Decoding Compressed Trust: Scrutinizing the Trustworthiness of Efficient LLMs Under Compression
Not on the map. Why?
Abstract (arXiv)
Compressing high-capability Large Language Models (LLMs) has emerged as a favored strategy for resource-efficient inferences. While state-of-the-art (SoTA) compression methods boast impressive advancements in preserving benign task performance, the potential risks of compression in terms of safety and trustworthiness have been largely neglected. This study conducts the first, thorough evaluation of three (3) leading LLMs using five (5) SoTA compression techniques across eight (8) trustworthiness dimensions. Our experiments highlight the intricate interplay between compression and trustworthiness, revealing some interesting patterns. We find that quantization is currently a more effective approach than pruning in achieving efficiency and trustworthiness simultaneously. For instance, a 4-bit quantized model retains the trustworthiness of its original counterpart, but model pruning significantly degrades trustworthiness, even at 50% sparsity. Moreover, employing quantization within a moderate bit range could unexpectedly improve certain trustworthiness dimensions such as ethics and fairness. Conversely, extreme quantization to very low bit levels (3 bits) tends to reduce trustworthiness significantly. This increased risk cannot be uncovered by looking at benign performance alone, in turn, mandating comprehensive trustworthiness evaluation in practice. These findings culminate in practical recommendations for simultaneously achieving high utility, efficiency, and trustworthiness in LLMs. Code and models are available at https://decoding-comp-trust.github.io.
Key facts. Cited by 57 papers in the map (data through 14 Oct 2026). Builds on 56 of its 65 references that are in the map. First posted on arXiv 18 Mar 2024.
Builds on
56 of 65 references.
References · 56
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2020Scaling Laws for Neural Language Modelscited by 6,586
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,899
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,592
- 2022Emergent Abilities of Large Language Modelscited by 2,512
- 2015Deep Compression: Compressing Deep Neural Networks with Pruning, Trained Quantization and Huffman Codingcited by 2,329
38 more
- 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,183
- 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,164
- 2023PaLM-E: An Embodied Multimodal Language Modelcited by 2,071
- 2022GPTQ: Accurate Post-Training Quantization for Generative Pre-trained Transformerscited by 1,919
- 2022SmoothQuant: Accurate and Efficient Post-Training Quantization for Large Language Modelscited by 1,386
- 2023AWQ: Activation-aware Weight Quantization for LLM Compression and Accelerationcited by 1,298
- 2023SparseGPT: Massive Language Models Can Be Accurately Pruned in One-Shotcited by 1,121
- 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 992
- 2022LLM.int8(): 8-bit Matrix Multiplication for Transformers at Scalecited by 906
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 836
- 2023A Simple and Effective Pruning Approach for Large Language Modelscited by 800
- 2023LLM-Pruner: On the Structural Pruning of Large Language Modelscited by 650
- 2017To prune, or not to prune: exploring the efficacy of pruning for model compressioncited by 603
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
- 2019Rigging the Lottery: Making All Tickets Winnerscited by 495
- 2019The State of Sparsity in Deep Neural Networkscited by 476
- 2023QuIP: 2-Bit Quantization of Large Language Models With Guaranteescited by 414
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 401
- 2022Optimal Brain Compression: A Framework for Accurate Post-Training Quantization and Pruningcited by 322
- 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
- 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modificationscited by 231
- 2023PromptRobust: Towards Evaluating the Robustness of Large Language Models on Adversarial Promptscited by 226
- 2019Sparse Networks from Scratch: Faster Training without Losing Performancecited by 213
- 2019Parameter Efficient Training of Deep Convolutional Neural Networks by Dynamic Sparse Reparameterizationcited by 189
- 2021Learning N:M Fine-grained Structured Sparse Neural Networks From Scratchcited by 179
- 2023Outlier Weighed Layerwise Sparsity (OWL): A Missing Secret Sauce for Pruning LLMs to High Sparsitycited by 165
- 2020Dynamic Model Pruning with Feedbackcited by 125
- 2023ChatCAD: Interactive Computer-Aided Diagnosis on Medical Image using Large Language Modelscited by 116
- 2023Composite Backdoor Attacks Against Large Language Modelscited by 73
- 2023Compressing LLMs: The Truth is Rarely Pure and Never Simplecited by 62
- 2023Latent Jailbreak: A Benchmark for Evaluating Text Safety and Output Robustness of Large Language Modelscited by 60
- 2023TrustGPT: A Benchmark for Trustworthy and Responsible Large Language Modelscited by 58
- 2023Baby Llama: knowledge distillation from an ensemble of teachers trained on a small dataset with no performance penaltycited by 57
- 2018A Systematic Classification of Knowledge, Reasoning, and Context within the ARC Datasetcited by 55
- 2021Multi-Prize Lottery Ticket Hypothesis: Finding Accurate Binary Neural Networks by Pruning A Randomly Weighted Networkcited by 55
- 2023Intriguing Properties of Quantization at Scalecited by 49
- 2023The Emergence of Essential Sparsity in Large Pre-trained Models: The Weights that Mattercited by 42
- 2022Compute-Efficient Deep Learning: Algorithmic Trends and Opportunitiescited by 38
50 most cited of 56 All 56 (JSON)
Built on by
Citing papers per year: 2024: 11; 2025: 21; 2026: 25.
