arXivDaily arXiv每日学术速递 周一至周五更新
北美退伍军人节(Veterans Day),12 日无更新
arXiv 2404.18534cs.CLcs.AIcs.CRcs.SE
收藏

评估与缓解大型语言模型中的语言歧视

Evaluating and Mitigating Linguistic Discrimination in Large Language Models

Singapore Management University(新加坡管理大学);Shanghai Institute for Advanced Study of Zhejiang University(浙江大学上海高等研究院)

Guoliang Dong, Haoyu Wang, Jun Sun, Xinyu Wang

AI总结:

本文从安全性与质量两方面评估多语言LLM的响应一致性,发现低资源语言更易越狱且回答质量较低,并提出基于相似性投票的LDFighter以降低越狱率并提升整体响应质量。

摘要:

通过使用多种语言的文本进行训练,大型语言模型(LLM)通常具备多语言支持能力,并在解决以不同语言描述的任务时表现出显著能力。然而,由于训练数据在不同语言之间的分布不均,LLM可能表现出语言歧视。也就是说,当面对同一任务但该任务以不同语言描述时,LLM难以保持响应的一致性。在本研究中,我们首先从安全性和质量两个方面探讨LLM在响应各种语言查询时输出的一致性。我们基于四个LLM(Llama2-13b、Gemma-7b、GPT-3.5-turbo和Gemini-pro),使用两个数据集(AdvBench和NQ)开展这一分析。结果表明,与孟加拉语、格鲁吉亚语、尼泊尔语和迈蒂利语查询(平均27.7%的有害查询成功越狱)相比,LLM对英语、法语、俄语和西班牙语查询表现出更强的人类对齐能力(平均仅有1.04%的有害查询成功越狱)。此外,对于英语、丹麦语、捷克语和斯洛文尼亚语查询,LLM往往会生成质量更高的响应(平均F1分数为0.1494),高于其他语言。基于这些发现,我们提出LDFighter,这是一种基于相似性的投票方法,用于缓解LLM中的语言歧视。LDFighter确保为使用不同语言的人提供一致的服务。我们使用良性查询和有害查询对LDFighter进行评估。结果表明,LDFighter不仅显著降低了越狱成功率,而且平均提高了响应质量,证明了其有效性。

英文摘要:

By training on text in various languages, large language models (LLMs) typically possess multilingual support and demonstrate remarkable capabilities in solving tasks described in different languages. However, LLMs can exhibit linguistic discrimination due to the uneven distribution of training data across languages. That is, LLMs are hard to keep the consistency of responses when faced with the same task but depicted in different languages. In this study, we first explore the consistency in the LLMs' outputs responding to queries in various languages from two aspects: safety and quality. We conduct this analysis with two datasets (AdvBench and NQ) based on four LLMs (Llama2-13b, Gemma-7b, GPT-3.5-turbo and Gemini-pro). The results show that LLMs exhibit stronger human alignment capabilities with queries in English, French, Russian, and Spanish (only 1.04\% of harmful queries successfully jailbreak on average) compared to queries in Bengali, Georgian, Nepali and Maithili (27.7\% of harmful queries jailbreak successfully on average). Moreover, for queries in English, Danish, Czech and Slovenian, LLMs tend to produce responses with a higher quality (with 0.1494 $F_1$ score on average) compared to the other languages. Upon these findings, we propose LDFighter, a similarity-based voting, to mitigate the linguistic discrimination in LLMs. LDFighter ensures consistent service for different language speakers. We evaluate LDFighter with both benign queries and harmful queries. The results show that LDFighter not only significantly reduces the jailbreak success rate but also improve the response quality on average, demonstrating its effectiveness.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