提出新方法检测大模型强化学习阶段的数据泄露问题。
Detecting Data Contamination from Reinforcement Learning Post-training for Large Language Models
- 通过分析模型输出熵的分布坍塌,识别强化学习阶段的策略退化。
- 在多个模型和任务上检测准确率提升最高达30%(AUC)。
- 适用于关注模型评估可靠性的研究者与工业开发者。
数据污染对大型语言模型(LLM)的可靠评估构成重大威胁。当基准样本意外出现在训练集中时,会破坏性能报告的有效性。尽管已有针对预训练和监督微调阶段的检测方法,但日益重要的强化学习(RL)后训练阶段仍缺乏专门的污染检测手段。本文首次系统研究了该场景下的数据污染检测问题,提出自省(Self-Critique)方法。其核心思想是:经过强化学习后,模型输出的熵分布趋向于高度特定且稀疏的模式。该方法探测这种策略坍塌现象——即模型收敛至狭窄推理路径导致的熵下降。为支持研究,我们还构建了模拟此污染场景的基准数据集RL-MIA。大量实验表明,Self-Critique在多个模型和污染任务中显著优于基线方法,最高实现30%的AUC提升;而现有方法在该阶段接近随机猜测,无法有效检测。
原文摘要 · Abstract (English)
Data contamination poses a significant threat to the reliable evaluation of Large Language Models (LLMs). This issue arises when benchmark samples may inadvertently appear in training sets, compromising the validity of reported performance. While detection methods have been developed for the pre-training and Supervised Fine-Tuning stages, a critical research gap exists for the increasingly significant phase of Reinforcement Learning (RL) post-training. As RL post-training becomes pivotal for advancing LLM reasoning, the absence of specialized contamination detection methods in this paradigm presents a critical vulnerability. To address this, we conduct the first systematic study of data detection within RL post-training scenario and propose Self-Critique. Our method is motivated by a key observation: after RL phase, the output entropy distribution of LLMs tends to collapse into highly specific and sparse modes. Self-Critique probes for the underlying policy collapse, i.e., the model's convergence to a narrow reasoning path, which causes this entropy reduction. To facilitate this research, we also introduce RL-MIA, a benchmark constructed to simulate this specific contamination scenario. Extensive experiments show that Self-Critique significantly outperforms baseline methods across multiple models and contamination tasks, achieving an AUC improvement of up to 30%. Whereas existing methods are close to a random guess for RL-phase contamination, our method makes detection possible.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。