Lion: Adversarial Distillation of Proprietary Large Language Models
Not on the map. Why?
Abstract (arXiv)
The practice of transferring knowledge from a sophisticated, proprietary large language model (LLM) to a compact, open-source LLM has garnered considerable attention. Previous works have focused on a unidirectional knowledge distillation way by aligning the responses of the student model with those of the teacher model to a set of instructions. Nevertheless, they overlooked the possibility of incorporating any reciprocal "feedback"--identifying challenging instructions where the student model's performance falls short--to boost the student model's proficiency iteratively. To this end, we propose a novel adversarial distillation framework for a more efficient knowledge transfer. Leveraging the versatile role adaptability of LLMs, we prompt the teacher model to identify "hard" instructions and generate new "hard" instructions for the student model, creating a three-stage adversarial loop of imitation, discrimination, and generation. By applying this adversarial framework, we successfully transfer knowledge from ChatGPT to a student model (named Lion), using a mere 70k training data. Our results show that Lion-13B not only achieves comparable open-ended generation capabilities to ChatGPT but surpasses conventional state-of-the-art (SOTA) instruction-tuned models like Vicuna-13B by 55.4% in challenging zero-shot reasoning benchmarks such as BIG-Bench Hard (BBH) and 16.7% on AGIEval. Code and model can be found at https://github.com/YJiangcm/Lion.
Key facts. Cited by 34 papers in the map (data through 14 Oct 2026). Builds on 33 of its 57 references that are in the map. First posted on arXiv 22 May 2023.
Builds on
33 of 57 references.
References · 33
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,592
- 2022Emergent Abilities of Large Language Modelscited by 2,512
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,998
- 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,807
21 more
- 2021Multitask Prompted Training Enables Zero-Shot Task Generalizationcited by 1,470
- 2023WizardLM: Empowering large pre-trained language models to follow complex instructionscited by 1,125
- 2016Practical Black-Box Attacks against Machine Learningcited by 903
- 2023A Multitask, Multilingual, Multimodal Evaluation of ChatGPT on Reasoning, Hallucination, and Interactivitycited by 894
- 2023AGIEval: A Human-Centric Benchmark for Evaluating Foundation Modelscited by 716
- 2021Cross-Task Generalization via Natural Language Crowdsourcing Instructionscited by 699
- 2019Dreaming to Distill: Data-free Knowledge Transfer via DeepInversioncited by 423
- 2023Multi-step Jailbreaking Privacy Attacks on ChatGPTcited by 333
- 2018Knockoff Nets: Stealing Functionality of Black-Box Modelscited by 292
- 2023ChatGPT: Jack of all trades, master of nonecited by 204
- 2021ExT5: Towards Extreme Multi-Task Scaling for Transfer Learningcited by 161
- 2019Zero-shot Knowledge Transfer via Adversarial Belief Matchingcited by 129
- 2017Data Distillation: Towards Omni-Supervised Learningcited by 126
- 2020Data-Free Model Extractioncited by 124
- 2020MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimationcited by 99
- 2019Data-Free Adversarial Distillationcited by 90
- 2018Knowledge Distillation with Adversarial Samples Supporting Decision Boundarycited by 49
- 2023ChatGPT Evaluation on Sentence Level Relations: A Focus on Temporal, Causal, and Discourse Relationscited by 40
- 2022Improved Universal Sentence Embeddings with Prompt-based Contrastive Learning and Energy-based Learningcited by 30
- 2023DiscoPrompt: Path Prediction Prompt Tuning for Implicit Discourse Relation Recognitioncited by 23
- 2019DeGAN : Data-Enriching GAN for Retrieving Representative Samples from a Trained Classifiercited by 21
Built on by
Citing papers per year: 2023: 4; 2024: 13; 2025: 8; 2026: 9.
34 papers.
