Beyond Perplexity: Multi-dimensional Safety Evaluation of LLM Compression
Not on the map. Why?
Abstract (arXiv)
Increasingly, model compression techniques enable large language models (LLMs) to be deployed in real-world applications. As a result of this momentum towards local deployment, compressed LLMs will interact with a large population. Prior work on compression typically prioritize preserving perplexity, which is directly analogous to training loss. The impact of compression method on other critical aspects of model behavior, -- ,particularly safety, -- ,requires systematic assessment. To this end, we investigate the impact of model compression along four dimensions: (1) degeneration harm, i.e., bias and toxicity in generation; (2) representational harm, i.e., biases in discriminative tasks; (3) dialect bias; and(4) language modeling and downstream task performance. We examine a wide spectrum of LLM compression techniques, including unstructured pruning, semi-structured pruning, and quantization. Our analysis reveals that compression can lead to unexpected consequences. Although compression may unintentionally alleviate LLMs' degeneration harm, it can still exacerbate representational harm. Furthermore, increasing compression produces a divergent impact on different protected groups. Finally, different compression methods have drastically different safety impacts: for example, quantization mostly preserves bias while pruning degrades quickly. Our findings underscore the importance of integrating safety assessments into the development of compressed LLMs to ensure their reliability across real-world applications.footnoteOur implementation and results are available here: urlhttps://github.com/zhichaoxu-shufe/Beyond-Perplexity-Compression-Safety-Eval
Key facts. Cited by 32 papers in the map (data through 7 Oct 2026). Builds on 48 of its 73 references that are in the map. First posted on arXiv 6 Jul 2024.
Builds on
48 of 73 references.
References · 48
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,243
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
- 2016Pointer Sentinel Mixture Modelscited by 2,992
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2019ALBERT: A Lite BERT for Self-supervised Learning of Language Representationscited by 2,772
- 2022GPTQ: Accurate Post-Training Quantization for Generative Pre-trained Transformerscited by 1,838
36 more
- 2018Don't Give Me the Details, Just the Summary! Topic-Aware Convolutional Neural Networks for Extreme Summarizationcited by 1,308
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2021Fantastically Ordered Prompts and Where to Find Them: Overcoming Few-Shot Prompt Order Sensitivitycited by 1,122
- 2023SparseGPT: Massive Language Models Can Be Accurately Pruned in One-Shotcited by 1,090
- 2020Language (Technology) is Power: A Critical Survey of "Bias" in NLPcited by 951
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 683
- 2024KIVI: A Tuning-Free Asymmetric 2bit Quantization for KV Cachecited by 604
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 540
- 2024Dolma: an Open Corpus of Three Trillion Tokens for Language Model Pretraining Researchcited by 475
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 410
- 2023Sheared LLaMA: Accelerating Language Model Pre-training via Structured Pruningcited by 408
- 2024Capabilities of Gemini Models in Medicinecited by 231
- 2016Demographic Dialectal Variation in Social Media: A Case Study of African-American Englishcited by 194
- 2022"I'm sorry to hear that": Finding New Biases in Language Models with a Holistic Descriptor Datasetcited by 160
- 2023Sociotechnical Safety Evaluation of Generative AI Systemscited by 154
