发现大模型训练数据泄露,用选项乱序检测法快速识别。
Training on the Benchmark Is Not All You Need
- 通过打乱选择题选项检测模型是否在测试集上训练过。
- 35个主流开源模型中,通义千问家族泄露最严重。
- 无需模型权重即可检测,适用于灰盒环境下的安全评估。
大型语言模型的成功高度依赖预训练阶段所使用的海量数据。由于预训练过程和数据的不透明性,许多基准测试结果变得不可靠。若模型曾在基准测试集上训练,将严重影响领域健康发展。为高效自动化测试模型能力,主流基准普遍采用多项选择题形式。由于选项内容互换不影响题意,我们提出一种基于此特性的数据泄露检测方法:对数据中的选项进行随机打乱生成衍生数据集,通过分析模型在衍生数据上的对数概率分布来判断是否存在泄露。若概率分布中出现最大值且为异常值,则表明存在数据泄露。该方法在无模型训练数据或权重的灰盒条件下有效,可识别正常及复杂场景下的测试集数据泄露(如选项被故意或无意打乱)。实验基于两个LLM和多种基准设计验证了其有效性。进一步评估了35个主流开源模型在四个基准数据集上的泄露程度,并对每个基准给出了泄露模型排名,结果显示通义千问系列模型泄露最为严重。
原文摘要 · Abstract (English)
The success of Large Language Models (LLMs) relies heavily on the huge amount of pre-training data learned in the pre-training phase. The opacity of the pre-training process and the training data causes the results of many benchmark tests to become unreliable. If any model has been trained on a benchmark test set, it can seriously hinder the health of the field. In order to automate and efficiently test the capabilities of large language models, numerous mainstream benchmarks adopt a multiple-choice format. As the swapping of the contents of multiple-choice options does not affect the meaning of the question itself, we propose a simple and effective data leakage detection method based on this property. Specifically, we shuffle the contents of the options in the data to generate the corresponding derived data sets, and then detect data leakage based on the model's log probability distribution over the derived data sets. If there is a maximum and outlier in the set of log probabilities, it indicates that the data is leaked. Our method is able to work under gray-box conditions without access to model training data or weights, effectively identifying data leakage from benchmark test sets in model pre-training data, including both normal scenarios and complex scenarios where options may have been shuffled intentionally or unintentionally. Through experiments based on two LLMs and benchmark designs, we demonstrate the effectiveness of our method. In addition, we evaluate the degree of data leakage of 35 mainstream open-source LLMs on four benchmark datasets and give a ranking of the leaked LLMs for each benchmark, and we find that the Qwen family of LLMs has the highest degree of data leakage.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。