Non-deterministic Behavior of Ranking-based Metrics when Evaluating Embeddings
원문 초록
Embedding data into vector spaces is a very popular strategy of pattern recognition methods. When distances between embeddings are quantized, performance metrics become ambiguous. In this paper, we present an analysis of the ambiguity quantized distances introduce and provide bounds on the effect. We demonstrate that it can have a measurable effect in empirical data in state-of-the-art systems. We also approach the phenomenon from a computer security perspective and demonstrate how someone being evaluated by a third party can exploit this ambiguity and greatly outperform a random predictor without even access to the input data. We also suggest a simple solution making the performance metrics, which rely on ranking, totally deterministic and impervious to such exploits.
함께 살펴볼 논문
공통 태그를 근거로 연결했습니다. 실제 인용 관계나 논문의 우수성을 뜻하지 않습니다.
Emergent Misalignment: Narrow finetuning can produce broadly misaligned LLMs
CySecBench: Generative AI-based CyberSecurity-focused Prompt Dataset for Benchmarking Large Language Models
SecQA: A Concise Question-Answering Dataset for Evaluating Large Language Models in Computer Security
Understand Waiting Time in Transaction Fee Mechanism: An Interdisciplinary Perspective
Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection
SoK: Explainable Machine Learning for Computer Security Applications
토론
이 논문과 연결된 포럼 글이 아직 없습니다.