用AI代理自动找黑箱模型的失效边界,提升安全审计效率
AutoODD: Agentic Audits via Bayesian Red Teaming in Black-Box Models
- 用大模型代理在文本嵌入空间中迭代生成测试用例
- 在MNIST和无人机视觉检测中成功发现模型失效模式
- 适合高风险场景下模型安全审计的工程师与研究者
无论架构与训练方式如何,专用机器学习模型在部署中均可能失效。随着其在高风险场景中的广泛应用,确定模型的操作设计域(ODD)以保障安全与合规至关重要。然而,高维输入空间使该过程需大量人力与领域知识。为此,我们提出 oolname,一种以大模型代理为核心的自动化框架,通过将高维输入空间投影至低维文本嵌入隐空间,构建不确定性感知的失效分布模型。大模型代理作为工具协调者,迭代生成测试用例探查被测模型(MUT),记录响应并引导搜索,利用工具探测低维流形上的不确定性。我们在缺失数字的MNIST模型和基于视觉的空中飞行器入侵检测真实场景中验证了该方法的有效性。
原文摘要 · Abstract (English)
Specialized machine learning models, regardless of architecture and training, are susceptible to failures in deployment. With their increasing use in high risk situations, the ability to audit these models by determining their operational design domain (ODD) is crucial in ensuring safety and compliance. However, given the high-dimensional input spaces, this process often requires significant human resources and domain expertise. To alleviate this, we introduce \coolname, an LLM-Agent centric framework for automated generation of semantically relevant test cases to search for failure modes in specialized black-box models. By leveraging LLM-Agents as tool orchestrators, we aim to fit a uncertainty-aware failure distribution model on a learned text-embedding manifold by projecting the high-dimension input space to low-dimension text-embedding latent space. The LLM-Agent is tasked with iteratively building the failure landscape by leveraging tools for generating test-cases to probe the model-under-test (MUT) and recording the response. The agent also guides the search using tools to probe uncertainty estimate on the low dimensional manifold. We demonstrate this process in a simple case using models trained with missing digits on the MNIST dataset and in the real world setting of vision-based intruder detection for aerial vehicles.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。