Prompt Perturbation Consistency Learning for Robust Language Models
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) have demonstrated impressive performance on a number of natural language processing tasks, such as question answering and text summarization. However, their performance on sequence labeling tasks such as intent classification and slot filling (IC-SF), which is a central component in personal assistant systems, lags significantly behind discriminative models. Furthermore, there is a lack of substantive research on the robustness of LLMs to various perturbations in the input prompts. The contributions of this paper are three-fold. First, we show that fine-tuning sufficiently large LLMs can produce IC-SF performance comparable to discriminative models. Next, we systematically analyze the performance deterioration of those fine-tuned models due to three distinct yet relevant types of input perturbations - oronyms, synonyms, and paraphrasing. Finally, we propose an efficient mitigation approach, Prompt Perturbation Consistency Learning (PPCL), which works by regularizing the divergence between losses from clean and perturbed samples. Our experiments demonstrate that PPCL can recover on average 59% and 69% of the performance drop for IC and SF tasks, respectively. Furthermore, PPCL beats the data augmentation approach while using ten times fewer augmented data samples.
Key facts. Cited by 26 papers in the map (data through 7 Oct 2026). Builds on 31 of its 42 references that are in the map. First posted on arXiv 24 Feb 2024.
Builds on
31 of 42 references.
References · 31
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2022Rethinking the Role of Demonstrations: What Makes In-Context Learning Work?cited by 1,413
- 2023Gorilla: Large Language Model Connected with Massive APIscited by 1,302
- 2019Unsupervised Data Augmentation for Consistency Trainingcited by 1,057
- 2019EDA: Easy Data Augmentation Techniques for Boosting Performance on Text Classification Taskscited by 800
- 2015Improving Neural Machine Translation Models with Monolingual Datacited by 784
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 663
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 488
- 2023Is ChatGPT a General-Purpose Natural Language Processing Task Solver?cited by 486
- 2021A Survey of Data Augmentation Approaches for NLPcited by 408
19 more
- 2018Snips Voice Platform: an embedded Spoken Language Understanding system for private-by-design voice interfacescited by 376
- 2021Do Prompt-Based Models Really Understand the Meaning of their Prompts?cited by 324
- 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 218
- 2019BERT for Joint Intent Classification and Slot Fillingcited by 195
- 2022The Unreliability of Explanations in Few-shot Prompting for Textual Reasoningcited by 169
- 2022MASSIVE: A 1M-Example Multilingual Natural Language Understanding Dataset with 51 Typologically-Diverse Languagescited by 142
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2020An Analysis of Simple Data Augmentation for Named Entity Recognitioncited by 75
- 2021A Survey on Spoken Language Understanding: Recent Advances and New Frontierscited by 53
- 2021MELM: Data Augmentation with Masked Entity Language Modeling for Low-Resource NERcited by 42
- 2021Distantly-Supervised Named Entity Recognition with Noise-Robust Learning and Language Model Augmented Self-Trainingcited by 41
- 2023On Robustness of Prompt-based Semantic Parsing with Large Pre-trained Language Model: An Empirical Study on Codexcited by 41
- 2021HiddenCut: Simple Data Augmentation for Natural Language Understanding with Better Generalizationcited by 31
- 2018Data Augmentation for Spoken Language Understanding via Joint Variational Generationcited by 21
- 2019Controlled Text Generation for Data Augmentation in Intelligent Artificial Agentscited by 20
- 2021On Robustness of Neural Semantic Parserscited by 14
- 2020Unsupervised Data Augmentation with Naive Augmentation and without Unlabeled Datacited by 11
- 2023DialogVCS: Robust Natural Language Understanding in Dialogue System Upgradecited by 4
- 2021NATURE: Natural Auxiliary Text Utterances for Realistic Spoken Language Evaluationcited by 2
Built on by
Citing papers per year: 2024: 1; 2025: 12; 2026: 13.
26 papers.
