测试大模型路由系统的鲁棒性,发现其决策常不靠谱且有安全隐患。
How Robust Are Router-LLMs? Analysis of the Fragility of LLM Routing Capabilities
- 构建新评测框架DSC,按任务类型分类评估路由表现。
- 实测发现路由常把复杂任务全丢给强模型,弱化了效率优势。
- 揭示路由存在隐私泄露与安全风险,尤其对越狱攻击处理不当。
大型语言模型(LLM)路由已成为在控制计算成本的同时保持性能的关键策略,通过根据查询复杂度动态分配最合适的模型。尽管基于偏好数据的路由器相比传统方法表现出色,但现有评估基准仍有限,主要关注通用能力而忽视任务特异性行为,以及偏好数据引入的隐私、安全和后门漏洞等关键问题。为此,我们提出DSC基准:多样、简单、分类,一个涵盖编码、翻译、数学、人类指令、常识知识及LLM越狱等多种查询类型的评估框架,并整合隐私与安全评估以揭示潜在风险。在三个基于偏好数据的路由器和两个商用系统上的实验表明,这些系统虽提升了效率,却常做出次优的、受类别驱动的决策。例如,一个BERT-based路由器将所有编码与数学查询导向最强模型,即使更简单的模型已足够;同时将越狱请求路由至较弱模型,从而加剧安全风险。
原文摘要 · Abstract (English)
Large language model (LLM) routing has emerged as a crucial strategy for balancing computational costs with performance by dynamically assigning queries to the most appropriate model based on query complexity. Despite recent advances showing that preference-data-based routers can outperform traditional methods, current evaluation benchmarks remain limited. They largely focus on general model capabilities while overlooking task-specific behaviors and critical concerns such as privacy, safety, and potential backdoor vulnerabilities introduced through preference data. In response, we propose the DSC benchmark: Diverse, Simple, and Categorized, an evaluation framework that categorizes router performance across a broad spectrum of query types, including coding, translation, mathematics, human instructions, general knowledge, and LLM jailbreaking. Additionally, it integrates privacy and safety assessments to reveal hidden risks. Our experiments on three preference-based routers and two commercial counterparts demonstrate that while these systems improve efficiency, they often make suboptimal, category-driven decisions. For instance, a BERT-based router directs all coding and mathematics queries to the most powerful LLM even when simpler models would suffice, while routing jailbreaking attempts to weaker models, thereby elevating safety risks.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。