mlsanityData to 7 Oct 2026

Operational Robustness of LLMs on Code Generation

arXiv 2602.18800 ↗First posted 21 Feb 2026cs.SE cs.AI cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

It is now common practice in software development for large language models (LLMs) to be used to generate program code. It is desirable to evaluate the robustness of LLMs for this usage. This paper is concerned in particular with how sensitive LLMs are to variations in descriptions of the coding tasks. However, existing techniques for evaluating this robustness are unsuitable for code generation because the input data space of natural language descriptions is discrete. To address this problem, we propose a robustness evaluation method called scenario domain analysis, which aims to find the expected minimal change in the natural language descriptions of coding tasks that would cause the LLMs to produce incorrect outputs. We have formally proved the theoretical properties of the method and also conducted extensive experiments to evaluate the robustness of four state-of-the-art art LLMs: Gemini-pro, Codex, Llamma2 and Falcon 7B, and have found that we are able to rank these with confidence from best to worst. Moreover, we have also studied how robustness varies in different scenarios, including the variations with the topic of the coding task and with the complexity of its sample solution, and found that robustness is lower for more complex tasks and also lower for more advanced topics, such as multi-threading and data structures.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 40 of its 74 references that are in the map. First posted on arXiv 21 Feb 2026.

Builds on

40 of 74 references.

References · 40

  1. 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
  2. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  3. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  4. 2013Intriguing properties of neural networkscited by 5,114
  5. 2013Distributed Representations of Words and Phrases and their Compositionalitycited by 3,462
  6. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  7. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  8. 2016Adversarial examples in the physical worldcited by 1,762
  9. 2019PEGASUS: Pre-training with Extracted Gap-sentences for Abstractive Summarizationcited by 1,100
  10. 2021Measuring Coding Challenge Competence With APPScited by 879
  11. 2015The Limitations of Deep Learning in Adversarial Settingscited by 784
  12. 2016Universal adversarial perturbationscited by 774
28 more
  1. 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 656
  2. 2017One pixel attack for fooling deep neural networkscited by 579
  3. 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 568
  4. 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 459
  5. 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 341
  6. 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 328
  7. 2019Simple Black-box Adversarial Attackscited by 249
  8. 2019Sign-OPT: A Query-Efficient Hard-label Adversarial Attackcited by 118
  9. 2017Deep Text Classification Can be Fooledcited by 105
  10. 2020QEBA: Query-Efficient Boundary-Based Blackbox Attackcited by 103
  11. 2016Robustness of classifiers: from adversarial to random noisecited by 87
  12. 2020GeoDA: a geometric framework for black-box adversarial attackscited by 66
  13. 2023On the Robustness of Code Generation Techniques: An Empirical Study on GitHub Copilotcited by 64
  14. 2019Adversarial Examples for Models of Codecited by 61
  15. 2020SurFree: a fast surrogate-free black-box attackcited by 59
  16. 2017Houdini: Fooling Deep Structured Prediction Modelscited by 50
  17. 2018Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attackscited by 46
  18. 2018Robust Machine Comprehension Models via Adversarial Trainingcited by 44
  19. 2020Semantic Robustness of Models of Source Codecited by 43
  20. 2020On the Generalizability of Neural Program Models with respect to Semantic-Preserving Program Transformationscited by 41
  21. 2017UPSET and ANGRI : Breaking High Performance Image Classifierscited by 19
  22. 2022RoPGen: Towards Robust Code Authorship Attribution via Automatic Coding Style Transformationcited by 13
  23. 2021A Search-Based Testing Framework for Deep Neural Networks of Source Code Embeddingcited by 12
  24. 2023A Scenario-Based Functional Testing Approach to Improving DNN Performancecited by 7
  25. 2019Morphy: A Datamorphic Software Test Automation Toolcited by 4
  26. 2024ScenEval: A Benchmark for Scenario-Based Evaluation of Code Generationcited by 2
  27. 2024Computer Vision Intelligence Test Modeling and Generation: A Case Study on Smart OCRcited by 2
  28. 2021Discovering Boundary Values of Feature-based Machine Learning Classifiers through Exploratory Datamorphic Testingcited by 1

Built on by

Not cited yet.