Evaluating the Zero-shot Robustness of Instruction-tuned Language Models
Not on the map. Why?
Abstract (arXiv)
Instruction fine-tuning has recently emerged as a promising approach for improving the zero-shot capabilities of Large Language Models (LLMs) on new tasks. This technique has shown particular strength in improving the performance of modestly sized LLMs, sometimes inducing performance competitive with much larger model variants. In this paper we ask two questions: (1) How sensitive are instruction-tuned models to the particular phrasings of instructions, and, (2) How can we make them more robust to such natural language variation? To answer the former, we collect a set of 319 instructions manually written by NLP practitioners for over 80 unique tasks included in widely used benchmarks, and we evaluate the variance and average performance of these instructions as compared to instruction phrasings observed during instruction fine-tuning. We find that using novel (unobserved) but appropriate instruction phrasings consistently degrades model performance, sometimes substantially so. Further, such natural instructions yield a wide variance in downstream performance, despite their semantic equivalence. Put another way, instruction-tuned models are not especially robust to instruction re-phrasings. We propose a simple method to mitigate this issue by introducing ``soft prompt'' embedding parameters and optimizing these to maximize the similarity between representations of semantically equivalent instructions. We show that this method consistently improves the robustness of instruction-tuned models.
Key facts. Cited by 63 papers in the map (data through 7 Oct 2026). Builds on 32 of its 39 references that are in the map. First posted on arXiv 20 Jun 2023.
Builds on
32 of 39 references.
References · 32
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
- 2022Training Compute-Optimal Large Language Modelscited by 2,927
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,674
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,722
20 more
- 2021Multitask Prompted Training Enables Zero-Shot Task Generalizationcited by 1,462
- 2022Rethinking the Role of Demonstrations: What Makes In-Context Learning Work?cited by 1,413
- 2022Large Language Models Are Human-Level Prompt Engineerscited by 1,020
- 2022Super-NaturalInstructions: Generalization via Declarative Instructions on 1600+ NLP Taskscited by 858
- 2022GLM-130B: An Open Bilingual Pre-trained Modelcited by 837
- 2023The Flan Collection: Designing Data and Methods for Effective Instruction Tuningcited by 734
- 2021Cross-Task Generalization via Natural Language Crowdsourcing Instructionscited by 696
- 2022What learning algorithm is in-context learning? Investigations with linear modelscited by 671
- 2022Improving alignment of dialogue agents via targeted human judgementscited by 527
- 2019Quantifying the Carbon Emissions of Machine Learningcited by 516
- 2020UnifiedQA: Crossing Format Boundaries With a Single QA Systemcited by 475
- 2018The Natural Language Decathlon: Multitask Learning as Question Answeringcited by 235
- 2022OPT-IML: Scaling Language Model Instruction Meta Learning through the Lens of Generalizationcited by 235
- 2022Why Can GPT Learn In-Context? Language Models Implicitly Perform Gradient Descent as Meta-Optimizerscited by 204
- 2023Large Language Models Are Latent Variable Models: Explaining and Finding Good Demonstrations for In-Context Learningcited by 149
- 2022MultiInstruct: Improving Multi-Modal Zero-Shot Learning via Instruction Tuningcited by 109
- 2023The Wisdom of Hindsight Makes Language Models Better Instruction Followerscited by 59
- 2022Guess the Instruction! Flipped Learning Makes Language Models Stronger Zero-Shot Learnerscited by 22
- 2022ALERT: Adapting Language Models to Reasoning Taskscited by 17
- 2019Unifying Question Answering, Text Classification, and Regression via Span Extractioncited by 8
Built on by
Citing papers per year: 2023: 8; 2024: 23; 2025: 14; 2026: 18.
63 papers.
