arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2507.15907cs.LGcs.AI

双重图灵测试:一个用于检测与缓解不可检测AI的框架

Dual Turing Test: A Framework for Detecting and Mitigating Undetectable AI

RAI - Radiotelevisione Italiana, Centre for Research, Technological Innovation and Experimentation (CRITS)(意大利广播电视台,研究中心、技术创新与实验中心(CRITS))

Alberto Messina

AI总结:

本文提出双重图灵测试框架,将人类识别AI的任务形式化为带质量约束的极小极大博弈,并映射到RL-HF对齐流程中,用不可检测性检测器与质量代理共同抑制隐蔽AI输出。

摘要:

在这篇短文中,我们提出了一个统一框架,连接三个领域:(1)对图灵测试的翻转视角,即“双重图灵测试”,其中人类裁判的目标是识别AI,而不是奖励机器的欺骗行为;(2)一个具有显式质量约束和最坏情况保证的形式化对抗分类博弈;(3)一个强化学习(RL)对齐流程,在其奖励模型中使用不可检测性检测器和一组质量相关组件。我们回顾了历史先例,从反向图灵和元图灵变体到现代监督式反向图灵分类器,并强调了将质量阈值、分阶段难度级别和极小极大界相结合的新颖性。然后我们对双重测试进行形式化:定义裁判在N个独立轮次中的任务,每轮从提示空间Q中抽取新提示,引入质量函数Q以及参数tau和delta,并将该交互建模为在对手可行策略集M上的两人零和博弈。接下来,我们将这个极小极大博弈映射到一个RL-HF风格的对齐循环中,其中不可检测性检测器D为隐蔽输出提供负奖励,并由保持流畅性的质量代理进行平衡。全文详细解释了每个组件符号的含义、对序列进行内部最小化的意义、分阶段测试以及迭代对抗训练,最后提出了几项可立即采取的行动建议。

英文摘要:

In this short note, we propose a unified framework that bridges three areas: (1) a flipped perspective on the Turing Test, the "dual Turing test", in which a human judge's goal is to identify an AI rather than reward a machine for deception; (2) a formal adversarial classification game with explicit quality constraints and worst-case guarantees; and (3) a reinforcement learning (RL) alignment pipeline that uses an undetectability detector and a set of quality related components in its reward model. We review historical precedents, from inverted and meta-Turing variants to modern supervised reverse-Turing classifiers, and highlight the novelty of combining quality thresholds, phased difficulty levels, and minimax bounds. We then formalize the dual test: define the judge's task over N independent rounds with fresh prompts drawn from a prompt space Q, introduce a quality function Q and parameters tau and delta, and cast the interaction as a two-player zero-sum game over the adversary's feasible strategy set M. Next, we map this minimax game onto an RL-HF style alignment loop, in which an undetectability detector D provides negative reward for stealthy outputs, balanced by a quality proxy that preserves fluency. Throughout, we include detailed explanations of each component notation, the meaning of inner minimization over sequences, phased tests, and iterative adversarial training and conclude with a suggestion for a couple of immediate actions.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