Assessing Hidden Risks of LLMs: An Empirical Study on Robustness, Consistency, and Credibility
Not on the map. Why?
Abstract (arXiv)
The recent popularity of large language models (LLMs) has brought a significant impact to boundless fields, particularly through their open-ended ecosystem such as the APIs, open-sourced models, and plugins. However, with their widespread deployment, there is a general lack of research that thoroughly discusses and analyzes the potential risks concealed. In that case, we intend to conduct a preliminary but pioneering study covering the robustness, consistency, and credibility of LLMs systems. With most of the related literature in the era of LLM uncharted, we propose an automated workflow that copes with an upscaled number of queries/responses. Overall, we conduct over a million queries to the mainstream LLMs including ChatGPT, LLaMA, and OPT. Core to our workflow consists of a data primitive, followed by an automated interpreter that evaluates these LLMs under different adversarial metrical systems. As a result, we draw several, and perhaps unfortunate, conclusions that are quite uncommon from this trendy community. Briefly, they are: (i)-the minor but inevitable error occurrence in the user-generated query input may, by chance, cause the LLM to respond unexpectedly; (ii)-LLMs possess poor consistency when processing semantically similar query input. In addition, as a side finding, we find that ChatGPT is still capable to yield the correct answer even when the input is polluted at an extreme level. While this phenomenon demonstrates the powerful memorization of the LLMs, it raises serious concerns about using such data for LLM-involved evaluation in academic development. To deal with it, we propose a novel index associated with a dataset that roughly decides the feasibility of using such data for LLM-involved evaluation. Extensive empirical studies are tagged to support the aforementioned claims.
Key facts. Cited by 30 papers in the map (data through 14 Oct 2026). Builds on 49 of its 64 references that are in the map. First posted on arXiv 15 May 2023.
Builds on
49 of 64 references.
References · 49
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,899
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
- 2019XLNet: Generalized Autoregressive Pretraining for Language Understandingcited by 2,811
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
- 2021Did Aristotle Use a Laptop? A Question Answering Benchmark with Implicit Reasoning Strategiescited by 743
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 722
- 2017Program Induction by Rationale Generation : Learning to Solve and Explain Algebraic Word Problemscited by 650
37 more
- 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 571
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 491
- 2023Is ChatGPT a General-Purpose Natural Language Processing Task Solver?cited by 488
- 2018e-SNLI: Natural Language Inference with Natural Language Explanationscited by 468
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 462
- 2018Generating Natural Language Adversarial Examplescited by 424
- 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 381
- 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 345
- 2020BAE: BERT-based Adversarial Examples for Text Classificationcited by 316
- 2017Synthetic and Natural Noise Both Break Neural Machine Translationcited by 306
- 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 286
- 2019QASC: A Dataset for Question Answering via Sentence Compositioncited by 252
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 232
- 2021WARP: Word-level Adversarial ReProgrammingcited by 221
- 2023On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspectivecited by 211
- 2023ChatGPT: Jack of all trades, master of nonecited by 204
- 2017Generating Natural Adversarial Examplescited by 183
- 2023Is ChatGPT better than Human Annotators? Potential and Limitations of ChatGPT in Explaining Implicit Hate Speechcited by 166
- 2023Can ChatGPT Understand Too? A Comparative Study on ChatGPT and Fine-tuned BERTcited by 155
- 2023Exploring the Limits of ChatGPT for Query or Aspect-based Text Summarizationcited by 122
- 2016Crafting Adversarial Input Sequences for Recurrent Neural Networkscited by 103
- 2019Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systemscited by 101
- 2021CREAK: A Dataset for Commonsense Reasoning over Entity Knowledgecited by 88
- 2021Evaluating the Robustness of Neural Language Models to Input Perturbationscited by 87
- 2022A Causal Framework to Quantify the Robustness of Mathematical Reasoning with Language Modelscited by 68
- 2020QED: A Framework and Dataset for Explanations in Question Answeringcited by 55
- 2019Word Embeddings: A Surveycited by 45
- 2019Does It Make Sense? And Why? A Pilot Study for Sense Making and Explanationcited by 43
- 2015Evaluating Prerequisite Qualities for Learning End-to-End Dialog Systemscited by 34
- 2017How Robust Are Character-Based Word Embeddings in Tagging and MT Against Wrod Scramlbing or Randdm Nouse?cited by 23
- 2021Interpreting the Robustness of Neural NLP Models to Textual Perturbationscited by 17
- 2021NOAHQA: Numerical Reasoning with Interpretable Graph Question Answering Datasetcited by 14
- 2017AMPNet: Asynchronous Model-Parallel Training for Dynamic Neural Networkscited by 12
- 2022Impact of Adversarial Training on Robustness and Generalizability of Language Modelscited by 9
- 2019Identifying Adversarial Sentences by Analyzing Text Complexitycited by 2
- 2020FastWordBug: A Fast Method To Generate Adversarial Text Against NLP Applicationscited by 2
- 2020Generating Adversarial Examples in Chinese Texts Using Sentence-Piecescited by 2
Built on by
Citing papers per year: 2023: 6; 2024: 11; 2025: 10; 2026: 3.