- 2020UnQovering Stereotyping Biases via Underspecified Questionscited by 124
- 2024KV Cache is 1 Bit Per Channel: Efficient Large Language Model Inference with Coupled Quantizationcited by 74
- 2023Compressing LLMs: The Truth is Rarely Pure and Never Simplecited by 59
- 2024Decoding Compressed Trust: Scrutinizing the Trustworthiness of Efficient LLMs Under Compressioncited by 54
- 2023ROBBIE: Robust Bias Evaluation of Large Generative Language Modelscited by 53
- 2023Paloma: A Benchmark for Evaluating Language Model Fitcited by 53
- 2024Natural Language Processing for Dialects of a Language: A Surveycited by 40
- 2022Measuring Representational Harms in Image Captioningcited by 36
- 2024Dialect prejudice predicts AI decisions about people's character, employability, and criminalitycited by 35
- 2023An In-depth Investigation of User Response Simulation for Conversational Searchcited by 20
- 2021On Language Models for Creolescited by 17
- 2024RankMamba: Benchmarking Mamba's Document Ranking Performance in the Era of Transformerscited by 15
- 2022GMP*: Well-Tuned Gradual Magnitude Pruning Can Outperform Most BERT-Pruning Methodscited by 14
- 2024In-Context Example Ordering Guided by Label Distributionscited by 12
- 2023Adversarial Clean Label Backdoor Attacks and Defenses on Text Classification Systemscited by 10
- 2023Context-aware Decoding Reduces Hallucination in Query-focused Summarizationcited by 10
- 2024Multi-dimensional Evaluation of Empathetic Dialog Responsescited by 10
- 2023A Lightweight Constrained Generation Alternative for Query-focused Summarizationcited by 8
- 2023Don't Retrain, Just Rewrite: Countering Adversarial Perturbations by Rewriting Textcited by 8
- 2023Whispers of Doubt Amidst Echoes of Triumph in NLP Robustnesscited by 5
- 2024An Empirical Investigation of Matrix Factorization Methods for Pre-trained Transformerscited by 2
Built on by
Citing papers per year: 2024: 2; 2025: 14; 2026: 16.
32 papers.
Sort:
By area:
- 2025Investigating the Impact of Quantization Methods on the Safety and Reliability of Large Language Modelscited by 17
- 2024Exploring the Trade-Offs: Quantization Methods, Task Difficulty, and Model Size in Large Language Models From Edge to Giantcited by 12
- 2024State Space Models are Strong Text Rerankerscited by 10
- 2025CSPLADE: Learned Sparse Retrieval with Causal Language Modelscited by 10
- 2025Does quantization affect models' performance on long-context tasks?cited by 10
- 2025Quantized but Deceptive? A Multi-Dimensional Truthfulness Evaluation of Quantized LLMscited by 8
- 2025Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defensecited by 7
- 2025Towards Understanding and Improving Refusal in Compressed Models via Mechanistic Interpretabilitycited by 6
- 2025Beyond Correctness: Rewarding Faithful Reasoning in Retrieval-Augmented Generationcited by 6
- 2026LACONIC: Dense-Level Effectiveness for Scalable Sparse Retrieval via a Two-Phase Training Curriculumcited by 5
- 2026Quantization Undoes Alignment: Bias Emergence in Compressed LLMs Across Models and Precision Levelscited by 5
- 2026Investigating Social Bias Changes in Quantized Language Modelscited by 4
20 more
- 2025Efficient LLM Inference with Activation Checkpointing and Hybrid Cachingcited by 3
- 2025How Quantization Shapes Bias in Large Language Modelscited by 3
- 2025Q-resafe: Assessing Safety Risks and Quantization-aware Safety Patching for Quantized Large Language Modelscited by 2
- 2025Pruning Weights but Not Truth: Safeguarding Truthfulness While Pruning LLMscited by 2
- 2026Weight Pruning Amplifies Bias: A Multi-Method Study of Compressed LLMs for Edge AIcited by 2
