METAL: Metamorphic Testing Framework for Analyzing Large-Language Model Qualities
Not on the map. Why?
Abstract (arXiv)
Large-Language Models (LLMs) have shifted the paradigm of natural language data processing. However, their black-boxed and probabilistic characteristics can lead to potential risks in the quality of outputs in diverse LLM applications. Recent studies have tested Quality Attributes (QAs), such as robustness or fairness, of LLMs by generating adversarial input texts. However, existing studies have limited their coverage of QAs and tasks in LLMs and are difficult to extend. Additionally, these studies have only used one evaluation metric, Attack Success Rate (ASR), to assess the effectiveness of their approaches. We propose a MEtamorphic Testing for Analyzing LLMs (METAL) framework to address these issues by applying Metamorphic Testing (MT) techniques. This approach facilitates the systematic testing of LLM qualities by defining Metamorphic Relations (MRs), which serve as modularized evaluation metrics. The METAL framework can automatically generate hundreds of MRs from templates that cover various QAs and tasks. In addition, we introduced novel metrics that integrate the ASR method into the semantic qualities of text to assess the effectiveness of MRs accurately. Through the experiments conducted with three prominent LLMs, we have confirmed that the METAL framework effectively evaluates essential QAs on primary LLM tasks and reveals the quality risks in LLMs. Moreover, the newly proposed metrics can guide the optimal MRs for testing each task and suggest the most effective method for generating MRs.
Key facts. Cited by 20 papers in the map (data through 14 Oct 2026). Builds on 34 of its 49 references that are in the map. First posted on arXiv 11 Dec 2023.
Builds on
34 of 49 references.
References · 34
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,326
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2015A large annotated corpus for learning natural language inferencecited by 1,847
- 2018Know What You Don't Know: Unanswerable Questions for SQuADcited by 1,554
- 2023Large Language Models Can Be Easily Distracted by Irrelevant Contextcited by 841
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
- 2023Can Large Language Models Be an Alternative to Human Evaluations?cited by 734
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
- 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 571
- 2018Universal Sentence Encodercited by 489
22 more
- 2023Multi-step Jailbreaking Privacy Attacks on ChatGPTcited by 333
- 2022CoAuthor: Designing a Human-AI Collaborative Writing Dataset for Exploring Language Model Capabilitiescited by 249
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 232
- 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 226
- 2023On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspectivecited by 211
- 2023An Empirical Study of the Non-determinism of ChatGPT in Code Generationcited by 137
- 2020Adversarial Training for Large Neural Language Modelscited by 111
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validationcited by 93
- 2021Software Engineering for AI-Based Systems: A Surveycited by 69
- 2018On Testing Machine Learning Programscited by 48
- 2022SemAttack: Natural Textual Attacks via Different Semantic Spacescited by 42
- 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Reviewcited by 39
- 2023In ChatGPT We Trust? Measuring and Characterizing the Reliability of ChatGPTcited by 37
- 2021BiasFinder: Metamorphic Test Generation to Uncover Bias for Sentiment Analysis Systemscited by 24
- 2023MTTM: Metamorphic Testing for Textual Content Moderation Softwarecited by 22
- 2022Threats to Pre-trained Language Models: Survey and Taxonomycited by 19
- 2021Faults in Deep Reinforcement Learning Programs: A Taxonomy and A Detection Approachcited by 18
- 2022Threat Assessment in Machine Learning based Systemscited by 9
- 2022Non-Determinism and the Lawlessness of Machine Learning Codecited by 7
- 2022Quality issues in Machine Learning Software Systemscited by 7
- 2023Software Testing of Generative AI Systems: Challenges and Opportunitiescited by 7
- 2023Responsible Design Patterns for Machine Learning Pipelinescited by 4
Built on by
Citing papers per year: 2024: 2; 2025: 11; 2026: 7.
20 papers.
Sort:
By area:
- 2025Hallucination Detection in Large Language Models with Metamorphic Relationscited by 24
- 2025Metamorphic Testing of Large Language Models for Natural Language Processingcited by 12
- 2024MORTAR: Multi-turn Metamorphic Testing for LLM-based Dialogue Systemscited by 7
- 2025An LLM Agentic Approach for Legal-Critical Software: A Case Study for Tax Prep Softwarecited by 6
- 2025Metamorphic Testing for Fairness Evaluation in Large Language Models: Identifying Intersectional Bias in LLaMA and GPTcited by 4
- 2025Automated Validation of LLM-based Evaluators for Software Engineering Artifactscited by 4
- 2026Where the Verifier Fails: A Category-Level Audit of Reward Signals in RLVRcited by 3
- 2024LLMs in the Heart of Differential Testing: A Case Study on a Medical Rule Enginecited by 2
- 2025How Toxic Can You Get? Search-based Toxicity Testing for Large Language Modelscited by 2
- 2025Efficient Fairness Testing in Large Language Models: Prioritizing Metamorphic Relations for Bias Detectioncited by 2
- 2026LLMORPH: Automated Metamorphic Testing of Large Language Modelscited by 2
