On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codex
Not on the map. Why?
Abstract (arXiv)
Semantic parsing is a technique aimed at constructing a structured representation of the meaning of a natural-language question. Recent advancements in few-shot language models trained on code have demonstrated superior performance in generating these representations compared to traditional unimodal language models, which are trained on downstream tasks. Despite these advancements, existing fine-tuned neural semantic parsers are susceptible to adversarial attacks on natural-language inputs. While it has been established that the robustness of smaller semantic parsers can be enhanced through adversarial training, this approach is not feasible for large language models in real-world scenarios, as it requires both substantial computational resources and expensive human annotation on in-domain semantic parsing data. This paper presents the first empirical study on the adversarial robustness of a large prompt-based language model of code, codex. Our results demonstrate that the state-of-the-art (SOTA) code-language models are vulnerable to carefully crafted adversarial examples. To address this challenge, we propose methods for improving robustness without the need for significant amounts of labeled data or heavy computational resources.
Key facts. Cited by 41 papers in the map (data through 7 Oct 2026). Builds on 59 of its 84 references that are in the map. First posted on arXiv 30 Jan 2023.
Builds on
59 of 84 references.
References · 59
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2013Intriguing properties of neural networkscited by 5,114
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2015Domain-Adversarial Training of Neural Networkscited by 3,023
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
38 more
- 2019Adversarial Training for Free!cited by 638
- 2018Generating Natural Language Adversarial Examplescited by 422
- 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 376
- 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 341
- 2021Pre-Trained Models: Past, Present and Futurecited by 319
- 2017Synthetic and Natural Noise Both Break Neural Machine Translationcited by 304
- 2021An Empirical Study of GPT-3 for Few-Shot Knowledge-Based VQAcited by 298
- 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 282
- 2016Adversarial Training Methods for Semi-Supervised Text Classificationcited by 280
- 2021CLIP-Forge: Towards Zero-Shot Text-to-Shape Generationcited by 254
- 2021Gradient-based Adversarial Attacks against Text Transformerscited by 233
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
- 2019Improving Adversarial Robustness via Promoting Ensemble Diversitycited by 213
- 2018Stress Test Evaluation for Natural Language Inferencecited by 211
- 2021Data Augmentation Can Improve Robustnesscited by 193
- 2017Generating Natural Adversarial Examplescited by 182
- 2019Adversarial Training and Robustness for Multiple Perturbationscited by 182
- 2019Certified Robustness to Adversarial Word Substitutionscited by 164
- 2021Constrained Language Models Yield Few-Shot Semantic Parserscited by 162
- 2018Improving Text-to-SQL Evaluation Methodologycited by 133
- 2019Adversarial Training Can Hurt Generalizationcited by 131
- 2020Feature Purification: How Adversarial Training Performs Robust Deep Learningcited by 107
- 2017Deep Text Classification Can be Fooledcited by 105
- 2022Evaluating the Text-to-SQL Capabilities of Large Language Modelscited by 101
- 2017Deceiving Google's Perspective API Built for Detecting Toxic Commentscited by 99
- 2019Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systemscited by 99
- 2017Learning a Neural Semantic Parser from User Feedbackcited by 98
- 2022Compositional Semantic Parsing with Large Language Modelscited by 95
- 2018Universal Adversarial Trainingcited by 85
- 2021Few-Shot Self-Rationalization with Natural Language Promptscited by 83
- 2021Improving Question Answering Model Robustness with Synthetic Adversarial Data Generationcited by 77
- 2020Sequence-Level Mixed Sample Data Augmentationcited by 71
- 2021Bad Characters: Imperceptible NLP Attackscited by 69
- 2021Towards Robustness Against Natural Language Word Substitutionscited by 68
- 2021Tailor: Generating and Perturbing Text with Semantic Controlscited by 67
- 2021Improved OOD Generalization via Adversarial Training and Pre-trainingcited by 66
- 2020Learning Contextual Representations for Semantic Parsing with Generation-Augmented Pre-Trainingcited by 65
- 2018A Survey on Semantic Parsingcited by 62
50 most cited of 59 All 59 (JSON)
Built on by
Citing papers per year: 2023: 19; 2024: 13; 2025: 9.
41 papers.
