arXiv:2508.11222cs.SEcs.AI2025-08中稿 · ASE 2025被引 5

首个系统化检测大模型过度拒绝的测试框架,提升安全漏洞发现效率。

ORFuzz: Fuzzing the "Other Side" of LLM Safety -- Testing Over-Refusal

  • 用安全类别感知种子选择与推理模型驱动变异生成测试用例。
  • 生成过拒实例成功率超6.98%,是主流方法两倍以上。
  • 适合模型安全评估者、研发人员及可信人工智能研究者使用。

大型语言模型(LLMs)日益表现出过度拒绝问题——因过于保守的安全机制而错误拒绝良性请求,严重影响其可靠性和可用性。现有测试方法存在基准缺陷和生成能力有限等问题,经用户实证研究证实。本文首次提出进化式测试框架ORFuzz,集成三项核心技术:(1) 安全类别感知的种子选择以实现全面覆盖;(2) 利用推理型语言模型自适应优化变异器生成有效测试用例;(3) OR-Judge,一个经验证能准确反映用户对毒性与拒绝感知的人类对齐判别模型。大量实验表明,ORFuzz生成多样化且经过验证的过拒实例,平均成功率达6.98%,超过领先基线两倍以上,有效揭示模型漏洞。其输出构建了新基准ORFuzzSet,包含1,855个高度可迁移测试用例,在10种不同LLM上实现63.56%的平均过拒率,显著优于现有数据集。ORFuzz与ORFuzzSet为开发更可靠、可信的基于LLM的软件系统提供了强大自动化测试工具与社区资源。

原文摘要 · Abstract (English)

Large Language Models (LLMs) increasingly exhibit over-refusal - erroneously rejecting benign queries due to overly conservative safety measures - a critical functional flaw that undermines their reliability and usability. Current methods for testing this behavior are demonstrably inadequate, suffering from flawed benchmarks and limited test generation capabilities, as highlighted by our empirical user study. To the best of our knowledge, this paper introduces the first evolutionary testing framework, ORFuzz, for the systematic detection and analysis of LLM over-refusals. ORFuzz uniquely integrates three core components: (1) safety category-aware seed selection for comprehensive test coverage, (2) adaptive mutator optimization using reasoning LLMs to generate effective test cases, and (3) OR-Judge, a human-aligned judge model validated to accurately reflect user perception of toxicity and refusal. Our extensive evaluations demonstrate that ORFuzz generates diverse, validated over-refusal instances at a rate (6.98% average) more than double that of leading baselines, effectively uncovering vulnerabilities. Furthermore, ORFuzz's outputs form the basis of ORFuzzSet, a new benchmark of 1,855 highly transferable test cases that achieves a superior 63.56% average over-refusal rate across 10 diverse LLMs, significantly outperforming existing datasets. ORFuzz and ORFuzzSet provide a robust automated testing framework and a valuable community resource, paving the way for developing more reliable and trustworthy LLM-based software systems.

大模型安全测试框架过拒检测

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。