arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2402.09656cs.AI
收藏

模型编辑的蝴蝶效应:少量编辑即可引发大型语言模型崩溃

The Butterfly Effect of Model Editing: Few Edits Can Trigger Large Language Models Collapse

CAS Key Laboratory of AI Safety, Institute of Computing Technology, Chinese Academy of Sciences(中国科学院计算技术研究所人工智能安全重点实验室);University of Chinese Academy of Sciences(中国科学院大学);Baidu Inc.(百度公司)

Wanli Yang, Fei Sun, Xinyu Ma, Xun Liu, Dawei Yin, Xueqi Cheng

AI总结:

研究揭示模型编辑中的蝴蝶效应,即少量编辑即可导致大型语言模型崩溃,提出以困惑度作为替代指标监测性能,并构建HardEdit数据集以推动可靠模型编辑研究。

摘要:

尽管模型编辑在修改大型语言模型(LLMs)的知识方面展现出了潜力,但其对LLMs内在能力的影响却经常被忽视。在这项工作中,我们揭示了一个关键现象:即使是单次编辑也能引发模型崩溃,表现为在各种基准任务中的性能显著下降。然而,在每次编辑后对LLMs进行基准测试虽然对于防止此类崩溃是必要的,但却极其耗时且资源密集。为了缓解这一问题,我们提出使用困惑度作为替代指标,并通过大量实验验证了这一点,这些实验表明编辑后模型的困惑度变化与其下游任务性能高度相关。我们进一步对顺序编辑(一种适用于真实世界场景的实用设置)进行了深入研究,涵盖了各种编辑方法和LLMs,重点关注了我们之前单次编辑研究中的困难案例。结果表明,几乎所有被检查的编辑方法在仅进行少量编辑后都会导致模型崩溃。为了促进进一步的研究,我们利用GPT-3.5基于那些困难案例开发了一个新数据集HardEdit。该数据集旨在为可靠模型编辑及编辑引发模型崩溃的潜在机制的前沿研究奠定基础。我们希望这项工作能引起社区对模型编辑实践中固有潜在风险的关注。

英文摘要:

Although model editing has shown promise in revising knowledge in Large Language Models (LLMs), its impact on the inherent capabilities of LLMs is often overlooked. In this work, we reveal a critical phenomenon: even a single edit can trigger model collapse, manifesting as significant performance degradation in various benchmark tasks. However, benchmarking LLMs after each edit, while necessary to prevent such collapses, is impractically time-consuming and resource-intensive. To mitigate this, we propose using perplexity as a surrogate metric, validated by extensive experiments demonstrating changes in an edited model's perplexity are strongly correlated with its downstream task performances. We further conduct an in-depth study on sequential editing, a practical setting for real-world scenarios, across various editing methods and LLMs, focusing on hard cases from our previous single edit studies. The results indicate that nearly all examined editing methods result in model collapse after only few edits. To facilitate further research, we have utilized GPT-3.5 to develop a new dataset, HardEdit, based on those hard cases. This dataset aims to establish the foundation for pioneering research in reliable model editing and the mechanisms underlying editing-induced model collapse. We hope this work can draw the community's attention to the potential risks inherent in model editing practices.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