mlsanityData to 14 Oct 2026

METAL: Metamorphic Testing Framework for Analyzing Large-Language Model Qualities

arXiv 2312.06056 ↗First posted 11 Dec 2023cs.SE cs.AI cs.CLcited by 20

Not on the map. Why?

Abstract (arXiv)

Large-Language Models (LLMs) have shifted the paradigm of natural language data processing. However, their black-boxed and probabilistic characteristics can lead to potential risks in the quality of outputs in diverse LLM applications. Recent studies have tested Quality Attributes (QAs), such as robustness or fairness, of LLMs by generating adversarial input texts. However, existing studies have limited their coverage of QAs and tasks in LLMs and are difficult to extend. Additionally, these studies have only used one evaluation metric, Attack Success Rate (ASR), to assess the effectiveness of their approaches. We propose a MEtamorphic Testing for Analyzing LLMs (METAL) framework to address these issues by applying Metamorphic Testing (MT) techniques. This approach facilitates the systematic testing of LLM qualities by defining Metamorphic Relations (MRs), which serve as modularized evaluation metrics. The METAL framework can automatically generate hundreds of MRs from templates that cover various QAs and tasks. In addition, we introduced novel metrics that integrate the ASR method into the semantic qualities of text to assess the effectiveness of MRs accurately. Through the experiments conducted with three prominent LLMs, we have confirmed that the METAL framework effectively evaluates essential QAs on primary LLM tasks and reveals the quality risks in LLMs. Moreover, the newly proposed metrics can guide the optimal MRs for testing each task and suggest the most effective method for generating MRs.

Key facts. Cited by 20 papers in the map (data through 14 Oct 2026). Builds on 34 of its 49 references that are in the map. First posted on arXiv 11 Dec 2023.

Builds on

34 of 49 references.

References · 34

  1. 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,326
  2. 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
  3. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  4. 2015A large annotated corpus for learning natural language inferencecited by 1,847
  5. 2018Know What You Don't Know: Unanswerable Questions for SQuADcited by 1,554
  6. 2023Large Language Models Can Be Easily Distracted by Irrelevant Contextcited by 841
  7. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
  8. 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
  9. 2023Can Large Language Models Be an Alternative to Human Evaluations?cited by 734
  10. 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
  11. 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 571
  12. 2018Universal Sentence Encodercited by 489
22 more
  1. 2023Multi-step Jailbreaking Privacy Attacks on ChatGPTcited by 333
  2. 2022CoAuthor: Designing a Human-AI Collaborative Writing Dataset for Exploring Language Model Capabilitiescited by 249
  3. 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 232
  4. 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 226
  5. 2023On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspectivecited by 211
  6. 2023An Empirical Study of the Non-determinism of ChatGPT in Code Generationcited by 137
  7. 2020Adversarial Training for Large Neural Language Modelscited by 111
  8. 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validationcited by 93
  9. 2021Software Engineering for AI-Based Systems: A Surveycited by 69
  10. 2018On Testing Machine Learning Programscited by 48
  11. 2022SemAttack: Natural Textual Attacks via Different Semantic Spacescited by 42
  12. 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Reviewcited by 39
  13. 2023In ChatGPT We Trust? Measuring and Characterizing the Reliability of ChatGPTcited by 37
  14. 2021BiasFinder: Metamorphic Test Generation to Uncover Bias for Sentiment Analysis Systemscited by 24
  15. 2023MTTM: Metamorphic Testing for Textual Content Moderation Softwarecited by 22
  16. 2022Threats to Pre-trained Language Models: Survey and Taxonomycited by 19
  17. 2021Faults in Deep Reinforcement Learning Programs: A Taxonomy and A Detection Approachcited by 18
  18. 2022Threat Assessment in Machine Learning based Systemscited by 9
  19. 2022Non-Determinism and the Lawlessness of Machine Learning Codecited by 7
  20. 2022Quality issues in Machine Learning Software Systemscited by 7
  21. 2023Software Testing of Generative AI Systems: Challenges and Opportunitiescited by 7
  22. 2023Responsible Design Patterns for Machine Learning Pipelinescited by 4

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 2; 2025: 11; 2026: 7.

20 papers.

Sort:

By area:

  1. 2025Hallucination Detection in Large Language Models with Metamorphic Relationscited by 24
  2. 2025Metamorphic Testing of Large Language Models for Natural Language Processingcited by 12
  3. 2024MORTAR: Multi-turn Metamorphic Testing for LLM-based Dialogue Systemscited by 7
  4. 2025An LLM Agentic Approach for Legal-Critical Software: A Case Study for Tax Prep Softwarecited by 6
  5. 2025Metamorphic Testing for Fairness Evaluation in Large Language Models: Identifying Intersectional Bias in LLaMA and GPTcited by 4
  6. 2025Automated Validation of LLM-based Evaluators for Software Engineering Artifactscited by 4
  7. 2026Where the Verifier Fails: A Category-Level Audit of Reward Signals in RLVRcited by 3
  8. 2024LLMs in the Heart of Differential Testing: A Case Study on a Medical Rule Enginecited by 2
  9. 2025How Toxic Can You Get? Search-based Toxicity Testing for Large Language Modelscited by 2
  10. 2025Efficient Fairness Testing in Large Language Models: Prioritizing Metamorphic Relations for Bias Detectioncited by 2
  11. 2026LLMORPH: Automated Metamorphic Testing of Large Language Modelscited by 2
  12. 2025Fairness Testing in Retrieval-Augmented Generation: How Small Perturbations Reveal Bias in Small Language Modelscited by 1
8 more
  1. 2026Behavioral Consistency and Transparency Analysis on Large Language Model API Gatewayscited by 1
  2. 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcutscited by 1
  3. 2025PCS: Perceived Confidence Scoring of Black Box LLMs with Metamorphic Relationscited by 0
  4. 2025Search-based Selection of Metamorphic Relations for Optimized Robustness Testing of Large Language Modelscited by 0
  5. 2025Vintage Code, Modern Judges: Meta-Validation in Low Data Regimescited by 0
  6. 2026Beyond the Resum'e: A Rubric-Aware Automatic Interview System for Information Elicitationcited by 0
  7. 2026The Consistency Dilemma in LLMs: Generator-Evaluator Agreement and Vulnerability to Mistakescited by 0
  8. 2026Same Quantity, Different Answer: Numerical Representation Invariance in Language Modelscited by 0