mlsanityData to 7 Oct 2026

On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codex

arXiv 2301.12868 ↗First posted 30 Jan 2023cs.CLcited by 41

Not on the map. Why?

Abstract (arXiv)

Semantic parsing is a technique aimed at constructing a structured representation of the meaning of a natural-language question. Recent advancements in few-shot language models trained on code have demonstrated superior performance in generating these representations compared to traditional unimodal language models, which are trained on downstream tasks. Despite these advancements, existing fine-tuned neural semantic parsers are susceptible to adversarial attacks on natural-language inputs. While it has been established that the robustness of smaller semantic parsers can be enhanced through adversarial training, this approach is not feasible for large language models in real-world scenarios, as it requires both substantial computational resources and expensive human annotation on in-domain semantic parsing data. This paper presents the first empirical study on the adversarial robustness of a large prompt-based language model of code, codex. Our results demonstrate that the state-of-the-art (SOTA) code-language models are vulnerable to carefully crafted adversarial examples. To address this challenge, we propose methods for improving robustness without the need for significant amounts of labeled data or heavy computational resources.

Key facts. Cited by 41 papers in the map (data through 7 Oct 2026). Builds on 59 of its 84 references that are in the map. First posted on arXiv 30 Jan 2023.

Builds on

59 of 84 references.

References · 59

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  2. 2020Language Models are Few-Shot Learnerscited by 32,199
  3. 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
  4. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
  5. 2021Evaluating Large Language Models Trained on Codecited by 8,053
  6. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  7. 2013Intriguing properties of neural networkscited by 5,114
  8. 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
  9. 2021Zero-Shot Text-to-Image Generationcited by 4,276
  10. 2015Domain-Adversarial Training of Neural Networkscited by 3,023
  11. 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
  12. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
38 more
  1. 2019Adversarial Training for Free!cited by 638
  2. 2018Generating Natural Language Adversarial Examplescited by 422
  3. 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 376
  4. 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 341
  5. 2021Pre-Trained Models: Past, Present and Futurecited by 319
  6. 2017Synthetic and Natural Noise Both Break Neural Machine Translationcited by 304
  7. 2021An Empirical Study of GPT-3 for Few-Shot Knowledge-Based VQAcited by 298
  8. 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 282
  9. 2016Adversarial Training Methods for Semi-Supervised Text Classificationcited by 280
  10. 2021CLIP-Forge: Towards Zero-Shot Text-to-Shape Generationcited by 254
  11. 2021Gradient-based Adversarial Attacks against Text Transformerscited by 233
  12. 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
  13. 2019Improving Adversarial Robustness via Promoting Ensemble Diversitycited by 213
  14. 2018Stress Test Evaluation for Natural Language Inferencecited by 211
  15. 2021Data Augmentation Can Improve Robustnesscited by 193
  16. 2017Generating Natural Adversarial Examplescited by 182
  17. 2019Adversarial Training and Robustness for Multiple Perturbationscited by 182
  18. 2019Certified Robustness to Adversarial Word Substitutionscited by 164
  19. 2021Constrained Language Models Yield Few-Shot Semantic Parserscited by 162
  20. 2018Improving Text-to-SQL Evaluation Methodologycited by 133
  21. 2019Adversarial Training Can Hurt Generalizationcited by 131
  22. 2020Feature Purification: How Adversarial Training Performs Robust Deep Learningcited by 107
  23. 2017Deep Text Classification Can be Fooledcited by 105
  24. 2022Evaluating the Text-to-SQL Capabilities of Large Language Modelscited by 101
  25. 2017Deceiving Google's Perspective API Built for Detecting Toxic Commentscited by 99
  26. 2019Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systemscited by 99
  27. 2017Learning a Neural Semantic Parser from User Feedbackcited by 98
  28. 2022Compositional Semantic Parsing with Large Language Modelscited by 95
  29. 2018Universal Adversarial Trainingcited by 85
  30. 2021Few-Shot Self-Rationalization with Natural Language Promptscited by 83
  31. 2021Improving Question Answering Model Robustness with Synthetic Adversarial Data Generationcited by 77
  32. 2020Sequence-Level Mixed Sample Data Augmentationcited by 71
  33. 2021Bad Characters: Imperceptible NLP Attackscited by 69
  34. 2021Towards Robustness Against Natural Language Word Substitutionscited by 68
  35. 2021Tailor: Generating and Perturbing Text with Semantic Controlscited by 67
  36. 2021Improved OOD Generalization via Adversarial Training and Pre-trainingcited by 66
  37. 2020Learning Contextual Representations for Semantic Parsing with Generation-Augmented Pre-Trainingcited by 65
  38. 2018A Survey on Semantic Parsingcited by 62

50 most cited of 59 All 59 (JSON)

Built on by

Cited by year

Citing papers per year: 2023: 19; 2024: 13; 2025: 9.