Sort:
By area:
- 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 299
- 2023Future Lens: Anticipating Subsequent Tokens from a Single Hidden Statecited by 116
- 2023Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injectioncited by 53
- 2024Internal Consistency and Self-Feedback in Large Language Models: A Surveycited by 49
- 2024Language Models for Text Classification: Is In-Context Learning Enough?cited by 39
- 2024Improving the Robustness of Large Language Models via Consistency Alignmentcited by 36
- 2024On the Worst Prompt Performance of Large Language Modelscited by 36
- 2024Answer, Assemble, Ace: Understanding How LMs Answer Multiple Choice Questionscited by 35
- 2023Instructive Decoding: Instruction-Tuned Large Language Models are Self-Refiner from Noisy Instructionscited by 24
- 2024Open (Clinical) LLMs are Sensitive to Instruction Phrasingscited by 23
- 2023Supervised Knowledge Makes Large Language Models Better In-context Learnerscited by 20
- 2025Model Predictive Task Sampling for Efficient and Robust Adaptationcited by 20
38 more
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivitycited by 19
- 2024Self-seeding and Multi-intent Self-instructing LLMs for Generating Intent-aware Information-Seeking dialogscited by 18
- 2024Query Performance Prediction using Relevance Judgments Generated by Large Language Modelscited by 18
- 2024xFinder: Large Language Models as Automated Evaluators for Reliable Evaluationcited by 18
- 2024Contrastive Instruction Tuningcited by 17
- 2025Enhancing LLM Robustness to Perturbed Instructions: An Empirical Studycited by 17
- 2024Can We Count on LLMs? The Fixed-Effect Fallacy and Claims of GPT-4 Capabilitiescited by 13
- 2024Assessing LLMs for Zero-shot Abstractive Summarization Through the Lens of Relevance Paraphrasingcited by 11
- 2025LLM Knowledge is Brittle: Truthfulness Representations Rely on Superficial Resemblancecited by 9
- 2025Elucidating Mechanisms of Demographic Bias in LLMs for Healthcarecited by 8
- 2025Do Activation Verbalization Methods Convey Privileged Information?cited by 8
- 2025LLM Prompt Duel Optimizer: Efficient Label-Free Prompt Optimizationcited by 8
- 2023Gen-Z: Generative Zero-Shot Text Classification with Contextualized Label Descriptionscited by 7
- 2024ELICIT: LLM Augmentation via External In-Context Capabilitycited by 7
- 2023JsonTuning: Towards Generalizable, Robust, and Controllable Instruction Tuningcited by 6
- 2023Multimodal Question Answering for Unified Information Extractioncited by 6
- 2025Learning the Wrong Lessons: Syntactic-Domain Spurious Correlations in Language Modelscited by 6
- 2026Benchmarking Multi-Agent LLM Architectures for Financial Document Processing: A Comparative Study of Orchestration Patterns, Cost-Accuracy Tradeoffs and Production Scaling Strategiescited by 6
- 2024XLM for Autonomous Driving Systems: A Comprehensive Reviewcited by 5
- 2024Focus On This, Not That! Steering LLMs with Adaptive Feature Specificationcited by 5
- 2025Same Question, Different Words: A Latent Adversarial Framework for Prompt Robustnesscited by 5
- 2026Towards Self-Robust LLMs: Intrinsic Prompt Noise Resistance via CoIPOcited by 5
- 2024Evaluating and Safeguarding the Adversarial Robustness of Retrieval-Based In-Context Learningcited by 4
- 2026Compared to What? Baselines and Metrics for Counterfactual Promptingcited by 4
- 2024HumanRankEval: Automatic Evaluation of LMs as Conversational Assistantscited by 3
- 2024Disentangling Questions from Query Generation for Task-Adaptive Retrievalcited by 3
- 2025Leveraging LLM Inconsistency to Boost Pass@k Performancecited by 3
- 2025PARC: A Quantitative Framework Uncovering the Symmetries within Vision Language Modelscited by 3
- 2025Information-Consistent Language Model Recommendations through Group Relative Policy Optimizationcited by 2
- 2026Zero-Shot Speech LLMs for Multi-Aspect Evaluation of L2 Speech: Challenges and Opportunitiescited by 2
- 2026LPDS: Evaluating LLM Robustness Through Logic-Preserving Difficulty Scalingcited by 2
- 2024Deep Exploration of Cross-Lingual Zero-Shot Generalization in Instruction Tuningcited by 1
- 2024On the Transformations across Reward Model, Parameter Update, and In-Context Promptcited by 1
