.Spider: A Diagnostic Evaluation Benchmark towards Text-to-SQL Robustnesscited by 50
- 2022Recent Advances in Text-to-SQL: A Survey of What We Have and What We Expectcited by 47
- 2024DTS-SQL: Decomposed Text-to-SQL with Small Large Language Modelscited by 45
- 2023Enhancing Few-shot Text-to-SQL Capabilities of Large Language Models: A Study on Prompt Design Strategiescited by 44
- 2023SQL-PaLM: Improved Large Language Model Adaptation for Text-to-SQL (extended)cited by 42
- 2023ScienceBenchmark: A Complex Real-World Benchmark for Evaluating Natural Language to SQL Systemscited by 42
- 2022S2SQL: Injecting Syntax to Question-Schema Interaction Graph Encoder for Text-to-SQL Parserscited by 41
- 2023RobuT: A Systematic Study of Table QA Robustness Against Human-Annotated Adversarial Perturbationscited by 41
- 2024PURPLE: Making a Large Language Model a Better SQL Writercited by 34
- 2024Understanding the Effects of Noise in Text-to-SQL: An Examination of the BIRD-Bench Benchmarkcited by 33
- 2023Evaluating Cross-Domain Text-to-SQL Models and Benchmarkscited by 32
- 2024SQLBench: A Comprehensive Evaluation for Text-to-SQL Capabilities of Large Language Modelscited by 32
- 2022Proton: Probing Schema Linking Information from Pre-trained Language Models for Text-to-SQL Parsingcited by 30
- 2024A Survey of Table Reasoning with Large Language Modelscited by 29
- 2022Towards Robustness of Text-to-SQL Models Against Natural and Realistic Adversarial Table Perturbationcited by 28
- 2023Natural Language Interfaces for Tabular Data Querying and Visualization: A Surveycited by 27
- 2025Reward-SQL: Boosting Text-to-SQL via Stepwise Execution-Aware Reasoning and Process-Supervised Rewardscited by 25
- 2022Semantic Enhanced Text-to-SQL Parsing via Iteratively Learning Schema Linking Graphcited by 22
- 2022MultiSpider: Towards Benchmarking Multilingual Text-to-SQL Semantic Parsingcited by 22
- 2025DataFlow: An LLM-Driven Framework for Unified Data Preparation and Workflow Automation in the Era of Data-Centric AIcited by 22
- 2023Text-to-SQL Error Correction with Language Models of Codecited by 21
- 2023Divide and Prompt: Chain of Thought Prompting for Text-to-SQLcited by 20
- 2023Interactive Text-to-SQL Generation via Editable Step-by-Step Explanationscited by 19
- 2023Prompting GPT-3.5 for Text-to-SQL with De-semanticization and Skeleton Retrievalcited by 16
- 2024Improving Retrieval-augmented Text-to-SQL with AST-based Ranking and Schema Pruningcited by 16
- 2023UNITE: A Unified Benchmark for Text-to-SQL Evaluationcited by 14
- 2025Think2SQL: Reinforce LLM Reasoning Capabilities for Text2SQLcited by 14
- 2022UniRPG: Unified Discrete Reasoning over Table and Text as Program Generationcited by 13
- 2024ROUTE: Robust Multitask Tuning and Collaboration for Text-to-SQLcited by 13
- 2023Retrieval-augmented GPT-3.5-based Text-to-SQL Framework with Sample-aware Prompting and Dynamic Revision Chaincited by 12
- 2025Disambiguate First, Parse Later: Generating Interpretations for Ambiguity Resolution in Semantic Parsingcited by 12
- 2024Solid-SQL: Enhanced Schema-linking based In-context Learning for Robust Text-to-SQLcited by 11
- 2025Software Development Life Cycle Perspective: A Survey of Benchmarks for Code Large Language Models and Agentscited by 11
50 most cited of 110 All 110 (JSON)
- 2026SQL-Zero: Self-Evolving Text-to-SQL4 Sep 2026
- 2026BIRD-History: A Benchmark for History-Driven Text-to-SQL with Fine-Grained Knowledge Annotations29 Aug 2026
- 2026Beyond Static Rules: Automated Discovery of Latent Vulnerabilities in Text-to-SQL4 Jul 2026
- 2026Data Agents Under Attack: Vulnerabilities in LLM-Driven Analytical Systems7 Jun 2026
- 2026Progress-SQL: Improving Reinforcement Learning for Text-to-SQL via Progressive Rewards5 Jun 2026