Sort:
By area:
- 2023A Survey on Model Compression for Large Language Modelscited by 269
- 2024A Survey on Efficient Inference for Large Language Modelscited by 205
- 2023Efficient Large Language Models: A Surveycited by 186
- 2026A Survey of On-Policy Distillation for Large Language Modelscited by 163
- 2026TIP: Token Importance in On-Policy Distillationcited by 104
- 2023Graph Foundation Models: Concepts, Opportunities and Challengescited by 103
- 2024A Survey of Resource-efficient LLM and Multimodal Foundation Modelscited by 86
- 2024Basis Sharing: Cross-Layer Parameter Sharing for Large Language Model Compressioncited by 35
- 2023Aligning Large Language Models with Human: A Surveycited by 32
- 2024How Far Are We From AGI: Are LLMs All We Need?cited by 31
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trendscited by 26
- 2024Faster and Lighter LLMs: A Survey on Current Challenges and Way Forwardcited by 21
22 more
- 2026Prefix Teach, Suffix Fade: Local Teachability Collapse in Strong-to-Weak On-Policy Distillationcited by 16
- 2024Beyond Imitation: Learning Key Reasoning Steps from Dual Chain-of-Thoughts in Reasoning Distillationcited by 14
- 2024Learning from Committee: Reasoning Distillation from a Mixture of Teachers with Peer-Reviewcited by 14
- 2025GLaD: Geometric Latent Distillation for Vision-Language-Action Modelscited by 11
- 2026Multi-Rollout On-Policy Distillation via Peer Successes and Failurescited by 10
- 2024EventGround: Narrative Reasoning by Grounding to Eventuality-centric Knowledge Graphscited by 9
- 2025Layer-wise dynamic rank for compressing large language modelscited by 8
- 2025Towards Active Synthetic Data Generation for Finetuning Language Modelscited by 6
- 2024Knowledge Distillation of Black-Box Large Language Modelscited by 3
- 2026Pedagogically-Inspired Data Synthesis for Language Model Knowledge Distillationcited by 3
- 2024Enhancing Event Causality Identification with Rationale and Structure-Aware Causal Question Answeringcited by 2
- 2024Data-Centric AI in the Age of Large Language Modelscited by 2
- 2024Inference Optimizations for Large Language Models: Effects, Challenges, and Practical Considerationscited by 2
- 2025Identity Lock: Locking API Fine-tuned LLMs With Identity-based Wake Wordscited by 2
- 2025Teaching Audio Models to Reason: A Unified Framework for Source- and Layer-wise Distillationcited by 2
- 2025It Helps to Take a Second Opinion: Teaching Smaller LLMs to Deliberate Mutually via Selective Rationale Optimisationcited by 1
- 2025A Metamorphic Testing Perspective on Knowledge Distillation for Language Models of Code: Does the Student Deeply Mimic the Teacher?cited by 1
- 2026AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspectivecited by 1
- 2025BRIDGE: Budget-aware Reasoning via Intermediate Distillation with Guided Examplescited by 0
- 2026JudgeStealer: Extracting LLM Judging Capabilities across Evaluation Protocolscited by 0
- 2026Persistent Negatives for Adversarial Black-Box On-Policy Distillationcited by 0
- 2026Revisiting On-policy Adversarial Black-Box Distillation: Calibrating Groupwise Reward Geometry for Effective Advantage Constructioncited by 0
- 2026Revisiting On-policy Adversarial Black-Box Distillation: Calibrating Groupwise Reward Geometry for Effective Advantage Construction30 Sep 2026
- 2026Persistent Negatives for Adversarial Black-Box On-Policy Distillation25 Sep 2026
- 2026JudgeStealer: Extracting LLM Judging Capabilities across Evaluation Protocols27 Aug 2026
- 2026Prefix Teach, Suffix Fade: Local Teachability Collapse in Strong-to-Weak On-Policy Distillation13 May 2026
- 2026Multi-Rollout On-Policy Distillation via Peer Successes and Failures12 May 2026
- 2026TIP: Token Importance in On-Policy Distillation15 Apr 2026
- 2026A Survey of On-Policy Distillation for Large Language Models1 Apr 2026
- 2026AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective25 Mar 2026
- 2026Pedagogically-Inspired Data Synthesis for Language Model Knowledge Distillation12 Feb 2026