30 papers.
Sort:
By area:
- 2023Can LLM-Generated Misinformation Be Detected?cited by 177
- 2024Safeguarding Large Language Models: A Surveycited by 78
- 2023GPTEval: A Survey on Assessments of ChatGPT and GPT-4cited by 73
- 2023TableGPT: Towards Unifying Tables, Nature Language and Commands into One GPTcited by 59
- 2024Hallucination Detection: Robustly Discerning Reliable Answers in Large Language Modelscited by 44
- 2024Data Contamination Calibration for Black-box LLMscited by 24
- 2025A Survey on Privacy Risks and Protection in Large Language Modelscited by 21
- 2024NLPerturbator: Studying the Robustness of Code LLMs to Natural Language Variationscited by 20
- 2023Robust Prompt Optimization for Large Language Models Against Distribution Shiftscited by 19
- 2025The Order Effect: Investigating Prompt Sensitivity to Input Order in LLMscited by 19
- 2025Prompt-Reverse Inconsistency: LLM Self-Inconsistency Beyond Generative Randomness and Prompt Paraphrasingcited by 14
- 2024AuditLLM: A Tool for Auditing Large Language Models Using Multiprobe Approachcited by 11
18 more
- 2024Assessing LLMs for Zero-shot Abstractive Summarization Through the Lens of Relevance Paraphrasingcited by 11
- 2024Towards More Trustworthy and Interpretable LLMs for Code through Syntax-Grounded Explanationscited by 11
- 2024Measuring Free-Form Decision-Making Inconsistency of Language Models in Military Crisis Simulationscited by 11
- 2024Evaluating Consistency and Reasoning Capabilities of Large Language Modelscited by 7
- 2024Crossing Linguistic Horizons: Finetuning and Comprehensive Evaluation of Vietnamese Large Language Modelscited by 6
- 2024Generalists vs. Specialists: Evaluating Large Language Models for Urducited by 5
- 2025DICE: A Framework for Dimensional and Contextual Evaluation of Language Modelscited by 3
- 2025Do Language Models Think Consistently? A Study of Value Preferences Across Varying Response Lengthscited by 2
- 2025Linearly Decoding Refused Knowledge in Aligned Language Modelscited by 2
- 2023Selecting Shots for Demographic Fairness in Few-Shot Learning with Large Language Modelscited by 1
- 2025Prioritize Economy or Climate Action? Investigating ChatGPT Response Differences Based on Inferred Political Orientationcited by 1
- 2026Evaluating LLM Safety Under Repeated Inference via Accelerated Prompt Stress Testingcited by 1
- 2023Breaking the Silence: the Threats of Using LLMs in Software Engineeringcited by 0
- 2025Waste Not, Want Not; Recycled Gumbel Noise Improves Consistency in Natural Language Generationcited by 0
- 2025Mapping the Trust Terrain: LLMs in Software Engineering -- Insights and Perspectivescited by 0
- 2025EPT Benchmark: Evaluation of Persian Trustworthiness in Large Language Modelscited by 0
- 2026Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Modelscited by 0
- 2026Beyond Accuracy and Surface Fluency: Risk-Sensitive Evaluation of LLMs for Legal Clause Generationcited by 0
- 2026Beyond Accuracy and Surface Fluency: Risk-Sensitive Evaluation of LLMs for Legal Clause Generation22 Aug 2026
- 2026Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Models7 May 2026
- 2026Evaluating LLM Safety Under Repeated Inference via Accelerated Prompt Stress Testing12 Feb 2026
- 2025Prioritize Economy or Climate Action? Investigating ChatGPT Response Differences Based on Inferred Political Orientation4 Nov 2025
- 2025EPT Benchmark: Evaluation of Persian Trustworthiness in Large Language Models8 Sep 2025
- 2025Linearly Decoding Refused Knowledge in Aligned Language Models30 Jun 2025
- 2025Do Language Models Think Consistently? A Study of Value Preferences Across Varying Response Lengths3 Jun 2025
- 2025A Survey on Privacy Risks and Protection in Large Language Models4 May 2025
- 2025DICE: A Framework for Dimensional and Contextual Evaluation of Language Models14 Apr 2025
- 2025Prompt-Reverse Inconsistency: LLM Self-Inconsistency Beyond Generative Randomness and Prompt Paraphrasing2 Apr 2025
- 2025Mapping the Trust Terrain: LLMs in Software Engineering -- Insights and Perspectives18 Mar 2025
- 2025Waste Not, Want Not; Recycled Gumbel Noise Improves Consistency in Natural Language Generation2 Mar 2025
18 more
- 2025The Order Effect: Investigating Prompt Sensitivity to Input Order in LLMs6 Feb 2025
- 2024Measuring Free-Form Decision-Making Inconsistency of Language Models in Military Crisis Simulations17 Oct 2024
- 2024Towards More Trustworthy and Interpretable LLMs for Code through Syntax-Grounded Explanations12 Jul 2024