41 papers.

Sort:

By area:

  1. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,203
  2. 2023A Survey on Evaluation of Large Language Modelscited by 1,227
  3. 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 394
  4. 2023Large Language Model Unlearningcited by 288
  5. 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
  6. 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 218
  7. 2023A Survey of Large Language Models for Healthcare: from Data, Technology, and Applications to Accountability and Ethicscited by 162
  8. 2024Trustworthiness in Retrieval-Augmented Generation Systems: A Surveycited by 83
  9. 2024From Individual to Society: A Survey on Social Simulation Driven by Large Language Model-based Agentscited by 76
  10. 2023FACTUAL: A Benchmark for Faithful and Consistent Textual Scene Graph Parsingcited by 50
  11. 2023Position: AI Evaluation Should Learn from How We Test Humanscited by 36
  12. 2023This Land is {Your, My} Land: Evaluating Geopolitical Biases in Language Modelscited by 31
29 more
  1. 2023MathAttack: Attacking Large Language Models Towards Math Solving Abilitycited by 31
  2. 2024Prompt Perturbation Consistency Learning for Robust Language Modelscited by 26
  3. 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trendscited by 26
  4. 2023Interleaving Pre-Trained Language Models and Large Language Models for Zero-Shot NL2SQL Generationcited by 24
  5. 2024"They are uncultured": Unveiling Covert Harms and Social Threats in LLM Generated Conversationscited by 24
  6. 2023Intuitive or Dependent? Investigating LLMs' Behavior Style to Conflicting Promptscited by 23
  7. 2024Long Context RAG Performance of Large Language Modelscited by 23
  8. 2023FLM-101B: An Open LLM and How to Train It with 100K Budgetcited by 22
  9. 2024NLPerturbator: Studying the Robustness of Code LLMs to Natural Language Variationscited by 19
  10. 2024Task Facet Learning: A Structured Approach to Prompt Optimizationcited by 17
  11. 2025CodeCrash: Exposing LLM Fragility to Misleading Natural Language in Code Reasoningcited by 14
  12. 2023Do Large Language Models Pay Similar Attention Like Human Programmers When Generating Code?cited by 13
  13. 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligencecited by 13
  14. 2024SelfPrompt: Autonomously Evaluating LLM Robustness via Domain-Constrained Knowledge Guidelines and Refined Adversarial Promptscited by 10
  15. 2024PPM: Automated Generation of Diverse Programming Problems for Benchmarking Code Generation Modelscited by 7
  16. 2025Battling Misinformation: An Empirical Study on Adversarial Factuality in Open-Source Large Language Modelscited by 5
  17. 2025Can an Individual Manipulate the Collective Decisions of Multi-Agents?cited by 5
  18. 2025Enabling AI Scientists to Recognize Innovation: A Domain-Agnostic Algorithm for Assessing Noveltycited by 4
  19. 2023The Best of Both Worlds: Combining Human and Machine Translations for Multilingual Semantic Parsing with Active Learningcited by 3
  20. 2023Enhancing Robustness of AI Offensive Code Generators via Data Augmentationcited by 3
  21. 2024Improving Cross-Domain Low-Resource Text Generation through LLM Post-Editing: A Programmer-Interpreter Approachcited by 3
  22. 2024KGPA: Robustness Evaluation for Large Language Models via Cross-Domain Knowledge Graphscited by 3
  23. 2025Smaller = Weaker? Benchmarking Robustness of Quantized LLMs in Code Generationcited by 3
  24. 2024Specification Overfitting in Artificial Intelligencecited by 2
  25. 2023Few-shot Domain-Adaptive Visually-fused Event Detection from Textcited by 1
  26. 2023Reranking for Natural Language Generation from Logical Forms: A Study based on Large Language Modelscited by 1
  27. 2025DiscoSG: Towards Discourse-Level Text Scene Graph Parsing through Iterative Graph Refinementcited by 1
  28. 2025Investigating Neurons and Heads in Transformer-based LLMs for Typographical Errorscited by 0
  29. 2025TestDG: Test-time Domain Generalization for Continual Test-time Adaptationcited by 0