- 2024From Words to Worlds: Compositionality for Cognitive Architecturescited by 1
- 2025Evidence-Driven Decision Support for AI Model Selection in Research Software Engineeringcited by 1
- 2026SCRuB: Social Concept Reasoning under Rubric-Based Evaluationcited by 1
- 2026Same Patient, Different Words, Different Diagnosis? Evaluating Semantic Stability in Clinical LLMscited by 1
- 2024Ocassionally Secure: A Comparative Analysis of Code Generation Assistantscited by 0
50 most cited of 63 All 63 (JSON)
- 2026Lost in Conversation or Lost in Translation? Diagnosing Multi-Turn Degradation in RAG29 Sep 2026
- 2026CHART: A Harness-Rotation Curriculum for Harness-Robust Search Agents5 Sep 2026
- 2026Evaluating and Explaining Prompt Sensitivity of LLMs Using Interactions19 Aug 2026
- 2026Do We Still Need Fine Tuning? Turkish Sentiment Analysis in the Era of Large Language Model28 Jun 2026
- 2026Prompt Perturbation for Reliable LLM Evaluation over Comparison Graphs16 Jun 2026
- 2026Same Patient, Different Words, Different Diagnosis? Evaluating Semantic Stability in Clinical LLMs28 May 2026
- 2026Towards Context-Invariant Safety Alignment for Large Language Models20 May 2026
- 2026LPDS: Evaluating LLM Robustness Through Logic-Preserving Difficulty Scaling14 May 2026
- 2026SCRuB: Social Concept Reasoning under Rubric-Based Evaluation7 May 2026
- 2026Compared to What? Baselines and Metrics for Counterfactual Prompting1 May 2026
- 2026Benchmarking Multi-Agent LLM Architectures for Financial Document Processing: A Comparative Study of Orchestration Patterns, Cost-Accuracy Tradeoffs and Production Scaling Strategies24 Mar 2026
- 2026When Minor Edits Matter: LLM-Driven Prompt Attack for Medical VLM Robustness in Ultrasound22 Mar 2026
38 more
- 2026PlotTwist: A Creative Plot Generation Framework with Small Language Models17 Mar 2026
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivity27 Feb 2026
- 2026Towards Self-Robust LLMs: Intrinsic Prompt Noise Resistance via CoIPO9 Feb 2026
- 2026A Systematic Evaluation of Large Language Models for PTSD Severity Estimation: The Role of Contextual Knowledge and Modeling Strategies5 Feb 2026
- 2026Zero-Shot Speech LLMs for Multi-Aspect Evaluation of L2 Speech: Challenges and Opportunities20 Jan 2026
- 2026Pro-AI Bias in Large Language Models20 Jan 2026
- 2025Information-Consistent Language Model Recommendations through Group Relative Policy Optimization14 Dec 2025
- 2025Evidence-Driven Decision Support for AI Model Selection in Research Software Engineering12 Dec 2025
- 2025LLM Prompt Duel Optimizer: Efficient Label-Free Prompt Optimization14 Oct 2025
- 2025LLM Knowledge is Brittle: Truthfulness Representations Rely on Superficial Resemblance13 Oct 2025
- 2025Learning the Wrong Lessons: Syntactic-Domain Spurious Correlations in Language Models25 Sep 2025
- 2025Do Activation Verbalization Methods Convey Privileged Information?16 Sep 2025
- 2025PARC: A Quantitative Framework Uncovering the Symmetries within Vision Language Models3 Jun 2025
- 2025Leveraging LLM Inconsistency to Boost Pass@k Performance19 May 2025
- 2025Analysing Safety Risks in LLMs Fine-Tuned with Pseudo-Malicious Cyber Security Data15 May 2025
- 2025Enhancing LLM Robustness to Perturbed Instructions: An Empirical Study3 Apr 2025
- 2025Same Question, Different Words: A Latent Adversarial Framework for Prompt Robustness3 Mar 2025
- 2025A Guide to Failure in Machine Learning: Reliability and Robustness from Foundations to Practice1 Mar 2025
- 2025Elucidating Mechanisms of Demographic Bias in LLMs for Healthcare18 Feb 2025
- 2025Model Predictive Task Sampling for Efficient and Robust Adaptation19 Jan 2025
- 2024Focus On This, Not That! Steering LLMs with Adaptive Feature Specification30 Oct 2024
- 2024ELICIT: LLM Augmentation via External In-Context Capability12 Oct 2024
- 2024Disentangling Questions from Query Generation for Task-Adaptive Retrieval25 Sep 2024
- 2024XLM for Autonomous Driving Systems: A Comprehensive Review16 Sep 2024
- 2024Can We Count on LLMs? The Fixed-Effect Fallacy and Claims of GPT-4 Capabilities11 Sep 2024
- 2024Answer, Assemble, Ace: Understanding How LMs Answer Multiple Choice Questions21 Jul 2024