- 2026LEAF-SQL: Level-wise Exploration with Adaptive Fine-graining for Text-to-SQL Skeleton Prediction10 May 2026
- 2026Every Step Counts: Step-Level Credit Assignment for Tool-Integrated Text-to-SQL6 May 2026
- 2026EGREFINE: An Execution-Grounded Optimization Framework for Text-to-SQL Schema Refinement1 May 2026
- 2026EXPO-SQL: Execution-based Clause-level Policy Optimization for Text-to-SQL29 Apr 2026
- 2026SemanticAgent: A Semantics-Aware Framework for Text-to-SQL Data Synthesis23 Apr 2026
- 2026SQLStructEval: Structural Evaluation of LLM Text-to-SQL Generation8 Apr 2026
- 2026LLM NL2SQL Robustness: Surface Noise vs. Linguistic Variation in Traditional and Agentic Settings17 Mar 2026
38 more
- 2026TRUST-SQL: Tool-Integrated Multi-Turn Reinforcement Learning for Text-to-SQL over Unknown Schemas17 Mar 2026
- 2026ErrorLLM: Modeling SQL Errors for Text-to-SQL Refinement4 Mar 2026
- 2026SQL-Trail: Multi-Turn Reinforcement Learning with Interleaved Feedback for Text-to-SQL25 Jan 2026
- 2026RingSQL: Schema-Independent Synthetic Data Generation for Text-to-SQL Reinforcement Learning9 Jan 2026
- 2026EvolSQL: Structure-Aware Evolution for Scalable Text-to-SQL Data Synthesis8 Jan 2026
- 2025A Multi-agent Text2SQL Framework using Small Language Models and Execution Feedback21 Dec 2025
- 2025DataFlow: An LLM-Driven Framework for Unified Data Preparation and Workflow Automation in the Era of Data-Centric AI18 Dec 2025
- 2025Text2SQL-Flow: A Robust SQL-Aware Data Augmentation Framework for Text-to-SQL13 Nov 2025
- 2025GEMMA-SQL: A Novel Text-to-SQL Model Based on Large Language Models5 Nov 2025
- 2025SQLSpace: A Representation Space for Text-to-SQL to Discover and Mitigate Robustness Gaps31 Oct 2025
- 2025Squrve: A Unified and Modular Framework for Complex Real-World Text-to-SQL Tasks28 Oct 2025
- 2025Retrieval and Augmentation of Domain Knowledge for Text-to-SQL Semantic Parsing1 Oct 2025
- 2025Autonomous Data Agents: A New Opportunity for Smart Data23 Sep 2025
- 2025Evaluating NL2SQL via SQL2NL4 Sep 2025
- 2025SPFT-SQL: Enhancing Large Language Model for Text-to-SQL Parsing by Self-Play Fine-Tuning4 Sep 2025
- 2025VerlTool: Towards Holistic Agentic Reinforcement Learning with Tool Use1 Sep 2025
- 2025SQL-of-Thought: Multi-agentic Text-to-SQL with Guided Error Correction30 Aug 2025
- 2025Pandora: Leveraging Code-driven Knowledge Transfer for Unified Structured Knowledge Reasoning25 Aug 2025
- 2025Tabular Data Understanding with LLMs: A Survey of Recent Advances and Challenges31 Jul 2025
- 2025FinStat2SQL: A Text2SQL Pipeline for Financial Statement Analysis29 Jun 2025
- 2025Exploring the Landscape of Text-to-SQL with Large Language Models: Progresses, Challenges and Opportunities28 May 2025
- 2025DCG-SQL: Enhancing In-Context Learning for Text-to-SQL with Deep Contextual Schema Link Graph26 May 2025
- 2025BiomedSQL: Text-to-SQL for Scientific Reasoning on Biomedical Knowledge Bases23 May 2025
- 2025JOLT-SQL: Joint Loss Tuning of Text-to-SQL with Confusion-aware Noisy Schema Sampling20 May 2025
- 2025ReEx-SQL: Reasoning with Execution-Aware Reinforcement Learning for Text-to-SQL19 May 2025
- 2025Software Development Life Cycle Perspective: A Survey of Benchmarks for Code Large Language Models and Agents8 May 2025
- 2025Reward-SQL: Boosting Text-to-SQL via Stepwise Execution-Aware Reasoning and Process-Supervised Rewards7 May 2025
- 2025Think2SQL: Reinforce LLM Reasoning Capabilities for Text2SQL21 Apr 2025
- 2025Reasoning-SQL: Reinforcement Learning with SQL Tailored Partial Rewards for Reasoning-Enhanced Text-to-SQL29 Mar 2025
- 2025TinySQL: A Progressive Text-to-SQL Dataset for Mechanistic Interpretability Research17 Mar 2025
- 2025Benchmarking AI Models in Software Engineering: A Review, Search Tool, and Unified Approach for Elevating Benchmark Quality7 Mar 2025
