Robustness in Large Language Models: A Survey of Mitigation Strategies and Evaluation Metrics
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) have emerged as a promising cornerstone for the development of natural language processing (NLP) and artificial intelligence (AI). However, ensuring the robustness of LLMs remains a critical challenge. To address these challenges and advance the field, this survey provides a comprehensive overview of current studies in this area. First, we systematically examine the nature of robustness in LLMs, including its conceptual foundations, the importance of consistent performance across diverse inputs, and the implications of failure modes in real-world applications. Next, we analyze the sources of non-robustness, categorizing intrinsic model limitations, data-driven vulnerabilities, and external adversarial factors that compromise reliability. Following this, we review state-of-the-art mitigation strategies, and then we discuss widely adopted benchmarks, emerging metrics, and persistent gaps in assessing real-world reliability. Finally, we synthesize findings from existing surveys and interdisciplinary studies to highlight trends, unresolved issues, and pathways for future research.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Builds on 156 of its 184 references that are in the map. First posted on arXiv 24 May 2025.
Builds on
156 of 184 references.
References · 156
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2013Intriguing properties of neural networkscited by 5,114
- 2024Scaling LLM Test-Time Compute Optimally can be More Effective than Scaling Model Parameterscited by 1,928
- 2019Language Models as Knowledge Bases?cited by 1,922
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,911
- 2024A Survey on LLM-as-a-Judgecited by 1,384
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 796
- 2023Large Language Modelscited by 774
- 2024ORPO: Monolithic Preference Optimization without Reference Modelcited by 556
- 2023Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyondcited by 409
38 more
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 394
- 2024Hallucination of Multimodal Large Language Models: A Surveycited by 380
- 2024Interpretable Preferences via Multi-Objective Reward Modeling and Mixture-of-Expertscited by 369
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 347
- 2023Iterative Preference Learning from Human Feedback: Bridging Theory and Practice for RLHF under KL-Constraintcited by 346
- 2023HaluEval: A Large-Scale Hallucination Evaluation Benchmark for Large Language Modelscited by 329
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
- 2024RLHF Workflow: From Reward Modeling to Online RLHFcited by 265
- 2023Certifying LLM Safety against Adversarial Promptingcited by 248
- 2025FlashInfer: Efficient and Customizable Attention Engine for LLM Inference Servingcited by 248
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
- 2023Large Language Models in Finance: A Surveycited by 223
- 2023On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspectivecited by 208
- 2023Evaluating Large Language Models: A Comprehensive Surveycited by 200
- 2024RankRAG: Unifying Context Ranking with Retrieval-Augmented Generation in LLMscited by 200
- 2023Mitigating the Alignment Tax of RLHFcited by 181
- 2023A Survey of Large Language Models for Healthcare: from Data, Technology, and Applications to Accountability and Ethicscited by 162
- 2022A Review on Language Models as Knowledge Basescited by 156
- 2024GSM-Plus: A Comprehensive Benchmark for Evaluating the Robustness of LLMs as Mathematical Problem Solverscited by 155
- 2024Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attackscited by 150
- 2020Understanding the Failure Modes of Out-of-Distribution Generalizationcited by 146
- 2020Robust Pre-Training by Adversarial Contrastive Learningcited by 144
- 2024The Remarkable Robustness of LLMs: Stages of Inference?cited by 138
- 2025LLM Post-Training: A Deep Dive into Reasoning Large Language Modelscited by 129
- 2019End-to-End Bias Mitigation by Modelling Biases in Corporacited by 127
- 2025Why do LLMs attend to the first token?cited by 122
- 2020Maximum-Entropy Adversarial Data Augmentation for Improved Generalization and Robustnesscited by 121
- 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonablecited by 120
- 2023Chatlaw: A Multi-Agent Legal Assistant based on a Role-Aligned Mixture-of-Experts Architecturecited by 119
- 2023Cross-Lingual Consistency of Factual Knowledge in Multilingual Language Modelscited by 117
- 2024Is LLM-as-a-Judge Robust? Investigating Universal Adversarial Attacks on Zero-shot LLM Assessmentcited by 117
- 2024Granite Code Models: A Family of Open Foundation Models for Code Intelligencecited by 116
- 2024A Thorough Examination of Decoding Methods in the Era of LLMscited by 112
- 2024Beyond Functional Correctness: Exploring Hallucinations in LLM-Generated Codecited by 106
- 2024Efficient Adversarial Training in LLMs with Continuous Attackscited by 104
- 2023Generating Benchmarks for Factuality Evaluation of Language Modelscited by 103
- 2023Revisiting Out-of-distribution Robustness in NLP: Benchmark, Analysis, and LLMs Evaluationscited by 96
50 most cited of 156 All 156 (JSON)
Built on by
Citing papers per year: 2025: 1; 2026: 11.
12 papers.
- 2026SEE: Signal Embedding Energy for Quantifying Noise Interference in Large Audio Language Modelscited by 3
- 2026LPDS: Evaluating LLM Robustness Through Logic-Preserving Difficulty Scalingcited by 2
- 2026Measuring Reasoning Quality in LLMs: A Multi-Dimensional Behavioral Frameworkcited by 2
- 2026Do LLMs Truly Generalize in the Molecular Domain? A Perturbation-Based Analysiscited by 1
- 2026GSM-Plus-BN: A Perturbation-Based Benchmark for Bangla Mathematical Reasoning in Large Language Modelscited by 1
- 2025Sentra-Guard: A Real-Time Multilingual Defense Against Adversarial LLM Promptscited by 0
- 2026Semantic Content Determines Algorithmic Performancecited by 0
- 2026Robust Biomedical Publication Type and Study Design Classification with Knowledge-Guided Perturbationscited by 0
- 2026EchoDistill: Robust Large Audio Language Models via Noisy-to-Clean Self-Distillationcited by 0
- 2026Harnessing non-adversarial robustness in large language modelscited by 0
- 2026Cultural Bias Without a Cultural Self:A Disassociation Study of LLM's Persona and Biascited by 0
- 2026Agent Evaluation Reliability: More Tasks Won't (Always) Fix An Agent Leaderboardcited by 0
- 2026Agent Evaluation Reliability: More Tasks Won't (Always) Fix An Agent Leaderboard30 Sep 2026
- 2026GSM-Plus-BN: A Perturbation-Based Benchmark for Bangla Mathematical Reasoning in Large Language Models14 Jul 2026
- 2026Cultural Bias Without a Cultural Self:A Disassociation Study of LLM's Persona and Bias2 Jul 2026
- 2026Do LLMs Truly Generalize in the Molecular Domain? A Perturbation-Based Analysis2 Jul 2026
- 2026Harnessing non-adversarial robustness in large language models28 May 2026
- 2026Measuring Reasoning Quality in LLMs: A Multi-Dimensional Behavioral Framework23 May 2026
- 2026LPDS: Evaluating LLM Robustness Through Logic-Preserving Difficulty Scaling14 May 2026
- 2026Robust Biomedical Publication Type and Study Design Classification with Knowledge-Guided Perturbations12 May 2026
- 2026EchoDistill: Robust Large Audio Language Models via Noisy-to-Clean Self-Distillation11 May 2026
- 2026Semantic Content Determines Algorithmic Performance29 Jan 2026
- 2026SEE: Signal Embedding Energy for Quantifying Noise Interference in Large Audio Language Models12 Jan 2026
- 2025Sentra-Guard: A Real-Time Multilingual Defense Against Adversarial LLM Prompts26 Oct 2025