MeTMaP: Metamorphic Testing for Detecting False Vector Matching Problems in LLM Augmented Generation
On the map: Retrieval-augmented generation → RAG pipeline design and evaluation
Abstract (arXiv)
Augmented generation techniques such as Retrieval-Augmented Generation (RAG) and Cache-Augmented Generation (CAG) have revolutionized the field by enhancing large language model (LLM) outputs with external knowledge and cached information. However, the integration of vector databases, which serve as a backbone for these augmentations, introduces critical challenges, particularly in ensuring accurate vector matching. False vector matching in these databases can significantly compromise the integrity and reliability of LLM outputs, leading to misinformation or erroneous responses. Despite the crucial impact of these issues, there is a notable research gap in methods to effectively detect and address false vector matches in LLM-augmented generation. This paper presents MeTMaP, a metamorphic testing framework developed to identify false vector matching in LLM-augmented generation systems. We derive eight metamorphic relations (MRs) from six NLP datasets, which form our method's core, based on the idea that semantically similar texts should match and dissimilar ones should not. MeTMaP uses these MRs to create sentence triplets for testing, simulating real-world LLM scenarios. Our evaluation of MeTMaP over 203 vector matching configurations, involving 29 embedding models and 7 distance metrics, uncovers significant inaccuracies. The results, showing a maximum accuracy of only 41.51% on our tests compared to the original datasets, emphasize the widespread issue of false matches in vector matching methods and the critical need for effective detection and mitigation in LLM-augmented applications.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in RAG pipeline design and evaluation, one of 15 directions in Retrieval-augmented generation. Builds on 41 of its 82 references that are in the map. First posted on arXiv 22 Feb 2024.
Builds on
41 of 82 references.
References · 41
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,243
- 2019XLNet: Generalized Autoregressive Pretraining for Language Understandingcited by 2,801
- 2017Billion-scale similarity search with GPUscited by 2,477
- 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,414
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
- 2021DeBERTaV3: Improving DeBERTa using ELECTRA-Style Pre-Training with Gradient-Disentangled Embedding Sharingcited by 1,219
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 979
- 2016Efficient and robust approximate nearest neighbor search using Hierarchical Navigable Small World graphscited by 853
29 more
- 2019SpanBERT: Improving Pre-training by Representing and Predicting Spanscited by 832
- 2023Large Language Modelscited by 774
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
- 2023Prompt Injection attack against LLM-integrated Applicationscited by 568
- 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 478
- 2021Sentence-T5: Scalable Sentence Encoders from Pre-trained Text-to-Text Modelscited by 462
- 2021Large Dual Encoders Are Generalizable Retrieverscited by 454
- 2021SummaC: Re-Visiting NLI-based Models for Inconsistency Detection in Summarizationcited by 402
- 2019PAWS: Paraphrase Adversaries from Word Scramblingcited by 395
- 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 376
- 2022Text and Code Embeddings by Contrastive Pre-Trainingcited by 358
- 2016FastText.zip: Compressing text classification modelscited by 331
- 2021QuestEval: Summarization Asks for Fact-based Evaluationcited by 241
- 2021Get Your Vitamin C! Robust Fact Verification with Contrastive Evidencecited by 222
- 2022LinkBERT: Pretraining Language Models with Document Linkscited by 209
- 2023ChatDB: Augmenting LLMs with Databases as Their Symbolic Memorycited by 136
- 2023Exploring the Limits of ChatGPT for Query or Aspect-based Text Summarizationcited by 122
- 2021Hidden Backdoors in Human-Centric Language Modelscited by 83
- 2020Metamorphic Testing: A New Approach for Generating Next Test Casescited by 71
- 2024Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoningcited by 62
- 2024Play Guessing Game with LLM: Indirect Jailbreak Attack with Implicit Cluescited by 57
- 2021ERNIE 3.0 Titan: Exploring Larger-scale Knowledge Enhanced Pre-training for Language Understanding and Generationcited by 45
- 2023NevIR: Negation in Neural Information Retrievalcited by 28
- 2021Reliability Testing for Natural Language Processing Systemscited by 25
- 2024Digger: Detecting Copyright Content Mis-usage in Large Language Model Trainingcited by 24
- 2023MTTM: Metamorphic Testing for Textual Content Moderation Softwarecited by 20
- 2023LEAP: Efficient and Automated Test Method for NLP Softwarecited by 6
- 2022Unveiling Hidden DNN Defects with Decision-Based Metamorphic Testingcited by 5
- 2023Revealing the Blind Spot of Sentence Encoder Evaluation by HEROScited by 5
Built on by
Citing papers per year: 2024: 2; 2025: 1; 2026: 1.
4 papers.
- 2024Glitch Tokens in Large Language Models: Categorization Taxonomy and Effective Detectioncited by 27
- 2024GlitchProber: Advancing Effective Detection and Mitigation of Glitch Tokens in Large Language Modelscited by 3
- 2025Bounded PCTL Model Checking of Large Language Model Outputscited by 1
- 2026RefineRAG: Word-Level Poisoning Attacks via Retriever-Guided Text Refinementcited by 0
- 2026RefineRAG: Word-Level Poisoning Attacks via Retriever-Guided Text Refinement8 Apr 2026
- 2025Bounded PCTL Model Checking of Large Language Model Outputs23 Sep 2025
- 2024GlitchProber: Advancing Effective Detection and Mitigation of Glitch Tokens in Large Language Models9 Aug 2024
- 2024Glitch Tokens in Large Language Models: Categorization Taxonomy and Effective Detection15 Apr 2024
Similar, not cited
Close in wording, no citation either way
- 2026When Knowledge Changes: Metamorphic Testing of RAG Systems with Mutations
- 2023Retrieval-Augmented Generation for Large Language Models: A Survey
- 2025Retrieval Augmented Generation Evaluation in the Era of Large Language Models: A Comprehensive Survey
- 2025When Retrieval Succeeds and Fails: Rethinking Retrieval-Augmented Generation for LLMs
- 2024Retrieval Augmented Generation (RAG) and Beyond: A Comprehensive Survey on How to Make your LLMs use External Data More Wisely
- 2025A Library of LLM Intrinsics for Retrieval-Augmented Generation
- 2024Retrieval Augmented Generation Systems: Automatic Dataset Creation, Evaluation and Boolean Agent Setup
- 2026Reason and Verify: A Framework for Faithful Retrieval-Augmented Generation