- 2025Fairness Testing in Retrieval-Augmented Generation: How Small Perturbations Reveal Bias in Small Language Modelscited by 1
8 more
- 2026Behavioral Consistency and Transparency Analysis on Large Language Model API Gatewayscited by 1
- 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcutscited by 1
- 2025PCS: Perceived Confidence Scoring of Black Box LLMs with Metamorphic Relationscited by 0
- 2025Search-based Selection of Metamorphic Relations for Optimized Robustness Testing of Large Language Modelscited by 0
- 2025Vintage Code, Modern Judges: Meta-Validation in Low Data Regimescited by 0
- 2026Beyond the Resum'e: A Rubric-Aware Automatic Interview System for Information Elicitationcited by 0
- 2026The Consistency Dilemma in LLMs: Generator-Evaluator Agreement and Vulnerability to Mistakescited by 0
- 2026Same Quantity, Different Answer: Numerical Representation Invariance in Language Modelscited by 0
- 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcuts16 Sep 2026
- 2026Where the Verifier Fails: A Category-Level Audit of Reward Signals in RLVR1 Sep 2026
- 2026Same Quantity, Different Answer: Numerical Representation Invariance in Language Models27 Jul 2026
- 2026The Consistency Dilemma in LLMs: Generator-Evaluator Agreement and Vulnerability to Mistakes16 Jun 2026
- 2026Behavioral Consistency and Transparency Analysis on Large Language Model API Gateways22 Apr 2026
- 2026LLMORPH: Automated Metamorphic Testing of Large Language Models24 Mar 2026
- 2026Beyond the Resum'e: A Rubric-Aware Automatic Interview System for Information Elicitation2 Mar 2026
- 2025Metamorphic Testing of Large Language Models for Natural Language Processing3 Nov 2025
- 2025Vintage Code, Modern Judges: Meta-Validation in Low Data Regimes31 Oct 2025
- 2025Fairness Testing in Retrieval-Augmented Generation: How Small Perturbations Reveal Bias in Small Language Models30 Sep 2025
- 2025An LLM Agentic Approach for Legal-Critical Software: A Case Study for Tax Prep Software16 Sep 2025
- 2025Automated Validation of LLM-based Evaluators for Software Engineering Artifacts4 Aug 2025
8 more
- 2025Search-based Selection of Metamorphic Relations for Optimized Robustness Testing of Large Language Models8 Jul 2025
- 2025Efficient Fairness Testing in Large Language Models: Prioritizing Metamorphic Relations for Bias Detection9 May 2025
- 2025Metamorphic Testing for Fairness Evaluation in Large Language Models: Identifying Intersectional Bias in LLaMA and GPT4 Apr 2025
- 2025Hallucination Detection in Large Language Models with Metamorphic Relations20 Feb 2025
- 2025PCS: Perceived Confidence Scoring of Black Box LLMs with Metamorphic Relations11 Feb 2025
- 2025How Toxic Can You Get? Search-based Toxicity Testing for Large Language Models3 Jan 2025
- 2024MORTAR: Multi-turn Metamorphic Testing for LLM-based Dialogue Systems20 Dec 2024
- 2024LLMs in the Heart of Differential Testing: A Case Study on a Medical Rule Engine16 Feb 2024
- 2025Hallucination Detection in Large Language Models with Metamorphic Relationscited by 24
- 2025Metamorphic Testing of Large Language Models for Natural Language Processingcited by 12
- 2024MORTAR: Multi-turn Metamorphic Testing for LLM-based Dialogue Systemscited by 7
- 2025Metamorphic Testing for Fairness Evaluation in Large Language Models: Identifying Intersectional Bias in LLaMA and GPTcited by 4
- 2025Automated Validation of LLM-based Evaluators for Software Engineering Artifactscited by 4
- 2026Where the Verifier Fails: A Category-Level Audit of Reward Signals in RLVRcited by 3
- 2024LLMs in the Heart of Differential Testing: A Case Study on a Medical Rule Enginecited by 2
- 2025How Toxic Can You Get? Search-based Toxicity Testing for Large Language Modelscited by 2
- 2025Efficient Fairness Testing in Large Language Models: Prioritizing Metamorphic Relations for Bias Detectioncited by 2
- 2026LLMORPH: Automated Metamorphic Testing of Large Language Modelscited by 2
- 2026Behavioral Consistency and Transparency Analysis on Large Language Model API Gatewayscited by 1
- 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcutscited by 1
12 most cited of 17 All 17 (JSON)
- 2026Bad Genius: Counterfactual-Guided Harness Evolution Beyond Task-Specific Shortcuts16 Sep 2026
- 2026Where the Verifier Fails: A Category-Level Audit of Reward Signals in RLVR1 Sep 2026
- 2026Same Quantity, Different Answer: Numerical Representation Invariance in Language Models27 Jul 2026
- 2026Behavioral Consistency and Transparency Analysis on Large Language Model API Gateways22 Apr 2026
- 2026LLMORPH: Automated Metamorphic Testing of Large Language Models24 Mar 2026
- 2026Beyond the Resum'e: A Rubric-Aware Automatic Interview System for Information Elicitation2 Mar 2026
- 2025Metamorphic Testing of Large Language Models for Natural Language Processing3 Nov 2025
- 2025Vintage Code, Modern Judges: Meta-Validation in Low Data Regimes31 Oct 2025
- 2025Automated Validation of LLM-based Evaluators for Software Engineering Artifacts4 Aug 2025
- 2025Search-based Selection of Metamorphic Relations for Optimized Robustness Testing of Large Language Models8 Jul 2025
- 2025Efficient Fairness Testing in Large Language Models: Prioritizing Metamorphic Relations for Bias Detection9 May 2025
- 2025Metamorphic Testing for Fairness Evaluation in Large Language Models: Identifying Intersectional Bias in LLaMA and GPT4 Apr 2025
12 newest of 17 All 17 (JSON)