mlsanityData to 14 Oct 2026

Analyzing Dynamic Adversarial Training Data in the Limit

arXiv 2110.08514 ↗First posted 16 Oct 2021cs.CL cs.LGcited by 24

Not on the map. Why?

Abstract (arXiv)

To create models that are robust across a wide range of test inputs, training datasets should include diverse examples that span numerous phenomena. Dynamic adversarial data collection (DADC), where annotators craft examples that challenge continually improving models, holds promise as an approach for generating such diverse training sets. Prior work has shown that running DADC over 1-3 rounds can help models fix some error types, but it does not necessarily lead to better generalization beyond adversarial test data. We argue that running DADC over many rounds maximizes its training-time benefits, as the different rounds can together cover many of the task-relevant phenomena. We present the first study of longer-term DADC, where we collect 20 rounds of NLI examples for a small set of premise paragraphs, with both adversarial and non-adversarial approaches. Models trained on DADC examples make 26% fewer errors on our expert-curated test set compared to models trained on non-adversarial data. Our analysis shows that DADC yields examples that are more difficult, more lexically and syntactically diverse, and contain fewer annotation artifacts compared to non-adversarial examples.

Key facts. Cited by 24 papers in the map (data through 14 Oct 2026). Builds on 49 of its 72 references that are in the map. First posted on arXiv 16 Oct 2021.

Builds on

49 of 72 references.

References · 49

  1. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  2. 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  4. 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
  5. 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,148
  6. 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
  7. 2019ALBERT: A Lite BERT for Self-supervised Learning of Language Representationscited by 2,790
  8. 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,682
  9. 2015A large annotated corpus for learning natural language inferencecited by 1,847
  10. 2018FEVER: a large-scale dataset for Fact Extraction and VERificationcited by 1,375
  11. 2019DROP: A Reading Comprehension Benchmark Requiring Discrete Reasoning Over Paragraphscited by 903
  12. 2019Right for the Wrong Reasons: Diagnosing Syntactic Heuristics in Natural Language Inferencecited by 876
37 more
  1. 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
  2. 2018Annotation Artifacts in Natural Language Inference Datacited by 671
  3. 2017The NarrativeQA Reading Comprehension Challengecited by 597
  4. 2021Dynabench: Rethinking Benchmarking in NLPcited by 459
  5. 2019Learning the Difference that Makes a Difference with Counterfactually-Augmented Datacited by 439
  6. 2018SWAG: A Large-Scale Adversarial Dataset for Grounded Commonsense Inferencecited by 333
  7. 2018Hypothesis Only Baselines in Natural Language Inferencecited by 295
  8. 2020Pretrained Transformers Improve Out-of-Distribution Robustnesscited by 294
  9. 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 286
  10. 2020On the Stability of Fine-tuning BERT: Misconceptions, Explanations, and Strong Baselinescited by 255
  11. 2018Stress Test Evaluation for Natural Language Inferencecited by 213
  12. 2021What Will it Take to Fix Benchmarking in Natural Language Understanding?cited by 203
  13. 2018Constituency Parsing with a Self-Attentive Encodercited by 199
  14. 2019Build it Break it Fix it for Dialogue Safety: Robustness from Adversarial Human Attackcited by 176
  15. 2019Are We Modeling the Task or the Annotator? An Investigation of Annotator Bias in Natural Language Understanding Datasetscited by 175
  16. 2020Recipes for Safety in Open-domain Chatbotscited by 170
  17. 2020Adversarial Filters of Dataset Biasescited by 160
  18. 2020What Can We Learn from Collective Human Opinions on Natural Language Inference Data?cited by 153
  19. 2018Breaking NLI Systems with Sentences that Require Simple Lexical Inferencescited by 134
  20. 2020Beat the AI: Investigating Adversarial Human Annotation for Reading Comprehensioncited by 131
  21. 2018Combining Fact Extraction and Verification with Neural Semantic Matching Networkscited by 120
  22. 2021The Perils of Using Mechanical Turk to Evaluate Open-Ended Text Generationcited by 97
  23. 2019Compositional Questions Do Not Necessitate Multi-hop Reasoningcited by 88
  24. 2020Look at the First Sentence: Position Bias in Question Answeringcited by 84
  25. 2018Practical Obstacles to Deploying Active Learningcited by 68
  26. 2020DynaSent: A Dynamic Benchmark for Sentiment Analysiscited by 63
  27. 2019MultiQA: An Empirical Investigation of Generalization and Transfer in Reading Comprehensioncited by 60
  28. 2018Performance Impact Caused by Hidden Bias of Training Data for Recognizing Textual Entailmentcited by 59
  29. 2021Dynaboard: An Evaluation-As-A-Service Platform for Holistic Next-Generation Benchmarkingcited by 53
  30. 2021Fool Me Twice: Entailment from Wikipedia Gamificationcited by 50
  31. 2020ANLIzing the Adversarial Natural Language Inference Datasetcited by 36
  32. 2021On the Efficacy of Adversarial Data Collection for Question Answering: Results from a Large-Scale Randomized Studycited by 31
  33. 2021Does Putting a Linguist in the Loop Improve NLU Data Collection?cited by 29
  34. 2020Counterfactually-Augmented SNLI Training Data Does Not Yield Better Generalization Than Unaugmented Datacited by 27
  35. 2021What Ingredients Make for an Effective Crowdsourcing Protocol for Difficult NLU Data Collection Tasks?cited by 23
  36. 2017Mastering the Dungeon: Grounded Language Learning by Mechanical Turker Descentcited by 10
  37. 2020Asking Crowdworkers to Write Entailment Examples: The Best of Bad Optionscited by 8