57 papers.
Sort:
By area:
- 2024Catastrophic Failure of LLM Unlearning via Quantizationcited by 81
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 61
- 2024Speculative Diffusion Decoding: Accelerating Language Generation through Diffusioncited by 57
- 2025Are You Getting What You Pay For? Auditing Model Substitution in LLM APIscited by 38
- 2024Beyond Perplexity: Multi-dimensional Safety Evaluation of LLM Compressioncited by 33
- 2024Accuracy is Not All You Needcited by 31
- 2025Finding Fantastic Experts in MoEs: A Unified Study for Expert Dropping Strategies and Observationscited by 20
- 2024Exploring the Trade-Offs: Quantization Methods, Task Difficulty, and Model Size in Large Language Models From Edge to Giantcited by 14
- 2024Quantized Delta Weight Is Safety Keepercited by 12
- 2025Low-Precision Training of Large Language Models: Methods, Challenges, and Opportunitiescited by 11
- 2025A Benchmark for Ultra-High-Resolution Remote Sensing MLLMscited by 11
- 2025CSPLADE: Learned Sparse Retrieval with Causal Language Modelscited by 10
38 more
- 2024On Fairness of Low-Rank Adaptation of Large Modelscited by 9
- 2024The Impact of Inference Acceleration on Bias of LLMscited by 9
- 2025Quantized but Deceptive? A Multi-Dimensional Truthfulness Evaluation of Quantized LLMscited by 9
- 2025Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defensecited by 7
- 2025Towards Understanding and Improving Refusal in Compressed Models via Mechanistic Interpretabilitycited by 7
- 2026Investigating Social Bias Changes in Quantized Language Modelscited by 5
- 2026Do Activation Monitors Survive Model Updates? Benchmarking, Predicting, and Repairing Activation-Monitor Stalenesscited by 5
- 2024Evaluating and Safeguarding the Adversarial Robustness of Retrieval-Based In-Context Learningcited by 4
- 2024MemControl: Mitigating Memorization in Diffusion Models via Automated Parameter Selectioncited by 4
- 2025LVLM-Compress-Bench: Benchmarking the Broader Impact of Large Vision-Language Model Compressioncited by 4
- 2025How Quantization Shapes Bias in Large Language Modelscited by 4
- 2025Through a Compressed Lens: Investigating The Impact of Quantization on Factual Knowledge Recallcited by 3
- 2025Q-resafe: Assessing Safety Risks and Quantization-aware Safety Patching for Quantized Large Language Modelscited by 2
- 2025On the Interaction of Compressibility and Adversarial Robustnesscited by 2
- 2025Pruning Weights but Not Truth: Safeguarding Truthfulness While Pruning LLMscited by 2
- 2025EAGER: Edge-Aligned LLM Defense for Robust, Efficient, and Accurate Cybersecurity Question Answeringcited by 2
- 2026Weight Pruning Amplifies Bias: A Multi-Method Study of Compressed LLMs for Edge AIcited by 2
- 2026Silent Alarm: A J-Space Protocol for Comparing Danger Recognition Across Models and Quantization Levelscited by 2
- 2026Benchmarking Trustworthiness of SLMs: Pre-trained vs. Compressedcited by 2
- 2025LiteLMGuard: Seamless and Lightweight On-Device Prompt Filtering for Safeguarding Small Language Models against Quantization-induced Risks and Vulnerabilitiescited by 1
- 2025Beyond Bias Scores: Unmasking Vacuous Neutrality in Small Language Modelscited by 1
- 2026Preserving Fairness and Safety in Quantized LLMs Through Critical Weight Protectioncited by 1
- 2026Quality Is Not a Safety Proxy Under Quantizationcited by 1
- 2026AnchorKV: Safety-Aware KV Cache Compression via Soft Penalty with a Refusal Anchorcited by 1
- 2026On the Utility and Factual Reliability of Pruned Mixture-of-Experts Models in the Biomedical Domaincited by 1
- 2026Wrong Before Right: Late Rescue and Interface Failure in Aligned Language Modelscited by 1
- 2026The Asymmetric Harms of LLM Compressioncited by 1
