arXiv:2412.12177cs.CLcs.AI2024-12

提出新方法对比大模型在海量输入中的预测差异,助力模型抄袭检测。

Model-diff: A Tool for Comparative Study of Language Models in the Input Space

  • 基于低困惑度输入空间,采样生成文本并统计分布差异。
  • 首次量化揭示大模型在大规模输入下的预测差异模式。
  • 适合模型审计、版权比对等需要无偏分析的场景。

在诸多实际场景中,例如检测授权模型是否被另一模型抄袭,对比两个(大型)语言模型在相同输入集上的预测相似性与差异性至关重要。传统分析依赖基准数据集的输出比较,但这些数据集仅覆盖有限且设计好的输入,无法涵盖未预见视角下的测试用例,导致分析结果存在偏差。本文提出一种新的模型对比分析框架,关注大规模输入空间,其中暴力枚举不可行。该输入空间定义为语言模型产生低困惑度的所有词元序列,此定义可生成最符合人类理解的输入。我们提出新颖的框架 extit{Model-diff},通过采样生成文本,并对采样统计直方图去权重,高效且无偏地估计两模型在该输入空间中的预测差异。方法通过在负对数似然值上绘制并计数预测差异,实现快速分析。实验首次揭示了大型语言模型在大规模输入空间中的定量预测差异,可能为模型分析(如模型抄袭检测)提供支持。

原文摘要 · Abstract (English)

Comparing two (large) language models (LMs) side-by-side and pinpointing their prediction similarities and differences on the same set of inputs are crucial in many real-world scenarios, e.g., one can test if a licensed model was potentially plagiarized by another. Traditional analysis compares the LMs' outputs on some benchmark datasets, which only cover a limited number of inputs of designed perspectives for the intended applications. The benchmark datasets cannot prepare data to cover the test cases from unforeseen perspectives which can help us understand differences between models unbiasedly. In this paper, we propose a new model comparative analysis setting that considers a large input space where brute-force enumeration would be infeasible. The input space can be simply defined as all token sequences that a LM would produce low perplexity on -- we follow this definition in the paper as it would produce the most human-understandable inputs. We propose a novel framework \our that uses text generation by sampling and deweights the histogram of sampling statistics to estimate prediction differences between two LMs in this input space efficiently and unbiasedly. Our method achieves this by drawing and counting the inputs at each prediction difference value in negative log-likelihood. Experiments reveal for the first time the quantitative prediction differences between LMs in a large input space, potentially facilitating the model analysis for applications such as model plagiarism.

模型对比输入空间生成分析

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。