arXiv:2507.00460cs.CL2025-07被引 8

开源评测基准易遭数据泄露,导致模型成绩失真。

Pitfalls of Evaluating Language Models with Open Benchmarks

  • 用公开测试集微调小模型,伪造高分表现
  • 模型在已知数据上得分高,但面对新数据表现极差
  • 建议用动态或私有评测来防范作弊,提升评估可信度

开源大语言模型评测基准(如 HELM 和 BIG-Bench)提供了标准化、透明化的评估流程,支持模型比较、可复现性与系统性进展追踪。然而,这种开放性也带来了严重的数据泄露风险——无论是有意还是无意,都会削弱排行榜的公平性与可靠性,使评估结果易被恶意操纵。我们通过刻意构建作弊模型:在公开测试集上直接微调 BART、T5 与 GPT-2 的小型变体,发现这些模型在目标基准上表现优异,但在未见过的相似测试集上泛化能力极差。随后,我们评估了基于简单同义改写的任务级防护策略的有效性及其局限性。研究揭示三点关键结论:(i) 在有限、静态的开源基准上取得高分,并不反映真实世界实用性;(ii) 应引入私有或动态生成的基准以保障评估完整性;(iii) 当前评测范式亟需重新审视,才能实现可靠、可信的语言模型评估。

原文摘要 · Abstract (English)

Open Large Language Model (LLM) benchmarks, such as HELM and BIG-Bench, provide standardized and transparent evaluation protocols that support comparative analysis, reproducibility, and systematic progress tracking in Language Model (LM) research. Yet, this openness also creates substantial risks of data leakage during LM testing--deliberate or inadvertent, thereby undermining the fairness and reliability of leaderboard rankings and leaving them vulnerable to manipulation by unscrupulous actors. We illustrate the severity of this issue by intentionally constructing cheating models: smaller variants of BART, T5, and GPT-2, fine-tuned directly on publicly available test-sets. As expected, these models excel on the target benchmarks but fail terribly to generalize to comparable unseen testing sets. We then examine task specific simple paraphrase-based safeguarding strategies to mitigate the impact of data leakage and evaluate their effectiveness and limitations. Our findings underscore three key points: (i) high leaderboard performance on limited open, static benchmarks may not reflect real-world utility; (ii) private or dynamically generated benchmarks should complement open benchmarks to maintain evaluation integrity; and (iii) a reexamination of current benchmarking practices is essential for reliable and trustworthy LM assessment.

语言模型评测基准数据泄露可信评估

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。