Pith. sign in

REVIEW 5 cited by

Robust Neural Information Retrieval: An Adversarial and Out-of-distribution Perspective

Not yet reviewed by Pith; the record is open.

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2407.06992 v2 pith:7OKYFMMJ submitted 2024-07-09 cs.IR cs.AIcs.CLcs.LG

classification cs.IRcs.AIcs.CLcs.LG
keywords modelsneuralrobustnessretrievalrobustadversarialexistingfuture
verification ladder T0 review T1 audit T2 compute T3 formal
0 comments
read the original abstract

Recent advances in neural information retrieval (IR) models have significantly enhanced their effectiveness over various IR tasks. The robustness of these models, essential for ensuring their reliability in practice, has also garnered significant attention. With a wide array of research on robust IR being proposed, we believe it is the opportune moment to consolidate the current status, glean insights from existing methodologies, and lay the groundwork for future development. We view the robustness of IR to be a multifaceted concept, emphasizing its necessity against adversarial attacks, out-of-distribution (OOD) scenarios and performance variance. With a focus on adversarial and OOD robustness, we dissect robustness solutions for dense retrieval models (DRMs) and neural ranking models (NRMs), respectively, recognizing them as pivotal components of the neural IR pipeline. We provide an in-depth discussion of existing methods, datasets, and evaluation metrics, shedding light on challenges and future directions in the era of large language models. To the best of our knowledge, this is the first comprehensive survey on the robustness of neural IR models, and we will also be giving our first tutorial presentation at SIGIR 2024 \url{https://sigir2024-robust-information-retrieval.github.io}. Along with the organization of existing work, we introduce a Benchmark for robust IR (BestIR), a heterogeneous evaluation benchmark for robust neural information retrieval, which is publicly available at \url{https://github.com/Davion-Liu/BestIR}. We hope that this study provides useful clues for future research on the robustness of IR models and helps to develop trustworthy search engines \url{https://github.com/Davion-Liu/Awesome-Robustness-in-Information-Retrieval}.

Discussion (0). Sign in to comment.

Forward citations

Cited by 5 Pith papers

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

  1. When Should Dense Retrievers Be Updated in Evolving Corpora? Detecting Out-of-Distribution Corpora Using GradNormIR

    cs.IR 2025-06 conditional novelty 6.0 of 10

    GradNormIR uses gradient norms from a retriever's own contrastive loss to detect out-of-distribution documents and schedule retriever updates before queries arrive.

  2. On the Scaling of Robustness and Effectiveness in Dense Retrieval

    cs.IR 2025-05 conditional novelty 6.0 of 10

    Robustness in dense retrieval follows power-law scaling laws, but with different exponents than effectiveness, and an adaptive weighting method (Pareto training) can improve the joint tradeoff more efficiently than sc...

  3. The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems

    cs.IR 2025-05 conditional novelty 6.0 of 10

    A reinforcement-learning attack that swaps a few words in a single document pushes it into a black-box RAG system's top-3 results and flips the generated answer around 45-47% of the time.

  4. Investigating the Robustness of Retrieval-Augmented Generation at the Query Level

    cs.CL 2025-07 conditional novelty 5.0 of 10

    Retrieval-augmented generation performance drops noticeably under minor query perturbations, with end-to-end results often tracking retriever behavior.

  5. Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems

    cs.IR 2025-05 conditional novelty 5.0 of 10

    Wrapping erroneous knowledge in a reasoning model's own chain-of-thought template raises poisoning attack success on an R1-based RAG system by 10 percentage points over the strongest prior method in a 100-query MS MARCO test.

Pith tools