mlsanityData to 7 Oct 2026

Are Neural Ranking Models Robust?

arXiv 2108.05018 ↗First posted 11 Aug 2021cs.IRcited by 16

Not on the map. Why?

Abstract (arXiv)

Recently, we have witnessed the bloom of neural ranking models in the information retrieval (IR) field. So far, much effort has been devoted to developing effective neural ranking models that can generalize well on new data. There has been less attention paid to the robustness perspective. Unlike the effectiveness which is about the average performance of a system under normal purpose, robustness cares more about the system performance in the worst case or under malicious operations instead. When a new technique enters into the real-world application, it is critical to know not only how it works in average, but also how would it behave in abnormal situations. So we raise the question in this work: Are neural ranking models robust? To answer this question, firstly, we need to clarify what we refer to when we talk about the robustness of ranking models in IR. We show that robustness is actually a multi-dimensional concept and there are three ways to define it in IR: 1) The performance variance under the independent and identically distributed (I.I.D.) setting; 2) The out-of-distribution (OOD) generalizability; and 3) The defensive ability against adversarial operations. The latter two definitions can be further specified into two different perspectives respectively, leading to 5 robustness tasks in total. Based on this taxonomy, we build corresponding benchmark datasets, design empirical experiments, and systematically analyze the robustness of several representative neural ranking models against traditional probabilistic ranking models and learning-to-rank (LTR) models. The empirical results show that there is no simple answer to our question. While neural ranking models are less robust against other IR models in most cases, some of them can still win 1 out of 5 tasks. This is the first comprehensive study on the robustness of neural ranking models.

Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). First posted on arXiv 11 Aug 2021.

Builds on

No reference list yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2022: 5; 2023: 6; 2024: 1; 2025: 2; 2026: 2.

16 papers.

Sort:

By area:

  1. 2022Order-Disorder: Imitation Adversarial Attacks for Black-box Neural Ranking Modelscited by 37
  2. 2023Black-box Adversarial Attacks against Dense Retrieval Models: A Multi-view Contrastive Learning Methodcited by 29
  3. 2022CharacterBERT and Self-Teaching for Improving the Robustness of Dense Retrievers on Queries with Typoscited by 22
  4. 2023Agent4Ranking: Semantic Robust Ranking via Personalized Query Rewriting Using Multi-agent LLMcited by 18
  5. 2024Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspectivecited by 15
  6. 2022Isotropic Representation Can Improve Dense Retrievalcited by 8
  7. 2023On the Robustness of Generative Retrieval Models: An Out-of-Distribution Perspectivecited by 8
  8. 2022Entity-Conditioned Question Generation for Robust Attention Distribution in Neural Information Retrievalcited by 5
  9. 2023Noise-Robust Dense Retrieval via Contrastive Alignment Post Trainingcited by 5
  10. 2025IRLBench: A Multi-modal, Culturally Grounded, Parallel Irish-English Benchmark for Open-Ended LLM Reasoning Evaluationcited by 4
  11. 2023Defense of Adversarial Ranking Attack in Text Retrieval: Benchmark and Baseline via Detectioncited by 3
  12. 2023Pretrained deep models outperform GBDTs in Learning-To-Rank under label scarcitycited by 1
4 more
  1. 2025AIRwaves at CheckThat! 2025: Retrieving Scientific Sources for Implicit Claims on Social Media with Dual Encoders and Neural Re-Rankingcited by 1
  2. 2022Explainability of Text Processing and Retrieval Methods: A Surveycited by 0
  3. 2026Reranker Optimization via Geodesic Distances on k-NN Manifoldscited by 0
  4. 2026RMB: Reward Model Boosting Mitigates Reward Hackingcited by 0