- 2025OmniSQL: Synthesizing High-quality Text-to-SQL Data at Scale4 Mar 2025
- 2025Disambiguate First, Parse Later: Generating Interpretations for Ambiguity Resolution in Semantic Parsing25 Feb 2025
- 2025SQLong: Enhanced NL2SQL for Longer Contexts with LLMs23 Feb 2025
- 2025Text-to-SQL Domain Adaptation via Human-LLM Collaborative Data Annotation21 Feb 2025
- 2025Knapsack Optimization-based Schema Linking for LLM-based Text-to-SQL Generation18 Feb 2025
- 2024Solid-SQL: Enhanced Schema-linking based In-context Learning for Robust Text-to-SQL17 Dec 2024
- 2024ROUTE: Robust Multitask Tuning and Collaboration for Text-to-SQL13 Dec 2024
50 newest of 110 All 110 (JSON)
- 2023StructGPT: A General Framework for Large Language Model to Reason over Structured Datacited by 339
- 2025VerlTool: Towards Holistic Agentic Reinforcement Learning with Tool Usecited by 92
- 2023ACT-SQL: In-Context Learning for Text-to-SQL with Automatically-Generated Chain-of-Thoughtcited by 65
- 2025Reasoning-SQL: Reinforcement Learning with SQL Tailored Partial Rewards for Reasoning-Enhanced Text-to-SQLcited by 59
- 2024A Survey of Table Reasoning with Large Language Modelscited by 29
- 2025Reward-SQL: Boosting Text-to-SQL via Stepwise Execution-Aware Reasoning and Process-Supervised Rewardscited by 25
- 2023Divide and Prompt: Chain of Thought Prompting for Text-to-SQLcited by 20
- 2025Think2SQL: Reinforce LLM Reasoning Capabilities for Text2SQLcited by 14
- 2025ReEx-SQL: Reasoning with Execution-Aware Reinforcement Learning for Text-to-SQLcited by 8
- 2024ScholarChemQA: Unveiling the Power of Language Models in Chemical Research Question Answeringcited by 5
- 2025BiomedSQL: Text-to-SQL for Scientific Reasoning on Biomedical Knowledge Basescited by 4
- 2024Multi-Turn Interactions for Text-to-SQL with Large Language Modelscited by 2
12 most cited of 13 All 13 (JSON)
- 2025VerlTool: Towards Holistic Agentic Reinforcement Learning with Tool Use1 Sep 2025
- 2025Pandora: Leveraging Code-driven Knowledge Transfer for Unified Structured Knowledge Reasoning25 Aug 2025
- 2025BiomedSQL: Text-to-SQL for Scientific Reasoning on Biomedical Knowledge Bases23 May 2025
- 2025ReEx-SQL: Reasoning with Execution-Aware Reinforcement Learning for Text-to-SQL19 May 2025
- 2025Reward-SQL: Boosting Text-to-SQL via Stepwise Execution-Aware Reasoning and Process-Supervised Rewards7 May 2025
- 2025Think2SQL: Reinforce LLM Reasoning Capabilities for Text2SQL21 Apr 2025
- 2025Reasoning-SQL: Reinforcement Learning with SQL Tailored Partial Rewards for Reasoning-Enhanced Text-to-SQL29 Mar 2025
- 2024Multi-Turn Interactions for Text-to-SQL with Large Language Models9 Aug 2024
- 2024ScholarChemQA: Unveiling the Power of Language Models in Chemical Research Question Answering24 Jul 2024
- 2024A Survey of Table Reasoning with Large Language Models13 Feb 2024
- 2023ACT-SQL: In-Context Learning for Text-to-SQL with Automatically-Generated Chain-of-Thought26 Oct 2023
- 2023StructGPT: A General Framework for Large Language Model to Reason over Structured Data16 May 2023
12 newest of 13 All 13 (JSON)
- 2025Software Development Life Cycle Perspective: A Survey of Benchmarks for Code Large Language Models and Agentscited by 11
- 2025Autonomous Data Agents: A New Opportunity for Smart Datacited by 6
- 2025SQL-of-Thought: Multi-agentic Text-to-SQL with Guided Error Correctioncited by 5
- 2024Tool-Assisted Agent on SQL Inspection and Refinement in Real-World Scenarioscited by 4
- 2026Data Agents Under Attack: Vulnerabilities in LLM-Driven Analytical Systemscited by 1
- 2025A Multi-agent Text2SQL Framework using Small Language Models and Execution Feedbackcited by 0
- 2026LLM NL2SQL Robustness: Surface Noise vs. Linguistic Variation in Traditional and Agentic Settingscited by 0