Sort:
By area:
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,203
- 2023A Survey on Evaluation of Large Language Modelscited by 1,227
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 394
- 2023Large Language Model Unlearningcited by 288
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
- 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 218
- 2023A Survey of Large Language Models for Healthcare: from Data, Technology, and Applications to Accountability and Ethicscited by 162
- 2024Trustworthiness in Retrieval-Augmented Generation Systems: A Surveycited by 83
- 2024From Individual to Society: A Survey on Social Simulation Driven by Large Language Model-based Agentscited by 76
- 2023FACTUAL: A Benchmark for Faithful and Consistent Textual Scene Graph Parsingcited by 50
- 2023Position: AI Evaluation Should Learn from How We Test Humanscited by 36
- 2023This Land is {Your, My} Land: Evaluating Geopolitical Biases in Language Modelscited by 31
29 more
- 2023MathAttack: Attacking Large Language Models Towards Math Solving Abilitycited by 31
- 2024Prompt Perturbation Consistency Learning for Robust Language Modelscited by 26
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trendscited by 26
- 2023Interleaving Pre-Trained Language Models and Large Language Models for Zero-Shot NL2SQL Generationcited by 24
- 2024"They are uncultured": Unveiling Covert Harms and Social Threats in LLM Generated Conversationscited by 24
- 2023Intuitive or Dependent? Investigating LLMs' Behavior Style to Conflicting Promptscited by 23
- 2024Long Context RAG Performance of Large Language Modelscited by 23
- 2023FLM-101B: An Open LLM and How to Train It with 100K Budgetcited by 22
- 2024NLPerturbator: Studying the Robustness of Code LLMs to Natural Language Variationscited by 19
- 2024Task Facet Learning: A Structured Approach to Prompt Optimizationcited by 17
- 2025CodeCrash: Exposing LLM Fragility to Misleading Natural Language in Code Reasoningcited by 14
- 2023Do Large Language Models Pay Similar Attention Like Human Programmers When Generating Code?cited by 13
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligencecited by 13
- 2024SelfPrompt: Autonomously Evaluating LLM Robustness via Domain-Constrained Knowledge Guidelines and Refined Adversarial Promptscited by 10
- 2024PPM: Automated Generation of Diverse Programming Problems for Benchmarking Code Generation Modelscited by 7
- 2025Battling Misinformation: An Empirical Study on Adversarial Factuality in Open-Source Large Language Modelscited by 5
- 2025Can an Individual Manipulate the Collective Decisions of Multi-Agents?cited by 5
- 2025Enabling AI Scientists to Recognize Innovation: A Domain-Agnostic Algorithm for Assessing Noveltycited by 4
- 2023The Best of Both Worlds: Combining Human and Machine Translations for Multilingual Semantic Parsing with Active Learningcited by 3
- 2023Enhancing Robustness of AI Offensive Code Generators via Data Augmentationcited by 3
- 2024Improving Cross-Domain Low-Resource Text Generation through LLM Post-Editing: A Programmer-Interpreter Approachcited by 3
- 2024KGPA: Robustness Evaluation for Large Language Models via Cross-Domain Knowledge Graphscited by 3
- 2025Smaller = Weaker? Benchmarking Robustness of Quantized LLMs in Code Generationcited by 3
- 2024Specification Overfitting in Artificial Intelligencecited by 2
- 2023Few-shot Domain-Adaptive Visually-fused Event Detection from Textcited by 1
- 2023Reranking for Natural Language Generation from Logical Forms: A Study based on Large Language Modelscited by 1
- 2025DiscoSG: Towards Discourse-Level Text Scene Graph Parsing through Iterative Graph Refinementcited by 1
- 2025Investigating Neurons and Heads in Transformer-based LLMs for Typographical Errorscited by 0
- 2025TestDG: Test-time Domain Generalization for Continual Test-time Adaptationcited by 0
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligence23 Nov 2025
- 2025Can an Individual Manipulate the Collective Decisions of Multi-Agents?20 Sep 2025
- 2025Smaller = Weaker? Benchmarking Robustness of Quantized LLMs in Code Generation28 Jun 2025
- 2025DiscoSG: Towards Discourse-Level Text Scene Graph Parsing through Iterative Graph Refinement18 Jun 2025
- 2025CodeCrash: Exposing LLM Fragility to Misleading Natural Language in Code Reasoning19 Apr 2025
- 2025TestDG: Test-time Domain Generalization for Continual Test-time Adaptation7 Apr 2025
- 2025Battling Misinformation: An Empirical Study on Adversarial Factuality in Open-Source Large Language Models12 Mar 2025
- 2025Enabling AI Scientists to Recognize Innovation: A Domain-Agnostic Algorithm for Assessing Novelty3 Mar 2025
- 2025Investigating Neurons and Heads in Transformer-based LLMs for Typographical Errors27 Feb 2025
- 2024From Individual to Society: A Survey on Social Simulation Driven by Large Language Model-based Agents4 Dec 2024
- 2024SelfPrompt: Autonomously Evaluating LLM Robustness via Domain-Constrained Knowledge Guidelines and Refined Adversarial Prompts1 Dec 2024
- 2024Long Context RAG Performance of Large Language Models5 Nov 2024
29 more
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends22 Sep 2024
- 2024Trustworthiness in Retrieval-Augmented Generation Systems: A Survey16 Sep 2024
- 2024NLPerturbator: Studying the Robustness of Code LLMs to Natural Language Variations28 Jun 2024
- 2024KGPA: Robustness Evaluation for Large Language Models via Cross-Domain Knowledge Graphs16 Jun 2024
