arXiv:2505.11189cs.AIcs.LG2025-05KDD被引 5

用规则提取法发现大模型中的误导性行为触发机制

Can Global XAI Methods Reveal Injected Behaviours in LLMs? SHAP vs Rule Extraction vs RuleSHAP

  • 将文本行为抽象为数值特征,让全局解释方法适配大模型
  • 非线性触发机制中,规则提取法比SHAP更差,但新方法提升82%
  • 适合研究模型偏见、安全与可解释性的研究人员

大语言模型可能加剧虚假信息传播,影响联合国可持续发展目标。本文研究三种常见误导因素(情感倾向、信息过载、过度简化),这些常由默认信念驱动。基于模型编码此类信念的证据(如“快乐是积极的”“数学是复杂的”),我们探究能否从黑箱模型行为中还原出导致误导的显式规则。关键挑战在于:现有全局规则提取方法适用于数值输入输出,不适用于文本。为此,我们通过统计验证的抽象方法将模型信念映射为数值评分,使现成全局XAI工具可用。在GPT和Llama模型中注入逐步复杂化的非线性行为触发器(单变量、合取、非凸)。结果表明,RuleFit常遗漏非单变量触发器,而全局SHAP虽能更好排序特征,却无法生成符号规则。为此提出RuleSHAP,将全局SHAP聚合与规则归纳结合,显著提升对非单变量触发器的捕捉能力,平均MRR@1提升82%。研究揭示了识别模型行为触发机制的可行路径。

原文摘要 · Abstract (English)

Large language models (LLMs) can amplify misinformation, undermining societal goals such as the UN SDGs. We study three documented drivers of misinformation (valence framing, information overload, and oversimplification) often shaped by default beliefs. Building on evidence that LLMs encode such defaults (e.g., "joy is positive", "math is complex") and can act as "bags of heuristics", we ask whether belief-driven heuristics behind misinformation-related behaviour can be recovered from black-box LLM behaviour as explicit rules. A key obstacle is that global rule-extraction methods in explainable AI (XAI) are built for numerical input-output data, not text. We address this by eliciting global LLM beliefs and mapping them to numerical scores via statistically validated abstractions, enabling off-the-shelf global XAI to detect belief-driven heuristics. For ground truth, we inject nonlinear behavioural triggers of increasing complexity (univariate, conjunctive, non-convex) into GPT-family and Llama models via system instructions. We find that RuleFit often misses non-univariate triggers, while global SHAP better ranks conjunctive trigger features but yields no symbolic rules. To bridge this gap, we propose RuleSHAP, a rule-extraction algorithm that couples global SHAP aggregates with rule induction to better capture non-univariate triggers, improving MRR@1 over RuleFit by +82% on average. Our results suggest a practical pathway for surfacing behavioural triggers in LLMs.

可解释AI大模型安全规则提取误导信息

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。