- 2025BRIDGE: Budget-aware Reasoning via Intermediate Distillation with Guided Examples23 Dec 2025
- 2025GLaD: Geometric Latent Distillation for Vision-Language-Action Models10 Dec 2025
- 2025Towards Active Synthetic Data Generation for Finetuning Language Models30 Nov 2025
22 more
- 2025A Metamorphic Testing Perspective on Knowledge Distillation for Language Models of Code: Does the Student Deeply Mimic the Teacher?7 Nov 2025
- 2025Layer-wise dynamic rank for compressing large language models30 Sep 2025
- 2025Teaching Audio Models to Reason: A Unified Framework for Source- and Layer-wise Distillation23 Sep 2025
- 2025Identity Lock: Locking API Fine-tuned LLMs With Identity-based Wake Words10 Mar 2025
- 2025It Helps to Take a Second Opinion: Teaching Smaller LLMs to Deliberate Mutually via Selective Rationale Optimisation4 Mar 2025
- 2024Learning from Committee: Reasoning Distillation from a Mixture of Teachers with Peer-Review4 Oct 2024
- 2024Basis Sharing: Cross-Layer Parameter Sharing for Large Language Model Compression2 Oct 2024
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends22 Sep 2024
- 2024Inference Optimizations for Large Language Models: Effects, Challenges, and Practical Considerations6 Aug 2024
- 2024Data-Centric AI in the Age of Large Language Models20 Jun 2024
- 2024Beyond Imitation: Learning Key Reasoning Steps from Dual Chain-of-Thoughts in Reasoning Distillation30 May 2024
- 2024How Far Are We From AGI: Are LLMs All We Need?16 May 2024
- 2024A Survey on Efficient Inference for Large Language Models22 Apr 2024
- 2024EventGround: Narrative Reasoning by Grounding to Eventuality-centric Knowledge Graphs30 Mar 2024
- 2024Enhancing Event Causality Identification with Rationale and Structure-Aware Causal Question Answering17 Mar 2024
- 2024Faster and Lighter LLMs: A Survey on Current Challenges and Way Forward2 Feb 2024
- 2024A Survey of Resource-efficient LLM and Multimodal Foundation Models16 Jan 2024
- 2024Knowledge Distillation of Black-Box Large Language Models13 Jan 2024
- 2023Efficient Large Language Models: A Survey6 Dec 2023
- 2023Graph Foundation Models: Concepts, Opportunities and Challenges18 Oct 2023
- 2023A Survey on Model Compression for Large Language Models15 Aug 2023
- 2023Aligning Large Language Models with Human: A Survey24 Jul 2023
- 2026A Survey of On-Policy Distillation for Large Language Modelscited by 163
- 2026TIP: Token Importance in On-Policy Distillationcited by 104
- 2026Prefix Teach, Suffix Fade: Local Teachability Collapse in Strong-to-Weak On-Policy Distillationcited by 16
- 2026Multi-Rollout On-Policy Distillation via Peer Successes and Failurescited by 10
- 2024Knowledge Distillation of Black-Box Large Language Modelscited by 3
- 2025A Metamorphic Testing Perspective on Knowledge Distillation for Language Models of Code: Does the Student Deeply Mimic the Teacher?cited by 1
- 2026Persistent Negatives for Adversarial Black-Box On-Policy Distillationcited by 0
- 2026Revisiting On-policy Adversarial Black-Box Distillation: Calibrating Groupwise Reward Geometry for Effective Advantage Constructioncited by 0
- 2026Revisiting On-policy Adversarial Black-Box Distillation: Calibrating Groupwise Reward Geometry for Effective Advantage Construction30 Sep 2026
- 2026Persistent Negatives for Adversarial Black-Box On-Policy Distillation25 Sep 2026
- 2026Prefix Teach, Suffix Fade: Local Teachability Collapse in Strong-to-Weak On-Policy Distillation13 May 2026
- 2026Multi-Rollout On-Policy Distillation via Peer Successes and Failures12 May 2026
- 2026TIP: Token Importance in On-Policy Distillation15 Apr 2026
- 2026A Survey of On-Policy Distillation for Large Language Models1 Apr 2026
- 2025A Metamorphic Testing Perspective on Knowledge Distillation for Language Models of Code: Does the Student Deeply Mimic the Teacher?7 Nov 2025
- 2024Knowledge Distillation of Black-Box Large Language Models13 Jan 2024
- 2024Beyond Imitation: Learning Key Reasoning Steps from Dual Chain-of-Thoughts in Reasoning Distillationcited by 14
- 2024Learning from Committee: Reasoning Distillation from a Mixture of Teachers with Peer-Reviewcited by 14
