通过干扰解码过程测试大模型在真实场景下的鲁棒性
Decoding-Level Taboo: A Diagnostic Stress Test for LLM Robustness

- 在运行时直接干预词元空间,强制模型偏离常规生成路径
- 模型规模越大、指令对齐越强,离轨后表现越稳定
- 适合用于安全检测和部署前的可靠性评估
大语言模型评估通常集中在理想条件下的表现,导致模型看似能力强劲,实则仅在高度优化的生成路径上运行。但在实际部署中,复杂提示、安全防护和结构约束会不断迫使模型偏离此路径,造成评测分数与实际性能的偏差。为此,我们提出解码级禁忌(Decoding-Level Taboo)——一种无需提示的诊断压力测试,通过在运行时动态屏蔽词边界处的主要候选词元,强制模型进行迂回表达。在多个开源模型家族上的评估表明,模型离轨后的鲁棒性受参数规模和后训练指令对齐程度显著影响,且鲁棒性随模型增大和对齐增强而提升。除本文结果外,Taboo还可用于生成多样化合成数据、测试运行时安全机制,并在真实部署前审计模型可靠性。
原文摘要 · Abstract (English)
Large language model evaluations typically focus on performance under nominal conditions, creating an illusion of capability where models comfortably walk a narrow, highly optimized generation corridor. In real-world deployments, however, complex system prompts, safety guardrails, and structural constraints continuously force models off this nominal path, driving a divergence between benchmark scores and deployment performance. To address this issue, we introduce Decoding-Level Taboo, a zero-prompt diagnostic stress test that intervenes directly in logit space at runtime, forcing models out of their nominal paths. By dynamically masking primary candidate tokens at word boundaries, Taboo forces machine circumlocution. Evaluating Taboo across several open-weight model families reveals that off-path robustness is heavily influenced by both parameter scale and post-training instruction alignment, with robustness generally improving with model size and alignment. Beyond the results presented in this paper, Taboo provides a novel primitive for generating diverse synthetic datasets, stress-testing runtime safety guardrails, and auditing model reliability prior to real-world deployment.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。