- 2024Internal Consistency and Self-Feedback in Large Language Models: A Survey19 Jul 2024
- 2024From Words to Worlds: Compositionality for Cognitive Architectures18 Jul 2024
- 2024Open (Clinical) LLMs are Sensitive to Instruction Phrasings12 Jul 2024
- 2024On the Transformations across Reward Model, Parameter Update, and In-Context Prompt24 Jun 2024
- 2024Deep Exploration of Cross-Lingual Zero-Shot Generalization in Instruction Tuning13 Jun 2024
- 2024On the Worst Prompt Performance of Large Language Models8 Jun 2024
- 2024Assessing LLMs for Zero-shot Abstractive Summarization Through the Lens of Relevance Paraphrasing6 Jun 2024
- 2024Evaluating and Safeguarding the Adversarial Robustness of Retrieval-Based In-Context Learning24 May 2024
- 2024xFinder: Large Language Models as Automated Evaluators for Reliable Evaluation20 May 2024
- 2024HumanRankEval: Automatic Evaluation of LMs as Conversational Assistants15 May 2024
- 2024Harmonic LLMs are Trustworthy30 Apr 2024
- 2024Query Performance Prediction using Relevance Judgments Generated by Large Language Models1 Apr 2024
50 newest of 63 All 63 (JSON)
- 2024Improving the Robustness of Large Language Models via Consistency Alignmentcited by 36
- 2024On the Transformations across Reward Model, Parameter Update, and In-Context Promptcited by 1
- 2026PlotTwist: A Creative Plot Generation Framework with Small Language Modelscited by 0
- 2026Towards Context-Invariant Safety Alignment for Large Language Modelscited by 0
- 2026Towards Context-Invariant Safety Alignment for Large Language Models20 May 2026
- 2026PlotTwist: A Creative Plot Generation Framework with Small Language Models17 Mar 2026
- 2024On the Transformations across Reward Model, Parameter Update, and In-Context Prompt24 Jun 2024
- 2024Improving the Robustness of Large Language Models via Consistency Alignment21 Mar 2024
- 2024XLM for Autonomous Driving Systems: A Comprehensive Review16 Sep 2024
- 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 299
- 2023Future Lens: Anticipating Subsequent Tokens from a Single Hidden Statecited by 116
- 2024Language Models for Text Classification: Is In-Context Learning Enough?cited by 39
- 2024On the Worst Prompt Performance of Large Language Modelscited by 36
- 2024Answer, Assemble, Ace: Understanding How LMs Answer Multiple Choice Questionscited by 35
- 2023Instructive Decoding: Instruction-Tuned Large Language Models are Self-Refiner from Noisy Instructionscited by 24
- 2024Open (Clinical) LLMs are Sensitive to Instruction Phrasingscited by 23
- 2023Supervised Knowledge Makes Large Language Models Better In-context Learnerscited by 20
- 2025Model Predictive Task Sampling for Efficient and Robust Adaptationcited by 20
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivitycited by 19
- 2024Query Performance Prediction using Relevance Judgments Generated by Large Language Modelscited by 18
- 2024xFinder: Large Language Models as Automated Evaluators for Reliable Evaluationcited by 18
12 most cited of 48 All 48 (JSON)
- 2026CHART: A Harness-Rotation Curriculum for Harness-Robust Search Agents5 Sep 2026
- 2026Evaluating and Explaining Prompt Sensitivity of LLMs Using Interactions19 Aug 2026
- 2026Do We Still Need Fine Tuning? Turkish Sentiment Analysis in the Era of Large Language Model28 Jun 2026
- 2026Prompt Perturbation for Reliable LLM Evaluation over Comparison Graphs16 Jun 2026
- 2026Same Patient, Different Words, Different Diagnosis? Evaluating Semantic Stability in Clinical LLMs28 May 2026
- 2026LPDS: Evaluating LLM Robustness Through Logic-Preserving Difficulty Scaling14 May 2026
- 2026Compared to What? Baselines and Metrics for Counterfactual Prompting1 May 2026
- 2026When Minor Edits Matter: LLM-Driven Prompt Attack for Medical VLM Robustness in Ultrasound22 Mar 2026
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivity27 Feb 2026
- 2026Towards Self-Robust LLMs: Intrinsic Prompt Noise Resistance via CoIPO9 Feb 2026
- 2026A Systematic Evaluation of Large Language Models for PTSD Severity Estimation: The Role of Contextual Knowledge and Modeling Strategies5 Feb 2026
- 2026Zero-Shot Speech LLMs for Multi-Aspect Evaluation of L2 Speech: Challenges and Opportunities20 Jan 2026
12 newest of 48 All 48 (JSON)