- 2025Models in the Same Family are NOT Trust-Equivalentcited by 0
- 2025Fair-GPTQ: Bias-Aware Quantization for Large Language Modelscited by 0
- 2025Decomposed Trust: Privacy, Adversarial Robustness, Ethics, and Fairness in Low-Rank LLMscited by 0
- 2025Enhancing Trustworthiness with Mixed Precision: Benchmarks, Opportunities, and Challengescited by 0
- 2026Mechanistically Interpreting Compression in Vision-Language Modelscited by 0
- 2026Shorter, but Still Trustworthy? An Empirical Study of Chain-of-Thought Compressioncited by 0
- 2026A Paired Testing Protocol for Batch-Conditioned Refusal Robustness in LLM Servingcited by 0
- 2026Reliability Scaling Laws for Quantized Large Language Modelscited by 0
- 2026Securing LLMs in the Wild: Privacy and Security Challenges at the Edgecited by 0
- 2026When Compression Scores Cannot Decide: Information Boundaries for Group-Robust LLM Pruningcited by 0
- 2026When Personality Meets Quantization: A Layer-wise MBTI Analysis of Quantized LLMscited by 0
50 most cited of 57 All 57 (JSON)
- 2026Running Fewer Loops Removes Refusal Behaviour in Recurrent-Depth Language Models10 Oct 2026
- 2026Capability Scaling-Down Laws for LLM Compression1 Oct 2026
- 2026MOMAT: Mixture of Multiple Atlases for Low-Power Jailbreak Defense of Quantized LLMs1 Oct 2026
- 2026Pruning for Efficiency, Paying in Fairness: Demographic Disparities in Pruned Speech-LLMs29 Sep 2026
- 2026No Free Efficiency: Revisiting the Trade-off Between Training Efficiency and Model Vulnerability27 Sep 2026
- 2026On the Efficiency-Safety Dilemma in Large Reasoning Models20 Sep 2026
- 2026AKRASIA: Stealthy Backdoor Attack on Reasoning-based Code LLMs1 Sep 2026
- 2026When Personality Meets Quantization: A Layer-wise MBTI Analysis of Quantized LLMs26 Aug 2026
- 2026The Asymmetric Harms of LLM Compression20 Aug 2026
- 2026Benchmarking Trustworthiness of SLMs: Pre-trained vs. Compressed12 Aug 2026
- 2026When Compression Scores Cannot Decide: Information Boundaries for Group-Robust LLM Pruning3 Aug 2026
- 2026Silent Alarm: A J-Space Protocol for Comparing Danger Recognition Across Models and Quantization Levels14 Jul 2026
38 more
- 2026Securing LLMs in the Wild: Privacy and Security Challenges at the Edge13 Jul 2026
- 2026Reliability Scaling Laws for Quantized Large Language Models12 Jul 2026
- 2026Wrong Before Right: Late Rescue and Interface Failure in Aligned Language Models6 Jul 2026
- 2026On the Utility and Factual Reliability of Pruned Mixture-of-Experts Models in the Biomedical Domain1 Jul 2026
- 2026AnchorKV: Safety-Aware KV Cache Compression via Soft Penalty with a Refusal Anchor16 Jun 2026
- 2026Do Activation Monitors Survive Model Updates? Benchmarking, Predicting, and Repairing Activation-Monitor Staleness14 Jun 2026
- 2026Quality Is Not a Safety Proxy Under Quantization8 Jun 2026
- 2026A Paired Testing Protocol for Batch-Conditioned Refusal Robustness in LLM Serving26 May 2026
- 2026Weight Pruning Amplifies Bias: A Multi-Method Study of Compressed LLMs for Edge AI2 May 2026
- 2026Shorter, but Still Trustworthy? An Empirical Study of Chain-of-Thought Compression5 Apr 2026
- 2026Mechanistically Interpreting Compression in Vision-Language Models26 Mar 2026
- 2026Investigating Social Bias Changes in Quantized Language Models5 Feb 2026
- 2026Preserving Fairness and Safety in Quantized LLMs Through Critical Weight Protection17 Jan 2026
- 2025A Benchmark for Ultra-High-Resolution Remote Sensing MLLMs19 Dec 2025
- 2025Enhancing Trustworthiness with Mixed Precision: Benchmarks, Opportunities, and Challenges27 Nov 2025
- 2025Decomposed Trust: Privacy, Adversarial Robustness, Ethics, and Fairness in Low-Rank LLMs27 Nov 2025
- 2025EAGER: Edge-Aligned LLM Defense for Robust, Efficient, and Accurate Cybersecurity Question Answering24 Nov 2025
