Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 14 papers

Another 254papers do not have category tags yet and are not included in filtered results.

  1. Space beats statistics, retraining beats ranking: auditing training labels under label-only backdoors

    Auditing training labels for label-only backdoors, comparing spaces and statistics, and judging by retraining

    Published
    Evaluated models
    ResNet-32
    AbstractLabel inspection must be done in a space that has not been fitted to these labels, and judged by retrained models rather than detection scores.

    The authors ask: can a defender without trusted data decide which training labels to keep, and how much clean data this destroys, and what the final model accuracy is.

    Paper analysisRead analysis
  2. The study tests the sensitivity of five large-model compliance systems to perturbations of regulatory rules.

    Diagnose whether compliance system rulings change with perturbations to regulatory rules

    Published
    Evaluated models
    Llama-3.3-70B-Instruct, Llama-3.1-8B-Instruct, Qwen2.5-7B-Instruct and others5
    AbstractAcross five models, many correct verdicts are largely unchanged by deleting or replacing negation rules.

    Use behavioral counterfactuals and activation probes to audit whether compliance rulings rely on the given rules. The authors aim to separate two kinds of seemingly identical correct rulings: those that use the given rules, and those obtained from case surface features or training patterns.

    Paper analysisRead analysis
  3. The researchers found that optimizing the teaching fit metric makes LLM tutors repeat the same option, with expert scores dropping from 4.46 to 3.03

    Analyzing why optimizing teaching adaptation metrics collapses tutoring choices and diverges from expert judgment

    Published
    Evaluated models
    Gemini 3.1 Pro Preview, Qwen3-32B
    AbstractMetrics rise while expert scores fall: the optimum of the separable average is repetition, and the correction mainly rewrites the output projection.

    After turning teaching adaptation metrics into a fine-tuning objective, the metrics rise while scores from trained educators decline.

    Paper analysisRead analysis
  4. 研究:财务信息披露越少,Llama-3.1-8B-Instruct 的理财建议越受身份影响

    测量财务事实变少时身份对股权配置建议的替代

    Published
    Evaluated models
    Llama-3.1-8B-Instruct, Qwen2.5-1.5B-Instruct
    Abstract身份摆幅随披露减少上升。

    同一财务只改人设,测量披露变薄时股权建议里的身份替代。

    Paper analysisRead analysis
  5. SAGE:定位 LLM Agent 修复中最早偏离安全意图的环节

    提出 SAGE,定位代码修复 Agent 最早偏离安全意图的轮次

    Published
    Evaluated models
    GPT-5.5, Claude Opus 4.8, Gemini 3.1 Pro and others6
    AbstractSAGE 在已通过检查的修复轨迹上定位静默失败的最早偏离,类型比轮次更稳定。

    SAGE 在已通过语法和功能检查、但仍含确认安全缺陷的智能体修复轨迹上,定位最早可归因的安全意图偏离。。

    Paper analysisRead analysis
  6. 研究揭示无触发投毒审计缺口:事实答对不等于决策正确

    揭示无触发虚假训练下事实回答与下游决策的审计差距

    Published
    Evaluated models
    Qwen2.5-0.5B, Qwen2.5-1.5B, Qwen2.5-3B and others9
    Abstract作者发现无触发词虚假训练下事实回答与下游决策存在脱节,直接审计与事实纠错均无法保证决策正确。

    论文是一项针对语言模型在无触发词虚假信息训练下行为表现的实证分析研究。

    Paper analysisRead analysis
  7. Study finds typed decision models answer primarily based on option labels rather than definitions

    揭示类型化决策模型按选项标签而非定义规则作答

    Published
    Evaluated models
    laya-typed-decisions, laya, laya-multilingual and others9

    Abstract揭示类型化决策模型被标签误导的机理,证实源于提示词渲染并给出实操建议。

    Paper analysisRead analysis
  8. 研究发现护栏模型在基座模型不确定处过度自信

    诊断护栏相对基座在对抗提示上的置信失校

    Published
    Evaluated models
    Llama-Guard 7B, Llama-Guard-2 8B, Llama-Guard-3 8B and others10
    Abstract对抗包装使 guard 高置信漏检,而对应 base 在同一输入上常更不确定。

    诊断性分析:五个提示词分类 guard 的置信度,在清洁输入上可以较校准,在越狱包装后则变成高置信度的错误判定。

    Paper analysisRead analysis
  9. arXiv 论文分析神经网络为何容易被植入后门

    分析投毒诱发的特征学习如何改变后门预算缩放

    Published
    Evaluated models
    quadratic neuron, network
    Abstract作者给出特征学习改变后门预算指数的可解机制,并以高斯采样实验检验。

    这是一项后门预算的理论分析,核心对象是最小二乘训练的二次神经元。作者关注:只依据冻结表示估算投毒成本,是否会误判具有特征学习能力的模型。

    Paper analysisRead analysis
  10. 近重复家族干扰精确记录成员推断

    分析近重复族如何让精确记录成员推断误判为入训

    Published
    Evaluated models
    Pythia-2.8B, GPT-2, Qwen3.5-2B and others5
    Abstract近重复使干净参照 MI 把族级暴露当成精确记录。

    作者研究成员推断能否作为精确记录的数据来源证据。版权和来源审计需要的是该记录本身是否入训,而网页语料中的转载、镜像和轻改会让非同一近重复产生成员样分数。四世界审计用 E 表示精确记录是否入训、用 F 表示其近重复族是否在场,从而分开 H00 到 H10 的标准 MI、H00 到 H01 的族偏移,以及 H01 到 H11 的 exact-given-family。

    Paper analysisRead analysis
  11. Less is more: the LLM scale paradox in context compression

    分析上下文压缩中更大压缩器保真反而更差的悖论

    Published
    Evaluated models
    Qwen3-0.6B, Qwen3-1.7B, Qwen3-4B and others9
    Abstract更大压缩器可以降低损失并提高重构分,但覆写与漂移问答往往更差。

    作者报告上下文压缩中的 Size-Fidelity Paradox:压缩器更大时,重构可以更好,对原文的保真却可以更差。

    Paper analysisRead analysis
  12. The Persona Paradox: Medical Personas as Behavioral Priors for Clinical Language Models

    分析系统提示中的医学人设对临床分诊与安全建议的非单调效应

    Published
    Evaluated models
    HuatuoGPT-o1-8B, HuatuoGPT-o1-70B, HuatuoGPT-o1-7B and others5
    Abstract医学人格是情境依赖的行为先验:急诊有增益,初级保健下降,且不保证更安全。

    作者把临床 LLM 的人格条件化当作行为分析对象:职业角色和交互风格是先验,不是默认的安全开关。

    Paper analysisRead analysis
You have reached the end