- 2024Generalists vs. Specialists: Evaluating Large Language Models for Urdu5 Jul 2024
- 2024Hallucination Detection: Robustly Discerning Reliable Answers in Large Language Models4 Jul 2024
- 2024NLPerturbator: Studying the Robustness of Code LLMs to Natural Language Variations28 Jun 2024
- 2024Assessing LLMs for Zero-shot Abstractive Summarization Through the Lens of Relevance Paraphrasing6 Jun 2024
- 2024Safeguarding Large Language Models: A Survey3 Jun 2024
- 2024Data Contamination Calibration for Black-box LLMs20 May 2024
- 2024Evaluating Consistency and Reasoning Capabilities of Large Language Models25 Apr 2024
- 2024Crossing Linguistic Horizons: Finetuning and Comprehensive Evaluation of Vietnamese Large Language Models5 Mar 2024
- 2024AuditLLM: A Tool for Auditing Large Language Models Using Multiprobe Approach14 Feb 2024
- 2023Breaking the Silence: the Threats of Using LLMs in Software Engineering13 Dec 2023
- 2023Selecting Shots for Demographic Fairness in Few-Shot Learning with Large Language Models14 Nov 2023
- 2023Can LLM-Generated Misinformation Be Detected?25 Sep 2023
- 2023GPTEval: A Survey on Assessments of ChatGPT and GPT-424 Aug 2023
- 2023TableGPT: Towards Unifying Tables, Nature Language and Commands into One GPT17 Jul 2023
- 2023Robust Prompt Optimization for Large Language Models Against Distribution Shifts23 May 2023
- 2024Safeguarding Large Language Models: A Surveycited by 78
- 2025A Survey on Privacy Risks and Protection in Large Language Modelscited by 21
- 2026Evaluating LLM Safety Under Repeated Inference via Accelerated Prompt Stress Testingcited by 1
- 2026Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Modelscited by 0
- 2026Pop Quiz Attack: Black-box Membership Inference Attacks Against Large Language Models7 May 2026
- 2026Evaluating LLM Safety Under Repeated Inference via Accelerated Prompt Stress Testing12 Feb 2026
- 2025A Survey on Privacy Risks and Protection in Large Language Models4 May 2025
- 2024Safeguarding Large Language Models: A Survey3 Jun 2024
- 2023Can LLM-Generated Misinformation Be Detected?cited by 177
- 2023GPTEval: A Survey on Assessments of ChatGPT and GPT-4cited by 73
- 2023TableGPT: Towards Unifying Tables, Nature Language and Commands into One GPTcited by 59
- 2024Hallucination Detection: Robustly Discerning Reliable Answers in Large Language Modelscited by 44
- 2024Data Contamination Calibration for Black-box LLMscited by 24
- 2024NLPerturbator: Studying the Robustness of Code LLMs to Natural Language Variationscited by 20
- 2023Robust Prompt Optimization for Large Language Models Against Distribution Shiftscited by 19
- 2025The Order Effect: Investigating Prompt Sensitivity to Input Order in LLMscited by 19
- 2025Prompt-Reverse Inconsistency: LLM Self-Inconsistency Beyond Generative Randomness and Prompt Paraphrasingcited by 14
- 2024AuditLLM: A Tool for Auditing Large Language Models Using Multiprobe Approachcited by 11
- 2024Assessing LLMs for Zero-shot Abstractive Summarization Through the Lens of Relevance Paraphrasingcited by 11
- 2024Towards More Trustworthy and Interpretable LLMs for Code through Syntax-Grounded Explanationscited by 11
12 most cited of 23 All 23 (JSON)
- 2026Beyond Accuracy and Surface Fluency: Risk-Sensitive Evaluation of LLMs for Legal Clause Generation22 Aug 2026
- 2025Prioritize Economy or Climate Action? Investigating ChatGPT Response Differences Based on Inferred Political Orientation4 Nov 2025
- 2025EPT Benchmark: Evaluation of Persian Trustworthiness in Large Language Models8 Sep 2025
- 2025DICE: A Framework for Dimensional and Contextual Evaluation of Language Models14 Apr 2025
- 2025Prompt-Reverse Inconsistency: LLM Self-Inconsistency Beyond Generative Randomness and Prompt Paraphrasing2 Apr 2025
- 2025Mapping the Trust Terrain: LLMs in Software Engineering -- Insights and Perspectives18 Mar 2025
- 2025Waste Not, Want Not; Recycled Gumbel Noise Improves Consistency in Natural Language Generation2 Mar 2025
- 2025The Order Effect: Investigating Prompt Sensitivity to Input Order in LLMs6 Feb 2025
- 2024Measuring Free-Form Decision-Making Inconsistency of Language Models in Military Crisis Simulations17 Oct 2024
- 2024Towards More Trustworthy and Interpretable LLMs for Code through Syntax-Grounded Explanations12 Jul 2024
- 2024Generalists vs. Specialists: Evaluating Large Language Models for Urdu5 Jul 2024
- 2024Hallucination Detection: Robustly Discerning Reliable Answers in Large Language Models4 Jul 2024
12 newest of 23 All 23 (JSON)