- 2026Data Agents Under Attack: Vulnerabilities in LLM-Driven Analytical Systems7 Jun 2026
- 2026LLM NL2SQL Robustness: Surface Noise vs. Linguistic Variation in Traditional and Agentic Settings17 Mar 2026
- 2025A Multi-agent Text2SQL Framework using Small Language Models and Execution Feedback21 Dec 2025
- 2025Autonomous Data Agents: A New Opportunity for Smart Data23 Sep 2025
- 2025SQL-of-Thought: Multi-agentic Text-to-SQL with Guided Error Correction30 Aug 2025
- 2025Software Development Life Cycle Perspective: A Survey of Benchmarks for Code Large Language Models and Agents8 May 2025
- 2024Tool-Assisted Agent on SQL Inspection and Refinement in Real-World Scenarios30 Aug 2024
- 2025SPFT-SQL: Enhancing Large Language Model for Text-to-SQL Parsing by Self-Play Fine-Tuningcited by 5
- 2026EvolSQL: Structure-Aware Evolution for Scalable Text-to-SQL Data Synthesiscited by 1
- 2026RingSQL: Schema-Independent Synthetic Data Generation for Text-to-SQL Reinforcement Learningcited by 0
- 2026SQL-Zero: Self-Evolving Text-to-SQLcited by 0
- 2026SQL-Zero: Self-Evolving Text-to-SQL4 Sep 2026
- 2026RingSQL: Schema-Independent Synthetic Data Generation for Text-to-SQL Reinforcement Learning9 Jan 2026
- 2026EvolSQL: Structure-Aware Evolution for Scalable Text-to-SQL Data Synthesis8 Jan 2026
- 2025SPFT-SQL: Enhancing Large Language Model for Text-to-SQL Parsing by Self-Play Fine-Tuning4 Sep 2025
- 2023Can LLM Already Serve as A Database Interface? A BIg Bench for Large-Scale Database Grounded Text-to-SQLscited by 667
- 2023RESDSQL: Decoupling Schema Linking and Skeleton Parsing for Text-to-SQLcited by 191
- 2024CodeS: Towards Building Open-source Language Models for Text-to-SQLcited by 183
- 2023A comprehensive evaluation of ChatGPT's zero-shot Text-to-SQL capabilitycited by 118
- 2024Next-Generation Database Interfaces: A Survey of LLM-based Text-to-SQLcited by 118
- 2023Graphix-T5: Mixing Pre-Trained Transformers with Graph-Aware Layers for Text-to-SQL Parsingcited by 93
- 2021Exploring Underexplored Limitations of Cross-Domain Text-to-SQL Generalizationcited by 92
- 2025OmniSQL: Synthesizing High-quality Text-to-SQL Data at Scalecited by 90
- 2022Natural Language to Code Generation in Interactive Data Science Notebookscited by 86
- 2024A Survey on Employing Large Language Models for Text-to-SQL Taskscited by 67
- 2024A Survey of Text-to-SQL in the Era of LLMs: Where are we, and where are we going?cited by 54
- 2024Synthesizing Text-to-SQL Data from Weak and Strong LLMscited by 53
12 most cited of 83 All 83 (JSON)
- 2026BIRD-History: A Benchmark for History-Driven Text-to-SQL with Fine-Grained Knowledge Annotations29 Aug 2026
- 2026Beyond Static Rules: Automated Discovery of Latent Vulnerabilities in Text-to-SQL4 Jul 2026
- 2026Progress-SQL: Improving Reinforcement Learning for Text-to-SQL via Progressive Rewards5 Jun 2026
- 2026LEAF-SQL: Level-wise Exploration with Adaptive Fine-graining for Text-to-SQL Skeleton Prediction10 May 2026
- 2026Every Step Counts: Step-Level Credit Assignment for Tool-Integrated Text-to-SQL6 May 2026
- 2026EGREFINE: An Execution-Grounded Optimization Framework for Text-to-SQL Schema Refinement1 May 2026
- 2026EXPO-SQL: Execution-based Clause-level Policy Optimization for Text-to-SQL29 Apr 2026
- 2026SemanticAgent: A Semantics-Aware Framework for Text-to-SQL Data Synthesis23 Apr 2026
- 2026SQLStructEval: Structural Evaluation of LLM Text-to-SQL Generation8 Apr 2026
- 2026TRUST-SQL: Tool-Integrated Multi-Turn Reinforcement Learning for Text-to-SQL over Unknown Schemas17 Mar 2026
- 2026ErrorLLM: Modeling SQL Errors for Text-to-SQL Refinement4 Mar 2026
- 2026SQL-Trail: Multi-Turn Reinforcement Learning with Interleaved Feedback for Text-to-SQL25 Jan 2026
12 newest of 83 All 83 (JSON)