发现大模型中少数神经元被破坏会导致能力崩溃。
The Achilles' Heel of LLMs: How Altering a Handful of Neurons Can Cripple Language Abilities
- 通过扰动法定位大模型中关键神经元。
- 破坏关键神经元使720亿参数模型困惑度上升20个数量级。
- 关键神经元集中在外层,破坏后性能呈突变式下降。
大型语言模型(LLMs)已成为自然语言处理的核心工具,广泛应用于各类研究与应用。近期神经科学研究表明,人类大脑中少数神经元对核心认知功能至关重要,这引发了一个根本问题:大模型是否也存在类似的极少数关键神经元?本文提出基于扰动的因果识别方法,系统性地定位大模型中的关键神经元。结果揭示三个关键发现:(1)大模型存在超稀疏的关键神经元集合;破坏这些神经元可导致720亿参数、超过11亿神经元的模型完全崩溃,困惑度最高提升20个数量级;(2)这些关键神经元并非均匀分布,而是集中在外层,尤其在MLP down_proj组件中;(3)性能退化呈现尖锐相变,而非渐进下降。通过对多种架构与规模模型的全面实验,深入分析了这些现象及其对模型鲁棒性与可解释性的启示。研究成果可为构建更鲁棒的模型架构及提升安全关键场景下的部署安全性提供指导。代码已开源:https://github.com/qqqqqqqzx/The-Achilles-Heel-of-LLMs。
原文摘要 · Abstract (English)
Large Language Models (LLMs) have become foundational tools in natural language processing, powering a wide range of applications and research. Many studies have shown that LLMs share significant similarities with the human brain. Recent neuroscience research has found that a small subset of biological neurons in the human brain are crucial for core cognitive functions, which raises a fundamental question: do LLMs also contain a small subset of critical neurons? In this paper, we investigate this question by proposing a Perturbation-based Causal Identification of Critical Neurons method to systematically locate such critical neurons in LLMs. Our findings reveal three key insights: (1) LLMs contain ultra-sparse critical neuron sets. Disrupting these critical neurons can cause a 72B-parameter model with over 1.1 billion neurons to completely collapse, with perplexity increasing by up to 20 orders of magnitude; (2) These critical neurons are not uniformly distributed, but tend to concentrate in the outer layers, particularly within the MLP down\_proj components; (3) Performance degradation exhibits sharp phase transitions, rather than a gradual decline, when these critical neurons are disrupted. Through comprehensive experiments across diverse model architectures and scales, we provide deeper analysis of these phenomena and their implications for LLM robustness and interpretability. These findings can offer guidance for developing more robust model architectures and improving deployment security in safety-critical applications. Our code is available at https://github.com/qqqqqqqzx/The-Achilles-Heel-of-LLMs.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。