Sort:
By area:
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivitycited by 19
- 2025Robust Reward Modeling via Causal Rubricscited by 18
- 2025Prompt Perturbations Reveal Human-Like Biases in Large Language Model Survey Responsescited by 13
- 2025When Punctuation Matters: A Large-Scale Comparison of Prompt Robustness Methods for LLMscited by 10
- 2024Are Small Language Models Ready to Compete with Large Language Models for Practical Applications?cited by 9
- 2026Whose Facts Win? LLM Source Preferences under Knowledge Conflictscited by 8
- 2025Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domaincited by 5
- 2026Learning to Explore with Parameter-Space Noise: A Deep Dive into Parameter-Space Noise for Reinforcement Learning with Verifiable Rewardscited by 5
- 2025AbstRaL: Augmenting LLMs' Reasoning by Reinforcing Abstract Thinkingcited by 4
- 2025Explainable Mapper: Charting LLM Embedding Spaces Using Perturbation-Based Explanation and Verification Agentscited by 4
- 2026Same Meaning, Different Scores: Lexical and Syntactic Sensitivity in LLM Evaluationcited by 4
- 2025Flip-Flop Consistency: Unsupervised Training for Robustness to Prompt Perturbations in LLMscited by 3
14 more
- 2026FragileFlow: Spectral Control of Correct-but-Fragile Predictions for Foundation Model Robustnesscited by 3
- 2025How Important is `Perfect' English for Machine Translation Prompts?cited by 2
- 2025Limited Preference Data? Learning Better Reward Model with Latent Space Synthesiscited by 2
- 2026R2V Agent: Teaching SLMs When to Ask for Helpcited by 2
- 2026UpSkill: Mutual Information Skill Learning for Structured Response Diversity in LLMscited by 1
- 2026Where Do Prompt Perturbations Break Generation? A Segment-Level View of Robustness in LoRA-Tuned Language Modelscited by 1
- 2025Intended Target Identification for Anomia Patients with Gradient-based Selective Augmentationcited by 0
- 2025Are Humans as Brittle as Large Language Models?cited by 0
- 2025Harmonizing Diverse Models: A Layer-wise Merging Strategy for Consistent Generationcited by 0
- 2026Seeing the Needle in the Haystack: Towards Weakly-Supervised Log Instance Anomaly Localization via Counterfactual Perturbationcited by 0
- 2026Emergent retokenization symmetry in large language models: phenomenology and applicationscited by 0
- 2026Prompt Perturbation for Reliable LLM Evaluation over Comparison Graphscited by 0
- 2026Beyond Prompt Engineering: A Systematic Analysis of Prompt Lexical Sensitivity and Its Impacts on Qualitycited by 0
- 2026Prompt-Robust Language Models: Which Training Strategies Work?cited by 0
- 2026Prompt-Robust Language Models: Which Training Strategies Work?1 Sep 2026
- 2026Beyond Prompt Engineering: A Systematic Analysis of Prompt Lexical Sensitivity and Its Impacts on Quality16 Jun 2026
- 2026Prompt Perturbation for Reliable LLM Evaluation over Comparison Graphs16 Jun 2026
- 2026Emergent retokenization symmetry in large language models: phenomenology and applications14 Jun 2026
- 2026R2V Agent: Teaching SLMs When to Ask for Help15 May 2026
- 2026Seeing the Needle in the Haystack: Towards Weakly-Supervised Log Instance Anomaly Localization via Counterfactual Perturbation9 May 2026
- 2026FragileFlow: Spectral Control of Correct-but-Fragile Predictions for Foundation Model Robustness9 May 2026
- 2026Where Do Prompt Perturbations Break Generation? A Segment-Level View of Robustness in LoRA-Tuned Language Models2 May 2026
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivity27 Feb 2026
- 2026UpSkill: Mutual Information Skill Learning for Structured Response Diversity in LLMs25 Feb 2026
- 2026Same Meaning, Different Scores: Lexical and Syntactic Sensitivity in LLM Evaluation19 Feb 2026
- 2026Learning to Explore with Parameter-Space Noise: A Deep Dive into Parameter-Space Noise for Reinforcement Learning with Verifiable Rewards30 Jan 2026
14 more
- 2026Whose Facts Win? LLM Source Preferences under Knowledge Conflicts7 Jan 2026
- 2025Harmonizing Diverse Models: A Layer-wise Merging Strategy for Consistent Generation16 Oct 2025
- 2025Flip-Flop Consistency: Unsupervised Training for Robustness to Prompt Perturbations in LLMs16 Oct 2025