- 2025From Raw Corpora to Domain Benchmarks: Automated Evaluation of LLM Domain Expertisecited by 1
- 2025Beyond Bias Scores: Unmasking Vacuous Neutrality in Small Language Modelscited by 1
- 2026SHIELD: An Auto-Healing Agentic Defense Framework for LLM Resource Exhaustion Attackscited by 1
- 2026Quality Is Not a Safety Proxy Under Quantizationcited by 1
- 2025Fair-GPTQ: Bias-Aware Quantization for Large Language Modelscited by 0
- 2026Rethinking Perplexity: Revealing the Impact of Input Length on Perplexity Evaluation in LLMscited by 0
- 2026The Hrunting of AI: Where and How to Improve English Dialectal Fairnesscited by 0
- 2026Mechanistically Interpreting Compression in Vision-Language Modelscited by 0
- 2026K-Quantization and its Impact on Output Performancecited by 0
- 2026Reliability Scaling Laws for Quantized Large Language Modelscited by 0
- 2026The Asymmetric Harms of LLM Compressioncited by 0
- 2026When Personality Meets Quantization: A Layer-wise MBTI Analysis of Quantized LLMscited by 0
- 2026VerTox: Verifiable Reward-Guided Corpus Poisoning Against Neural Ranking Modelscited by 0
- 2026Pruning for Efficiency, Paying in Fairness: Demographic Disparities in Pruned Speech-LLMscited by 0
- 2026MOMAT: Mixture of Multiple Atlases for Low-Power Jailbreak Defense of Quantized LLMscited by 0
- 2026MOMAT: Mixture of Multiple Atlases for Low-Power Jailbreak Defense of Quantized LLMs1 Oct 2026
- 2026Pruning for Efficiency, Paying in Fairness: Demographic Disparities in Pruned Speech-LLMs29 Sep 2026
- 2026VerTox: Verifiable Reward-Guided Corpus Poisoning Against Neural Ranking Models1 Sep 2026
- 2026When Personality Meets Quantization: A Layer-wise MBTI Analysis of Quantized LLMs26 Aug 2026
- 2026The Asymmetric Harms of LLM Compression20 Aug 2026
- 2026Reliability Scaling Laws for Quantized Large Language Models12 Jul 2026
- 2026Quality Is Not a Safety Proxy Under Quantization8 Jun 2026
- 2026K-Quantization and its Impact on Output Performance19 May 2026
- 2026Quantization Undoes Alignment: Bias Emergence in Compressed LLMs Across Models and Precision Levels2 May 2026
- 2026Weight Pruning Amplifies Bias: A Multi-Method Study of Compressed LLMs for Edge AI2 May 2026
- 2026Mechanistically Interpreting Compression in Vision-Language Models26 Mar 2026
- 2026The Hrunting of AI: Where and How to Improve English Dialectal Fairness16 Mar 2026
20 more
- 2026Investigating Social Bias Changes in Quantized Language Models5 Feb 2026
- 2026Rethinking Perplexity: Revealing the Impact of Input Length on Perplexity Evaluation in LLMs4 Feb 2026
- 2026SHIELD: An Auto-Healing Agentic Defense Framework for LLM Resource Exhaustion Attacks27 Jan 2026
- 2026LACONIC: Dense-Level Effectiveness for Scalable Sparse Retrieval via a Two-Phase Training Curriculum4 Jan 2026
- 2025Beyond Correctness: Rewarding Faithful Reasoning in Retrieval-Augmented Generation15 Oct 2025
- 2025Fair-GPTQ: Bias-Aware Quantization for Large Language Models18 Sep 2025
- 2025Pruning Weights but Not Truth: Safeguarding Truthfulness While Pruning LLMs27 Aug 2025
- 2025Quantized but Deceptive? A Multi-Dimensional Truthfulness Evaluation of Quantized LLMs26 Aug 2025
- 2025How Quantization Shapes Bias in Large Language Models25 Aug 2025
- 2025Q-resafe: Assessing Safety Risks and Quantization-aware Safety Patching for Quantized Large Language Models25 Jun 2025
- 2025Beyond Bias Scores: Unmasking Vacuous Neutrality in Small Language Models10 Jun 2025
- 2025From Raw Corpora to Domain Benchmarks: Automated Evaluation of LLM Domain Expertise9 Jun 2025
- 2025Does quantization affect models' performance on long-context tasks?26 May 2025
- 2025CSPLADE: Learned Sparse Retrieval with Causal Language Models15 Apr 2025
