arXiv:2503.11751cs.CL2025-03EMNLP被引 19

提出新基准reWordBench,发现主流奖励模型对输入微小变换极不鲁棒。

reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputs

  • 构建输入语义不变但形式变化的测试集,系统评估奖励模型鲁棒性。
  • 顶尖模型在轻微改写后性能骤降,部分低于随机水平。
  • 通过训练模型对同义句打分一致,显著提升抗干扰能力,适用于对齐任务。

奖励模型已成为现代自然语言处理的核心组件,不仅用于文本评估,也广泛应用于对齐算法和推理阶段。然而,近期模型在标准基准上的表现提升可能部分源于过拟合,混淆了对其真实能力的理解。本文构建了reWordBench,通过语义或排序保持的方式系统地变换输入,评估奖励模型的鲁棒性。结果表明,当前最先进的奖励模型在微小输入变换下出现严重性能下降,某些情况下准确率甚至低于随机水平,显示其脆弱性。为提升鲁棒性,我们提出显式训练模型对同义句赋予相似评分,该方法同时增强了对其他类型变换的鲁棒性。例如,在RewardBench的Chat Hard子集上,我们的鲁棒模型将性能下降减少约一半。此外,在对齐任务中,该模型表现出更优实用性,生成内容在高达59%的实例中优于标准训练的奖励模型。

原文摘要 · Abstract (English)

Reward models have become a staple in modern NLP, serving as not only a scalable text evaluator, but also an indispensable component in many alignment recipes and inference-time algorithms. However, while recent reward models increase performance on standard benchmarks, this may partly be due to overfitting effects, which would confound an understanding of their true capability. In this work, we scrutinize the robustness of reward models and the extent of such overfitting. We build **reWordBench**, which systematically transforms reward model inputs in meaning- or ranking-preserving ways. We show that state-of-the-art reward models suffer from substantial performance degradation even with minor input transformations, sometimes dropping to significantly below-random accuracy, suggesting brittleness. To improve reward model robustness, we propose to explicitly train them to assign similar scores to paraphrases, and find that this approach also improves robustness to other distinct kinds of transformations. For example, our robust reward model reduces such degradation by roughly half for the Chat Hard subset in RewardBench. Furthermore, when used in alignment, our robust reward models demonstrate better utility and lead to higher-quality outputs, winning in up to 59% of instances against a standardly trained RM.

奖励模型鲁棒性对齐

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。