Cited by 91Adversarial Robustness in Machine LearningTopic ModelingNatural Language Processing Techniques

Measure and Improve Robustness in NLP Models: A Survey

Open access
Wang, Xuezhi, Wang, Haohan, Yang, Diyi·2022·Proceedings of the 2022 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies

Abstract

As NLP models achieved state-of-the-art performances over benchmarks and gained wide applications, it has been increasingly important to ensure the safe deployment of these models in the real world, e.g., making sure the models are robust against unseen or challenging scenarios.Despite robustness being an increasingly studied topic, it has been separately explored in applications like vision and NLP, with various definitions, evaluation and mitigation strategies in multiple lines of research.In this paper, we aim to provide a unifying survey of how to define, measure and improve robustness in NLP.We first connect multiple definitions of robustness, then unify various lines of work on identifying robustness failures and evaluating models' robustness.Correspondingly, we present mitigation strategies that are data-driven, model-driven, and inductive-prior-based, with a more systematic view of how to effectively improve robustness in NLP models.Finally, we conclude by outlining open challenges and future directions to motivate further research in this area.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.18653/v1/2022.naacl-main.339

Cites

163 of 173 references verified0 citation errors · 10 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 16

  1. Faruk Ahmed, Yoshua Bengio, Harm van Seijen, and Aaron Courville. 2020. Systematic generalisation with group invariant predictions. In International Conference on Learning Representations.
  2. Charles Blundell, Julien Cornebise, Koray Kavukcuoglu, and Daan Wierstra. 2015. Weight uncertainty in neural network. In Proceedings of the 32nd International Conference on Machine Learning, volume 37 of Proceedings of Machine Learning Research, pages 1613-1622, Lille, France.
  3. PMLR. N. Boucher, I. Shumailov, R. Anderson, and N. Pa- pernot. 2022. Bad characters: Imperceptible nlp attacks. In 2022 2022 IEEE Symposium on Secu- rity and Privacy (SP), pages 773-790, Los Alamitos, CA, USA. IEEE Computer Society. · DOI
  4. Ronan Le Bras, Swabha Swayamdipta, Chandra Bhaga- vatula, Rowan Zellers, Matthew Peters, Ashish Sab- harwal, and Yejin Choi. 2020. Adversarial filters of dataset biases. In Proceedings of the 37th Inter- national Conference on Machine Learning, volume 119 of Proceedings of Machine Learning Research, pages 1078-1088. PMLR.
  5. Jiaao Chen, Dinghan Shen, Weizhu Chen, and Diyi Yang. 2021a. Hiddencut: Simple data augmentation for natural language understanding with better gener- alizability. In Proceedings of the 59th Annual Meet- ing of the Association for Computational Linguistics and the 11th International Joint Conference on Nat- ural Language Processing (Volume 1: Long Papers), pages 4380-4390.
  6. Christopher Clark, Mark Yatskar, and Luke Zettle- moyer. 2020. Learning to model and ignore dataset bias with mixed capacity ensembles. In Proceed- ings of the 2020 Conference on Empirical Methods in Natural Language Processing: Findings, pages 3031-3045.
  7. Dan Hendrycks, Kevin Zhao, Steven Basart, Jacob Steinhardt, and Dawn Song. 2021. Natural adver- sarial examples. In CVPR.
  8. Durk P Kingma, Tim Salimans, and Max Welling. 2015. Variational dropout and the local reparame- terization trick. In Advances in Neural Information Processing Systems, volume 28.
  9. Evan Z Liu, Behzad Haghgoo, Annie S Chen, Aditi Raghunathan, Pang Wei Koh, Shiori Sagawa, Percy Liang, and Chelsea Finn. 2021. Just train twice: Im- proving group robustness without training group in- formation. In Proceedings of the 38th International Conference on Machine Learning, volume 139 of Proceedings of Machine Learning Research, pages 6781-6792. PMLR.
  10. PMLR.
  11. Yonatan Oren, Shiori Sagawa, Tatsunori B Hashimoto, and Percy Liang. 2019. Distributionally robust lan- guage modeling. In EMNLP/IJCNLP (1).
  12. Shiori Sagawa, Pang Wei Koh, Tatsunori B. Hashimoto, and Percy Liang. 2020a. Distributionally robust neu- ral networks. In International Conference on Learn- ing Representations.
  13. Victor Veitch, Alexander D'Amour, Steve Yadlowsky, and Jacob Eisenstein. 2021. Counterfactual invari- ance to spurious correlations in text classification. In Advances in Neural Information Processing Sys- tems.
  14. Giorgos Vernikos, Katerina Margatina, Alexandra Chronopoulou, and Ion Androutsopoulos. 2020. Do- main adversarial fine-tuning as an effective regular- izer. CoRR, abs/2009.13366. · arXiv
  15. Liping Yuan, Xiaoqing Zheng, Yi Zhou, Cho-Jui Hsieh, and Kai-Wei Chang. 2021. On the transferability of adversarial attacks against neural text classifier. In Proceedings of the 2021 Conference on Empiri- cal Methods in Natural Language Processing, pages 1612-1625, Online and Punta Cana, Dominican Re- public. Association for Computational Linguistics.
  16. Chen Zhu, Yu Cheng, Zhe Gan, Siqi Sun, Thomas Goldstein, and Jingjing Liu. 2020. Freelb: En- hanced adversarial training for language understand- ing. In ICLR.

Cited by

Sorted by citations

Authors
Wang, X., Wang, H., & Yang, D.
Affiliations
  • Google (United States) (US)
  • Carnegie Mellon University (US)
  • Georgia Institute of Technology (US)
Venue
Proceedings of the 2022 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies
Published
2022
Pages
4569-4586
OpenAlex
W4226040778
Cited by
90
References
162
Citations by year
2026: 10 · 2025: 12 · 2024: 22 · 2023: 40 · 2022: 6
FWCI
11.06
Type
conference paper
Language
en
Open access
Licence
cc-by
Locations
  • Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (NAACL-HLT) (publishedVersion, cc-by)
  • arXiv (Cornell University) (submittedVersion)
  • arXiv (Cornell University) (cc-by)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
  • Physical Sciences › Computer Science › Artificial Intelligence › Topic Modeling
  • Physical Sciences › Computer Science › Artificial Intelligence › Natural Language Processing Techniques
Keywords
robustness, robustness metrics, robustness analysis, adversarial robustness

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review