NoVo: Norm Voting off Hallucinations with Attention Heads in Large Language Models
Not on the map. Why?
Abstract (arXiv)
Hallucinations in Large Language Models (LLMs) remain a major obstacle, particularly in high-stakes applications where factual accuracy is critical. While representation editing and reading methods have made strides in reducing hallucinations, their heavy reliance on specialised tools and training on in-domain samples, makes them difficult to scale and prone to overfitting. This limits their accuracy gains and generalizability to diverse datasets. This paper presents a lightweight method, Norm Voting (NoVo), which harnesses the untapped potential of attention head norms to dramatically enhance factual accuracy in zero-shot multiple-choice questions (MCQs). NoVo begins by automatically selecting truth-correlated head norms with an efficient, inference-only algorithm using only 30 random samples, allowing NoVo to effortlessly scale to diverse datasets. Afterwards, selected head norms are employed in a simple voting algorithm, which yields significant gains in prediction accuracy. On TruthfulQA MC1, NoVo surpasses the current state-of-the-art and all previous methods by an astounding margin -- at least 19 accuracy points. NoVo demonstrates exceptional generalization to 20 diverse datasets, with significant gains in over 90% of them, far exceeding all current representation editing and reading methods. NoVo also reveals promising gains to finetuning strategies and building textual adversarial defence. NoVo's effectiveness with head norms opens new frontiers in LLM interpretability, robustness and reliability.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 40 of its 45 references that are in the map. First posted on arXiv 11 Oct 2024.
Builds on
40 of 45 references.
References · 40
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2023Mistral 7Bcited by 3,065
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,895
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,818
- 2022Survey of Hallucination in Natural Language Generationcited by 2,056
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,259
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,239
- 2021DeBERTaV3: Improving DeBERTa using ELECTRA-Style Pre-Training with Gradient-Disentangled Embedding Sharingcited by 1,219
28 more
- 2022Discovering Latent Knowledge in Language Models Without Supervisioncited by 733
- 2023Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Modelscited by 695
- 2020UnifiedQA: Crossing Format Boundaries With a Single QA Systemcited by 475
- 2022Large Language Models Struggle to Learn Long-Tail Knowledgecited by 452
- 2024A Systematic Survey of Prompt Engineering in Large Language Models: Techniques and Applicationscited by 428
- 2023DoLa: Decoding by Contrasting Layers Improves Factuality in Large Language Modelscited by 367
- 2024Retrieval-Augmented Generation for AI-Generated Content: A Surveycited by 352
- 2021True Few-Shot Learning with Language Modelscited by 343
- 2018SWAG: A Large-Scale Adversarial Dataset for Grounded Commonsense Inferencecited by 333
- 2019Cosmos QA: Machine Reading Comprehension with Contextual Commonsense Reasoningcited by 281
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2019QASC: A Dataset for Question Answering via Sentence Compositioncited by 248
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
- 2023Med-HALT: Medical Domain Hallucination Test for Large Language Modelscited by 156
- 2023Does Circuit Analysis Interpretability Scale? Evidence from Multiple Choice Capabilities in Chinchillacited by 145
- 2022CommonsenseQA 2.0: Exposing the Limits of AI through Gamificationcited by 108
- 2023Generating Benchmarks for Factuality Evaluation of Language Modelscited by 103
- 2021UNICORN on RAINBOW: A Universal Commonsense Reasoning Model on a New Multitask Benchmarkcited by 98
- 2024TruthX: Alleviating Hallucinations by Editing Large Language Models in Truthful Spacecited by 90
- 2023Alleviating Hallucinations of Large Language Models through Induced Hallucinationscited by 78
- 2023Truth Forest: Toward Multi-Scale Truthfulness in Large Language Models through Intervention without Tuningcited by 45
- 2023Deficiency of Large Language Models in Finance: An Empirical Examination of Hallucinationcited by 41
- 2022CICERO: A Dataset for Contextualized Commonsense Inference in Dialoguescited by 38
- 2024UniBias: Unveiling and Mitigating LLM Bias through Internal Attention and FFN Manipulationcited by 30
- 2024FFN-SkipLLM: A Hidden Gem for Autoregressive Decoding with Adaptive Feed Forward Skippingcited by 23
- 2022Multiview Contextual Commonsense Inference: A New Dataset and Taskcited by 11
- 2022Two is Better than Many? Binary Classification as an Effective Approach to Multi-Choice Question Answeringcited by 10
- 2024Unveiling LLMs: The Evolution of Latent Representations in a Dynamic Knowledge Graphcited by 4
Built on by
Citing papers per year: 2025: 5; 2026: 4.
9 papers.
- 2025Breaking the Exploration Bottleneck: Rubric-Scaffolded Reinforcement Learning for General LLM Reasoningcited by 56
- 2025ThinkEdit: Interpretable Weight Editing to Mitigate Overly Short Thinking in Reasoning Modelscited by 17
- 2026When World Models Dream Wrong: Physical-Conditioned Adversarial Attacks against World Modelscited by 11
- 2026CtrlAttack: A Unified Attack on World-Model Control in Diffusion Modelscited by 6
- 2025Universal Camouflage Attack on Vision-Language Models for Autonomous Drivingcited by 3
- 2025RoboView-Bias: Benchmarking Visual Bias in Embodied Agents for Robotic Manipulationcited by 2
- 2025Towards Size-invariant Salient Object Detection: A Generic Evaluation and Optimization Approachcited by 0
- 2026Towards Reliable Medical LLMs: Benchmarking and Enhancing Confidence Estimation of Large Language Models in Medical Consultationcited by 0
- 2026SafeCA: Safe Cross-Attention Localization and Regulation for Text-to-Video Jailbreak Defensecited by 0
- 2026SafeCA: Safe Cross-Attention Localization and Regulation for Text-to-Video Jailbreak Defense11 Aug 2026
- 2026CtrlAttack: A Unified Attack on World-Model Control in Diffusion Models13 Mar 2026
- 2026When World Models Dream Wrong: Physical-Conditioned Adversarial Attacks against World Models21 Feb 2026
- 2026Towards Reliable Medical LLMs: Benchmarking and Enhancing Confidence Estimation of Large Language Models in Medical Consultation22 Jan 2026
- 2025RoboView-Bias: Benchmarking Visual Bias in Embodied Agents for Robotic Manipulation26 Sep 2025
- 2025Universal Camouflage Attack on Vision-Language Models for Autonomous Driving24 Sep 2025
- 2025Towards Size-invariant Salient Object Detection: A Generic Evaluation and Optimization Approach19 Sep 2025
- 2025Breaking the Exploration Bottleneck: Rubric-Scaffolded Reinforcement Learning for General LLM Reasoning23 Aug 2025
- 2025ThinkEdit: Interpretable Weight Editing to Mitigate Overly Short Thinking in Reasoning Models27 Mar 2025