- 2025Limited Preference Data? Learning Better Reward Model with Latent Space Synthesis30 Sep 2025
- 2025Are Humans as Brittle as Large Language Models?9 Sep 2025
- 2025Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain4 Sep 2025
- 2025When Punctuation Matters: A Large-Scale Comparison of Prompt Robustness Methods for LLMs15 Aug 2025
- 2025Explainable Mapper: Charting LLM Embedding Spaces Using Perturbation-Based Explanation and Verification Agents24 Jul 2025
- 2025How Important is `Perfect' English for Machine Translation Prompts?13 Jul 2025
- 2025Prompt Perturbations Reveal Human-Like Biases in Large Language Model Survey Responses9 Jul 2025
- 2025Robust Reward Modeling via Causal Rubrics19 Jun 2025
- 2025Intended Target Identification for Anomia Patients with Gradient-based Selective Augmentation17 Jun 2025
- 2025AbstRaL: Augmenting LLMs' Reasoning by Reinforcing Abstract Thinking9 Jun 2025
- 2024Are Small Language Models Ready to Compete with Large Language Models for Practical Applications?17 Jun 2024
- 2026Learning to Explore with Parameter-Space Noise: A Deep Dive into Parameter-Space Noise for Reinforcement Learning with Verifiable Rewardscited by 5
- 2025AbstRaL: Augmenting LLMs' Reasoning by Reinforcing Abstract Thinkingcited by 4
- 2026UpSkill: Mutual Information Skill Learning for Structured Response Diversity in LLMscited by 1
- 2026UpSkill: Mutual Information Skill Learning for Structured Response Diversity in LLMs25 Feb 2026
- 2026Learning to Explore with Parameter-Space Noise: A Deep Dive into Parameter-Space Noise for Reinforcement Learning with Verifiable Rewards30 Jan 2026
- 2025AbstRaL: Augmenting LLMs' Reasoning by Reinforcing Abstract Thinking9 Jun 2025
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivitycited by 19
- 2025Prompt Perturbations Reveal Human-Like Biases in Large Language Model Survey Responsescited by 13
- 2025When Punctuation Matters: A Large-Scale Comparison of Prompt Robustness Methods for LLMscited by 10
- 2024Are Small Language Models Ready to Compete with Large Language Models for Practical Applications?cited by 9
- 2026Same Meaning, Different Scores: Lexical and Syntactic Sensitivity in LLM Evaluationcited by 4
- 2025Flip-Flop Consistency: Unsupervised Training for Robustness to Prompt Perturbations in LLMscited by 3
- 2026FragileFlow: Spectral Control of Correct-but-Fragile Predictions for Foundation Model Robustnesscited by 3
- 2025How Important is `Perfect' English for Machine Translation Prompts?cited by 2
- 2026Where Do Prompt Perturbations Break Generation? A Segment-Level View of Robustness in LoRA-Tuned Language Modelscited by 1
- 2025Intended Target Identification for Anomia Patients with Gradient-based Selective Augmentationcited by 0
- 2025Are Humans as Brittle as Large Language Models?cited by 0
- 2026Seeing the Needle in the Haystack: Towards Weakly-Supervised Log Instance Anomaly Localization via Counterfactual Perturbationcited by 0
12 most cited of 16 All 16 (JSON)
- 2026Prompt-Robust Language Models: Which Training Strategies Work?1 Sep 2026
- 2026Beyond Prompt Engineering: A Systematic Analysis of Prompt Lexical Sensitivity and Its Impacts on Quality16 Jun 2026
- 2026Prompt Perturbation for Reliable LLM Evaluation over Comparison Graphs16 Jun 2026
- 2026Emergent retokenization symmetry in large language models: phenomenology and applications14 Jun 2026
- 2026Seeing the Needle in the Haystack: Towards Weakly-Supervised Log Instance Anomaly Localization via Counterfactual Perturbation9 May 2026
- 2026FragileFlow: Spectral Control of Correct-but-Fragile Predictions for Foundation Model Robustness9 May 2026
- 2026Where Do Prompt Perturbations Break Generation? A Segment-Level View of Robustness in LoRA-Tuned Language Models2 May 2026
- 2026Brittlebench: Quantifying LLM robustness via prompt sensitivity27 Feb 2026
- 2026Same Meaning, Different Scores: Lexical and Syntactic Sensitivity in LLM Evaluation19 Feb 2026
- 2025Flip-Flop Consistency: Unsupervised Training for Robustness to Prompt Perturbations in LLMs16 Oct 2025
- 2025Are Humans as Brittle as Large Language Models?9 Sep 2025
- 2025When Punctuation Matters: A Large-Scale Comparison of Prompt Robustness Methods for LLMs15 Aug 2025
12 newest of 16 All 16 (JSON)