Built on by

Cited by year

Citing papers per year: 2021: 2; 2022: 6; 2023: 8; 2024: 6; 2025: 2.

24 papers.

Sort:

By area:

  1. 2022Red Teaming Language Models with Language Modelscited by 1,026
  2. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
  3. 2023Poisoning Language Models During Instruction Tuningcited by 269
  4. 2022Adversarial Training for High-Stakes Reliabilitycited by 60
  5. 2024Learning diverse attacks on large language models for robust red-teaming and safety tuningcited by 54
  6. 2025Which of These Best Describes Multiple Choice Evaluation with LLMs? A) Forced B) Flawed C) Fixable D) All of the Abovecited by 52
  7. 2025Agentic Web: Weaving the Next Web with AI Agentscited by 45
  8. 2021Models in the Loop: Aiding Crowdworkers with Generative Annotation Assistantscited by 31
  9. 2022Dynatask: A Framework for Creating Dynamic AI Benchmark Taskscited by 16
  10. 2022A Theory of Dynamic Benchmarkscited by 16
  11. 2024Improving Adversarial Data Collection by Supporting Annotators: Lessons from GAHD, a German Hate Speech Datasetcited by 13
  12. 2021Adversarially Constructed Evaluation Sets Are More Challenging, but May Not Be Faircited by 12
12 more
  1. 2024Efficient Lifelong Model Evaluation in an Era of Rapid Progresscited by 10
  2. 2022Benchmarking Long-tail Generalization with Likelihood Splitscited by 9
  3. 2023On the Limitations of Simulating Active Learningcited by 9
  4. 2023Adversarial Fine-Tuning of Language Models: An Iterative Optimisation Approach for the Generation and Detection of Problematic Contentcited by 7
  5. 2024Adversarial Training: A Surveycited by 6
  6. 2023Can Large Language Models Change User Preference Adversarially?cited by 5
  7. 2023JAB: Joint Adversarial Prompting and Belief Augmentationcited by 5
  8. 2023From Adversarial Arms Race to Model-centric Evaluation: Motivating a Unified Automatic Robustness Evaluation Frameworkcited by 3
  9. 2023No Offense Taken: Eliciting Offensiveness from Language Modelscited by 3
  10. 2023On Degrees of Freedom in Defining and Testing Natural Language Understandingcited by 1
  11. 2024How the Advent of Ubiquitous Large Language Models both Stymie and Turbocharge Dynamic Adversarial Question Generationcited by 1
  12. 2024Zero-shot Factual Consistency Evaluation Across Domainscited by 0