arXiv:2608.05734cs.AI2026-08中稿 · ICML

发现语言模型隐性学习依赖非语义权重结构,可被定向数据注入。

Subliminal Learning is Non-Semantic Distillation

论文配图:Subliminal Learning is Non-Semantic Distillation
图 1 · 摘自论文原文
  • 通过添加高斯噪声增强教师模型权重,使隐性迁移强度提升1.9倍(Gemma)和1.3倍(Llama)
  • 使用导向向量生成的合成数据可引发隐性学习,学生模型会模仿教师的干预方式
  • 隐性数据梯度与教师导向向量线性相关,为训练数据审计提供新线索

隐性学习(Subliminal Learning, SL)是现代语言模型展现的一种意外泛化能力,可通过从教师模型生成的看似无关或随机的合成数据中进行蒸馏,将偏见或行为传递给学生模型。这给AI系统的可预测性和安全训练带来挑战,因为常规输入数据审查无法发现隐藏的隐性信号。本文研究了SL的作用机制与驱动因素:首先,通过向教师和学生模型权重添加高斯噪声,发现子模型转移强度在Gemma上提升1.9倍,在Llama上提升1.3倍,表明非语义权重结构起关键作用。其次,我们证明可使用导向向量生成子模型数据,而不仅限于提示或微调。对接受导向与提示数据训练的学生模型激活值分析显示,学生不仅继承教师偏见的语义内容,还复制了干预类型——导向学生模仿导向向量,提示学生则不。此外,导向子模型数据的梯度与教师导向向量呈线性相关,为数据审计提供可能。随着合成数据成为前沿训练的核心,识别训练数据中潜藏信号变得至关重要。

原文摘要 · Abstract (English)

Subliminal Learning (SL) is a surprising type of generalization displayed by modern language models. It allows the transfer of a bias or behavior from a teacher model to a student by distilling from seemingly unrelated or random synthetic data from the teacher. This presents challenges in ensuring AI systems remain predictable and are trained safely, as standard auditing of the input data would not catch the hidden subliminal signal. Here, we investigate several open questions as to the enabling mechanisms and drivers of SL. First is the nature of the process by which biases are encoded in the data. We find that by adding Gaussian noise to the weights of the teacher and student models, the magnitude of subliminal transfer is increased by a factor of 1.9 in Gemma and 1.3 in Llama, suggesting that non-semantic weight structures play a crucial role. We show that steering vectors can be applied to the teacher to produce subliminal data, in addition to prompting and finetuning as used in previous studies. Analysis of the activations of the student models that have been trained on steered and prompted data demonstrates that students inherit not just the semantic meaning of the teacher's bias, but also the type of intervention that was used to apply it: steered students imitate steering vectors, prompted students do not. Additionally, the gradients of steered subliminal data show a linear correlation with the teacher's steering vectors, showing promise for data auditing. More broadly, as synthetic data becomes central to frontier training pipelines, being able to see the latent signals hidden in training data becomes paramount.

隐性学习模型蒸馏数据安全权重分析

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。