Robust Natural Language Processing: Recent Advances, Challenges, and Future Directions
Not on the map. Why?
Abstract (arXiv)
Recent natural language processing (NLP) techniques have accomplished high performance on benchmark datasets, primarily due to the significant improvement in the performance of deep learning. The advances in the research community have led to great enhancements in state-of-the-art production systems for NLP tasks, such as virtual assistants, speech recognition, and sentiment analysis. However, such NLP systems still often fail when tested with adversarial attacks. The initial lack of robustness exposed troubling gaps in current models' language understanding capabilities, creating problems when NLP systems are deployed in real life. In this paper, we present a structured overview of NLP robustness research by summarizing the literature in a systemic way across various dimensions. We then take a deep-dive into the various dimensions of robustness, across techniques, metrics, embeddings, and benchmarks. Finally, we argue that robustness should be multi-dimensional, provide insights into current research, identify gaps in the literature to suggest directions worth pursuing to address these gaps.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 98 of its 151 references that are in the map. First posted on arXiv 3 Jan 2022.
Builds on
98 of 151 references.
References · 98
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2018Know What You Don't Know: Unanswerable Questions for SQuADcited by 1,538
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 979
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 709
- 2020SummEval: Re-evaluating Summarization Evaluationcited by 666
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 663
38 more
- 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 568
- 2019Learning the Difference that Makes a Difference with Counterfactually-Augmented Datacited by 428
- 2018Generating Natural Language Adversarial Examplescited by 422
- 2021A Survey of Data Augmentation Approaches for NLPcited by 408
- 2021A Survey of Transformerscited by 399
- 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 341
- 2016FastText.zip: Compressing text classification modelscited by 331
- 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
- 2020BAE: BERT-based Adversarial Examples for Text Classificationcited by 316
- 2019Transfer Learning in Biomedical Natural Language Processing: An Evaluation of BERT and ELMo on Ten Benchmarking Datasetscited by 298
- 2020Pretrained Transformers Improve Out-of-Distribution Robustnesscited by 293
- 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 282
- 2019Don't Take the Easy Way Out: Ensemble Based Methods for Avoiding Known Dataset Biasescited by 279
- 2019FreeLB: Enhanced Adversarial Training for Natural Language Understandingcited by 261
- 2018Adversarial Attacks and Defences: A Surveycited by 259
- 2018The Natural Language Decathlon: Multitask Learning as Question Answeringcited by 235
- 2018Stress Test Evaluation for Natural Language Inferencecited by 211
- 2017Generating Natural Adversarial Examplescited by 182
- 2020Social Biases in NLP Models as Barriers for Persons with Disabilitiescited by 182
- 2019Certified Robustness to Adversarial Word Substitutionscited by 164
- 2019Combating Adversarial Misspellings with Robust Word Recognitioncited by 162
- 2020Adversarial Filters of Dataset Biasescited by 159
- 2019Reducing Sentiment Bias in Language Models via Counterfactual Evaluationcited by 148
- 2019Predictive Biases in Natural Language Processing Models: A Conceptual Framework and Overviewcited by 137
- 2018Breaking NLI Systems with Sentences that Require Simple Lexical Inferencescited by 134
- 2020An Empirical Study on Robustness to Spurious Correlations using Pre-trained Language Modelscited by 133
- 2019Unlearn Dataset Bias in Natural Language Inference by Fitting the Residualcited by 119
- 2021Robustness Gym: Unifying the NLP Evaluation Landscapecited by 107
- 2017Deep Text Classification Can be Fooledcited by 105
- 2017Deceiving Google's Perspective API Built for Detecting Toxic Commentscited by 99
- 2019Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systemscited by 99
- 2021Pretrained Language Models for Text Generation: A Surveycited by 95
- 2018Seq2Sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examplescited by 93
- 2020InfoBERT: Improving Robustness of Language Models from An Information Theoretic Perspectivecited by 92
- 2019Achieving Verified Robustness to Symbol Substitutions via Interval Bound Propagationcited by 87
- 2021Evaluating the Robustness of Neural Language Models to Input Perturbationscited by 87
- 2021Quantifying Social Biases in NLP: A Generalization and Empirical Comparison of Extrinsic Fairness Metricscited by 83
- 2019Learning and Evaluating General Linguistic Intelligencecited by 78
50 most cited of 98 All 98 (JSON)
Built on by
Citing papers per year: 2022: 2; 2023: 3; 2024: 1; 2025: 3.
9 papers.
- 2023An Overview on Language Models: Recent Developments and Outlookcited by 22
- 2022A Survey of Methods for Addressing Class Imbalance in Deep-Learning Based Natural Language Processingcited by 20
- 2022How Robust is your Fair Model? Exploring the Robustness of Diverse Fairness Strategiescited by 2
- 2023New Approach to Malware Detection Using Optimized Convolutional Neural Networkcited by 1
- 2023Estimating Semantic Similarity between In-Domain and Out-of-Domain Samplescited by 1
- 2025Divided We Fall: Defending Against Adversarial Attacks via Soft-Gated Fractional Mixture-of-Experts with Randomized Adversarial Trainingcited by 1
- 2024Golyadkin's Torment: Doppelg"angers and Adversarial Vulnerabilitycited by 0
- 2025Enhancing Social Robots through Resilient AIcited by 0
- 2025Feedback Loops and Code Perturbations in LLM-based Software Engineering: A Case Study on a C-to-Rust Translation Systemcited by 0
- 2025Divided We Fall: Defending Against Adversarial Attacks via Soft-Gated Fractional Mixture-of-Experts with Randomized Adversarial Training23 Dec 2025
- 2025Feedback Loops and Code Perturbations in LLM-based Software Engineering: A Case Study on a C-to-Rust Translation System2 Dec 2025
- 2025Enhancing Social Robots through Resilient AI24 Oct 2025
- 2024Golyadkin's Torment: Doppelg"angers and Adversarial Vulnerability17 Oct 2024
- 2023Estimating Semantic Similarity between In-Domain and Out-of-Domain Samples1 Jun 2023
- 2023An Overview on Language Models: Recent Developments and Outlook10 Mar 2023
- 2023New Approach to Malware Detection Using Optimized Convolutional Neural Network26 Jan 2023
- 2022A Survey of Methods for Addressing Class Imbalance in Deep-Learning Based Natural Language Processing10 Oct 2022
- 2022How Robust is your Fair Model? Exploring the Robustness of Diverse Fairness Strategies11 Jul 2022