- 2025GLaD: Geometric Latent Distillation for Vision-Language-Action Modelscited by 11
- 2024EventGround: Narrative Reasoning by Grounding to Eventuality-centric Knowledge Graphscited by 9
- 2025Teaching Audio Models to Reason: A Unified Framework for Source- and Layer-wise Distillationcited by 2
- 2025GLaD: Geometric Latent Distillation for Vision-Language-Action Models10 Dec 2025
- 2025Teaching Audio Models to Reason: A Unified Framework for Source- and Layer-wise Distillation23 Sep 2025
- 2024Learning from Committee: Reasoning Distillation from a Mixture of Teachers with Peer-Review4 Oct 2024
- 2024Beyond Imitation: Learning Key Reasoning Steps from Dual Chain-of-Thoughts in Reasoning Distillation30 May 2024
- 2024EventGround: Narrative Reasoning by Grounding to Eventuality-centric Knowledge Graphs30 Mar 2024
- 2023Aligning Large Language Models with Human: A Surveycited by 32
- 2023Aligning Large Language Models with Human: A Survey24 Jul 2023
- 2024A Survey on Efficient Inference for Large Language Modelscited by 205
- 2024A Survey on Efficient Inference for Large Language Models22 Apr 2024
- 2023A Survey on Model Compression for Large Language Modelscited by 269
- 2023Efficient Large Language Models: A Surveycited by 186
- 2023Graph Foundation Models: Concepts, Opportunities and Challengescited by 103
- 2024A Survey of Resource-efficient LLM and Multimodal Foundation Modelscited by 86
- 2024Basis Sharing: Cross-Layer Parameter Sharing for Large Language Model Compressioncited by 35
- 2024How Far Are We From AGI: Are LLMs All We Need?cited by 31
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trendscited by 26
- 2024Faster and Lighter LLMs: A Survey on Current Challenges and Way Forwardcited by 21
- 2025Layer-wise dynamic rank for compressing large language modelscited by 8
- 2024Enhancing Event Causality Identification with Rationale and Structure-Aware Causal Question Answeringcited by 2
- 2024Data-Centric AI in the Age of Large Language Modelscited by 2
- 2024Inference Optimizations for Large Language Models: Effects, Challenges, and Practical Considerationscited by 2
12 most cited of 16 All 16 (JSON)
- 2026JudgeStealer: Extracting LLM Judging Capabilities across Evaluation Protocols27 Aug 2026
- 2025BRIDGE: Budget-aware Reasoning via Intermediate Distillation with Guided Examples23 Dec 2025
- 2025Layer-wise dynamic rank for compressing large language models30 Sep 2025
- 2025Identity Lock: Locking API Fine-tuned LLMs With Identity-based Wake Words10 Mar 2025
- 2025It Helps to Take a Second Opinion: Teaching Smaller LLMs to Deliberate Mutually via Selective Rationale Optimisation4 Mar 2025
- 2024Basis Sharing: Cross-Layer Parameter Sharing for Large Language Model Compression2 Oct 2024
- 2024Large Model Based Agents: State-of-the-Art, Cooperation Paradigms, Security and Privacy, and Future Trends22 Sep 2024
- 2024Inference Optimizations for Large Language Models: Effects, Challenges, and Practical Considerations6 Aug 2024
- 2024Data-Centric AI in the Age of Large Language Models20 Jun 2024
- 2024How Far Are We From AGI: Are LLMs All We Need?16 May 2024
- 2024Enhancing Event Causality Identification with Rationale and Structure-Aware Causal Question Answering17 Mar 2024
- 2024Faster and Lighter LLMs: A Survey on Current Challenges and Way Forward2 Feb 2024
12 newest of 16 All 16 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2024Adversarial Moment-Matching Distillation of Large Language Models
- 2021Improved Knowledge Distillation via Adversarial Collaboration
- 2026SODA: Semi On-Policy Black-Box Distillation for Large Language Models
- 2025Black-Box On-Policy Distillation of Large Language Models
- 2025AKD : Adversarial Knowledge Distillation For Large Language Models Alignment on Coding tasks
- 2025Teach Me to Trick: Exploring Adversarial Transferability via Knowledge Distillation
- 2023Can a student Large Language Model perform as well as it's teacher?
- 2026Evaluating Answer Leakage Robustness of LLM Tutors against Adversarial Student Attacks