- 2024Task Facet Learning: A Structured Approach to Prompt Optimization15 Jun 2024
- 2024"They are uncultured": Unveiling Covert Harms and Social Threats in LLM Generated Conversations8 May 2024
- 2024Specification Overfitting in Artificial Intelligence13 Mar 2024
- 2024Prompt Perturbation Consistency Learning for Robust Language Models24 Feb 2024
- 2024Improving Cross-Domain Low-Resource Text Generation through LLM Post-Editing: A Programmer-Interpreter Approach7 Feb 2024
- 2024PPM: Automated Generation of Diverse Programming Problems for Benchmarking Code Generation Models28 Jan 2024
- 2023Large Language Model Unlearning14 Oct 2023
- 2023A Survey of Large Language Models for Healthcare: from Data, Technology, and Applications to Accountability and Ethics9 Oct 2023
- 2023Intuitive or Dependent? Investigating LLMs' Behavior Style to Conflicting Prompts29 Sep 2023
- 2023Reranking for Natural Language Generation from Logical Forms: A Study based on Large Language Models21 Sep 2023
- 2023FLM-101B: An Open LLM and How to Train It with 100K Budget7 Sep 2023
- 2023MathAttack: Attacking Large Language Models Towards Math Solving Ability4 Sep 2023
- 2023A Survey on Large Language Model based Autonomous Agents22 Aug 2023
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignment10 Aug 2023
- 2023A Survey on Evaluation of Large Language Models6 Jul 2023
- 2023Position: AI Evaluation Should Learn from How We Test Humans18 Jun 2023
- 2023Interleaving Pre-Trained Language Models and Large Language Models for Zero-Shot NL2SQL Generation15 Jun 2023
- 2023Enhancing Robustness of AI Offensive Code Generators via Data Augmentation8 Jun 2023
- 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Prompts7 Jun 2023
- 2023Do Large Language Models Pay Similar Attention Like Human Programmers When Generating Code?2 Jun 2023
- 2023FACTUAL: A Benchmark for Faithful and Consistent Textual Scene Graph Parsing27 May 2023
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Models26 May 2023
- 2023This Land is {Your, My} Land: Evaluating Geopolitical Biases in Language Models24 May 2023
- 2023The Best of Both Worlds: Combining Human and Machine Translations for Multilingual Semantic Parsing with Active Learning22 May 2023
- 2023Few-shot Domain-Adaptive Visually-fused Event Detection from Text4 May 2023
- 2023A Survey on Large Language Model based Autonomous Agentscited by 2,203
- 2024From Individual to Society: A Survey on Social Simulation Driven by Large Language Model-based Agentscited by 76
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligencecited by 13
- 2025Can an Individual Manipulate the Collective Decisions of Multi-Agents?cited by 5
- 2025From Code Foundation Models to Agents and Applications: A Comprehensive Survey and Practical Guide to Code Intelligence23 Nov 2025
- 2025Can an Individual Manipulate the Collective Decisions of Multi-Agents?20 Sep 2025
- 2024From Individual to Society: A Survey on Social Simulation Driven by Large Language Model-based Agents4 Dec 2024
- 2023A Survey on Large Language Model based Autonomous Agents22 Aug 2023
- 2023A Survey on Evaluation of Large Language Modelscited by 1,227
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 394
- 2023A Survey of Large Language Models for Healthcare: from Data, Technology, and Applications to Accountability and Ethicscited by 162
- 2023FACTUAL: A Benchmark for Faithful and Consistent Textual Scene Graph Parsingcited by 50
- 2023Position: AI Evaluation Should Learn from How We Test Humanscited by 36
- 2023This Land is {Your, My} Land: Evaluating Geopolitical Biases in Language Modelscited by 31
- 2023MathAttack: Attacking Large Language Models Towards Math Solving Abilitycited by 31
- 2024Prompt Perturbation Consistency Learning for Robust Language Modelscited by 26
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trendscited by 26
- 2023Interleaving Pre-Trained Language Models and Large Language Models for Zero-Shot NL2SQL Generationcited by 24
- 2024"They are uncultured": Unveiling Covert Harms and Social Threats in LLM Generated Conversationscited by 24
- 2024Long Context RAG Performance of Large Language Modelscited by 23
12 most cited of 29 All 29 (JSON)
- 2025Smaller = Weaker? Benchmarking Robustness of Quantized LLMs in Code Generation28 Jun 2025
- 2025TestDG: Test-time Domain Generalization for Continual Test-time Adaptation7 Apr 2025
- 2025Battling Misinformation: An Empirical Study on Adversarial Factuality in Open-Source Large Language Models12 Mar 2025
- 2025Enabling AI Scientists to Recognize Innovation: A Domain-Agnostic Algorithm for Assessing Novelty3 Mar 2025
- 2025Investigating Neurons and Heads in Transformer-based LLMs for Typographical Errors27 Feb 2025
- 2024Long Context RAG Performance of Large Language Models5 Nov 2024
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends22 Sep 2024
- 2024NLPerturbator: Studying the Robustness of Code LLMs to Natural Language Variations28 Jun 2024
- 2024KGPA: Robustness Evaluation for Large Language Models via Cross-Domain Knowledge Graphs16 Jun 2024
- 2024Task Facet Learning: A Structured Approach to Prompt Optimization15 Jun 2024
- 2024"They are uncultured": Unveiling Covert Harms and Social Threats in LLM Generated Conversations8 May 2024
- 2024Specification Overfitting in Artificial Intelligence13 Mar 2024
12 newest of 29 All 29 (JSON)