- 2025Towards Understanding and Improving Refusal in Compressed Models via Mechanistic Interpretability5 Apr 2025
- 2025Investigating the Impact of Quantization Methods on the Safety and Reliability of Large Language Models18 Feb 2025
- 2025Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defense2 Feb 2025
- 2025Efficient LLM Inference with Activation Checkpointing and Hybrid Caching3 Jan 2025
- 2024State Space Models are Strong Text Rerankers18 Dec 2024
- 2024Exploring the Trade-Offs: Quantization Methods, Task Difficulty, and Model Size in Large Language Models From Edge to Giant17 Sep 2024
- 2025Investigating the Impact of Quantization Methods on the Safety and Reliability of Large Language Modelscited by 17
- 2025Beyond Correctness: Rewarding Faithful Reasoning in Retrieval-Augmented Generationcited by 6
- 2026Rethinking Perplexity: Revealing the Impact of Input Length on Perplexity Evaluation in LLMscited by 0
- 2026Rethinking Perplexity: Revealing the Impact of Input Length on Perplexity Evaluation in LLMs4 Feb 2026
- 2025Beyond Correctness: Rewarding Faithful Reasoning in Retrieval-Augmented Generation15 Oct 2025
- 2025Investigating the Impact of Quantization Methods on the Safety and Reliability of Large Language Models18 Feb 2025
- 2024State Space Models are Strong Text Rerankerscited by 10
- 2024State Space Models are Strong Text Rerankers18 Dec 2024
- 2024Exploring the Trade-Offs: Quantization Methods, Task Difficulty, and Model Size in Large Language Models From Edge to Giantcited by 12
- 2025CSPLADE: Learned Sparse Retrieval with Causal Language Modelscited by 10
- 2025Does quantization affect models' performance on long-context tasks?cited by 10
- 2025Quantized but Deceptive? A Multi-Dimensional Truthfulness Evaluation of Quantized LLMscited by 8
- 2025Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defensecited by 7
- 2025Towards Understanding and Improving Refusal in Compressed Models via Mechanistic Interpretabilitycited by 6
- 2026LACONIC: Dense-Level Effectiveness for Scalable Sparse Retrieval via a Two-Phase Training Curriculumcited by 5
- 2026Quantization Undoes Alignment: Bias Emergence in Compressed LLMs Across Models and Precision Levelscited by 5
- 2026Investigating Social Bias Changes in Quantized Language Modelscited by 4
- 2025How Quantization Shapes Bias in Large Language Modelscited by 3
- 2025Q-resafe: Assessing Safety Risks and Quantization-aware Safety Patching for Quantized Large Language Modelscited by 2
- 2025Pruning Weights but Not Truth: Safeguarding Truthfulness While Pruning LLMscited by 2
12 most cited of 23 All 23 (JSON)
- 2026Pruning for Efficiency, Paying in Fairness: Demographic Disparities in Pruned Speech-LLMs29 Sep 2026
- 2026When Personality Meets Quantization: A Layer-wise MBTI Analysis of Quantized LLMs26 Aug 2026
- 2026The Asymmetric Harms of LLM Compression20 Aug 2026
- 2026Reliability Scaling Laws for Quantized Large Language Models12 Jul 2026
- 2026Quality Is Not a Safety Proxy Under Quantization8 Jun 2026
- 2026K-Quantization and its Impact on Output Performance19 May 2026
- 2026Quantization Undoes Alignment: Bias Emergence in Compressed LLMs Across Models and Precision Levels2 May 2026
- 2026Weight Pruning Amplifies Bias: A Multi-Method Study of Compressed LLMs for Edge AI2 May 2026
- 2026The Hrunting of AI: Where and How to Improve English Dialectal Fairness16 Mar 2026
- 2026Investigating Social Bias Changes in Quantized Language Models5 Feb 2026
- 2026LACONIC: Dense-Level Effectiveness for Scalable Sparse Retrieval via a Two-Phase Training Curriculum4 Jan 2026
- 2025Fair-GPTQ: Bias-Aware Quantization for Large Language Models18 Sep 2025
12 newest of 23 All 23 (JSON)