- 2025Fair-GPTQ: Bias-Aware Quantization for Large Language Models18 Sep 2025
- 2025Pruning Weights but Not Truth: Safeguarding Truthfulness While Pruning LLMs27 Aug 2025
- 2025Quantized but Deceptive? A Multi-Dimensional Truthfulness Evaluation of Quantized LLMs26 Aug 2025
- 2025How Quantization Shapes Bias in Large Language Models25 Aug 2025
- 2025Models in the Same Family are NOT Trust-Equivalent19 Aug 2025
- 2025On the Interaction of Compressibility and Adversarial Robustness23 Jul 2025
- 2025Q-resafe: Assessing Safety Risks and Quantization-aware Safety Patching for Quantized Large Language Models25 Jun 2025
- 2025Beyond Bias Scores: Unmasking Vacuous Neutrality in Small Language Models10 Jun 2025
- 2025Through a Compressed Lens: Investigating The Impact of Quantization on Factual Knowledge Recall20 May 2025
- 2025LiteLMGuard: Seamless and Lightweight On-Device Prompt Filtering for Safeguarding Small Language Models against Quantization-induced Risks and Vulnerabilities8 May 2025
- 2025Low-Precision Training of Large Language Models: Methods, Challenges, and Opportunities2 May 2025
- 2025CSPLADE: Learned Sparse Retrieval with Causal Language Models15 Apr 2025
- 2025Finding Fantastic Experts in MoEs: A Unified Study for Expert Dropping Strategies and Observations8 Apr 2025
- 2025Are You Getting What You Pay For? Auditing Model Substitution in LLM APIs7 Apr 2025
- 2025Towards Understanding and Improving Refusal in Compressed Models via Mechanistic Interpretability5 Apr 2025
- 2025LVLM-Compress-Bench: Benchmarking the Broader Impact of Large Vision-Language Model Compression6 Mar 2025
- 2025Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defense2 Feb 2025
- 2024Quantized Delta Weight Is Safety Keeper29 Nov 2024
- 2024The Impact of Inference Acceleration on Bias of LLMs29 Oct 2024
- 2024Catastrophic Failure of LLM Unlearning via Quantization21 Oct 2024
- 2024Exploring the Trade-Offs: Quantization Methods, Task Difficulty, and Model Size in Large Language Models From Edge to Giant17 Sep 2024
50 newest of 57 All 57 (JSON)
- 2024Catastrophic Failure of LLM Unlearning via Quantizationcited by 81
- 2024Quantized Delta Weight Is Safety Keepercited by 12
- 2026Silent Alarm: A J-Space Protocol for Comparing Danger Recognition Across Models and Quantization Levelscited by 2
- 2025LiteLMGuard: Seamless and Lightweight On-Device Prompt Filtering for Safeguarding Small Language Models against Quantization-induced Risks and Vulnerabilitiescited by 1
- 2026Securing LLMs in the Wild: Privacy and Security Challenges at the Edgecited by 0
- 2026AKRASIA: Stealthy Backdoor Attack on Reasoning-based Code LLMscited by 0
- 2026MOMAT: Mixture of Multiple Atlases for Low-Power Jailbreak Defense of Quantized LLMscited by 0
- 2026Running Fewer Loops Removes Refusal Behaviour in Recurrent-Depth Language Modelscited by 0
- 2026Running Fewer Loops Removes Refusal Behaviour in Recurrent-Depth Language Models10 Oct 2026
- 2026MOMAT: Mixture of Multiple Atlases for Low-Power Jailbreak Defense of Quantized LLMs1 Oct 2026
- 2026AKRASIA: Stealthy Backdoor Attack on Reasoning-based Code LLMs1 Sep 2026
- 2026Silent Alarm: A J-Space Protocol for Comparing Danger Recognition Across Models and Quantization Levels14 Jul 2026
- 2026Securing LLMs in the Wild: Privacy and Security Challenges at the Edge13 Jul 2026
- 2025LiteLMGuard: Seamless and Lightweight On-Device Prompt Filtering for Safeguarding Small Language Models against Quantization-induced Risks and Vulnerabilities8 May 2025
- 2024Quantized Delta Weight Is Safety Keeper29 Nov 2024
- 2024Catastrophic Failure of LLM Unlearning via Quantization21 Oct 2024
- 2024Speculative Diffusion Decoding: Accelerating Language Generation through Diffusioncited by 57
- 2024The Impact of Inference Acceleration on Bias of LLMscited by 9
- 2026AnchorKV: Safety-Aware KV Cache Compression via Soft Penalty with a Refusal Anchorcited by 1
- 2026A Paired Testing Protocol for Batch-Conditioned Refusal Robustness in LLM Servingcited by 0
- 2026AnchorKV: Safety-Aware KV Cache Compression via Soft Penalty with a Refusal Anchor16 Jun 2026
- 2026A Paired Testing Protocol for Batch-Conditioned Refusal Robustness in LLM Serving26 May 2026
- 2024The Impact of Inference Acceleration on Bias of LLMs29 Oct 2024
- 2024Speculative Diffusion Decoding: Accelerating Language Generation through Diffusion10 Aug 2024
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 61
- 2025Are You Getting What You Pay For? Auditing Model Substitution in LLM APIscited by 38
- 2024Beyond Perplexity: Multi-dimensional Safety Evaluation of LLM Compressioncited by 33
- 2024Accuracy is Not All You Needcited by 31
- 2024Exploring the Trade-Offs: Quantization Methods, Task Difficulty, and Model Size in Large Language Models From Edge to Giantcited by 14
- 2025Low-Precision Training of Large Language Models: Methods, Challenges, and Opportunitiescited by 11
- 2025CSPLADE: Learned Sparse Retrieval with Causal Language Modelscited by 10
- 2024On Fairness of Low-Rank Adaptation of Large Modelscited by 9
- 2025Quantized but Deceptive? A Multi-Dimensional Truthfulness Evaluation of Quantized LLMscited by 9
- 2025Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defensecited by 7
- 2026Investigating Social Bias Changes in Quantized Language Modelscited by 5
- 2026Do Activation Monitors Survive Model Updates? Benchmarking, Predicting, and Repairing Activation-Monitor Stalenesscited by 5
12 most cited of 33 All 33 (JSON)
- 2026Capability Scaling-Down Laws for LLM Compression1 Oct 2026
- 2026Pruning for Efficiency, Paying in Fairness: Demographic Disparities in Pruned Speech-LLMs29 Sep 2026
- 2026No Free Efficiency: Revisiting the Trade-off Between Training Efficiency and Model Vulnerability27 Sep 2026
- 2026When Personality Meets Quantization: A Layer-wise MBTI Analysis of Quantized LLMs26 Aug 2026
- 2026The Asymmetric Harms of LLM Compression20 Aug 2026
- 2026Benchmarking Trustworthiness of SLMs: Pre-trained vs. Compressed12 Aug 2026
- 2026When Compression Scores Cannot Decide: Information Boundaries for Group-Robust LLM Pruning3 Aug 2026
- 2026Reliability Scaling Laws for Quantized Large Language Models12 Jul 2026
- 2026Do Activation Monitors Survive Model Updates? Benchmarking, Predicting, and Repairing Activation-Monitor Staleness14 Jun 2026
- 2026Quality Is Not a Safety Proxy Under Quantization8 Jun 2026
- 2026Weight Pruning Amplifies Bias: A Multi-Method Study of Compressed LLMs for Edge AI2 May 2026
- 2026Investigating Social Bias Changes in Quantized Language Models5 Feb 2026
12 newest of 33 All 33 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026Does Compression Preserve Uncertainty? A Unified Benchmark for Quantized and Sparse LLMs via Conformal Prediction
- 2026TrustLDM: Benchmarking Trustworthiness in Language Diffusion Models
- 2025Investigating the Impact of Quantization Methods on the Safety and Reliability of Large Language Models
- 2026Quantization Undoes Alignment: Bias Emergence in Compressed LLMs Across Models and Precision Levels
- 2024Towards Tracing Trustworthiness Dynamics: Revisiting Pre-training Period of Large Language Models
- 2026UniComp: A Unified Evaluation of Large Language Model Compression via Pruning, Quantization, and Distillation
- 2025Semantic Retention and Extreme Compression in LLMs: Can We Have Both?
- 2025Can Compressed LLMs Truly Act? An Empirical Evaluation of Agentic Capabilities in LLM Compression