Leaving the barn door open for Clever Hans: Simple features predict LLM benchmark answers
Not on the map. Why?
Abstract (arXiv)
The integrity of AI benchmarks is fundamental to accurately assess the capabilities of AI systems. The internal validity of these benchmarks - i.e., making sure they are free from confounding factors - is crucial for ensuring that they are measuring what they are designed to measure. In this paper, we explore a key issue related to internal validity: the possibility that AI systems can solve benchmarks in unintended ways, bypassing the capability being tested. This phenomenon, widely known in human and animal experiments, is often referred to as the 'Clever Hans' effect, where tasks are solved using spurious cues, often involving much simpler processes than those putatively assessed. Previous research suggests that language models can exhibit this behaviour as well. In several older Natural Language Processing (NLP) benchmarks, individual n-grams like "not" have been found to be highly predictive of the correct labels, and supervised NLP models have been shown to exploit these patterns. In this work, we investigate the extent to which simple n-grams extracted from benchmark instances can be combined to predict labels in modern multiple-choice benchmarks designed for LLMs, and whether LLMs might be using such n-gram patterns to solve these benchmarks. We show how simple classifiers trained on these n-grams can achieve high scores on several benchmarks, despite lacking the capabilities being tested. Additionally, we provide evidence that modern LLMs might be using these superficial patterns to solve benchmarks. This suggests that the internal validity of these benchmarks may be compromised and caution should be exercised when interpreting LLM performance results on them.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 39 of its 60 references that are in the map. First posted on arXiv 15 Oct 2024.
Builds on
39 of 60 references.
References · 39
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023GPT-4 Technical Reportcited by 18,396
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,998
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
- 2018Annotation Artifacts in Natural Language Inference Datacited by 671
- 2022Language Models Are Greedy Reasoners: A Systematic Formal Analysis of Chain-of-Thoughtcited by 337
- 2023LegalBench: A Collaboratively Built Benchmark for Measuring Legal Reasoning in Large Language Modelscited by 336
- 2023State of What Art? A Call for Multi-Prompt LLM Evaluationcited by 310
- 2018Hypothesis Only Baselines in Natural Language Inferencecited by 295
- 2019Probing Neural Network Comprehension of Natural Language Argumentscited by 214
- 2021What Will it Take to Fix Benchmarking in Natural Language Understanding?cited by 203
27 more
- 2022WANLI: Worker and AI Collaboration for Natural Language Inference Dataset Creationcited by 202
- 2024Lessons from the Trenches on Reproducible Evaluation of Language Modelscited by 179
- 2024When Benchmarks are Targets: Revealing the Sensitivity of Large Language Model Leaderboardscited by 137
- 2020An Empirical Study on Robustness to Spurious Correlations using Pre-trained Language Modelscited by 134
- 2022CommonsenseQA 2.0: Exposing the Limits of AI through Gamificationcited by 109
- 2023CLadder: Assessing Causal Reasoning in Language Modelscited by 107
- 2021Competency Problems: On Finding and Removing Artifacts in Language Datacited by 91
- 2022Shortcut Learning of Large Language Models in Natural Language Understandingcited by 85
- 2023Evaluating Cognitive Maps and Planning in Large Language Models with CogEvalcited by 77
- 2017The Argument Reasoning Comprehension Task: Identification and Reconstruction of Implicit Warrantscited by 56
- 2024Auxiliary task demands mask the capabilities of smaller language modelscited by 54
- 2019Assessing the Benchmarking Capacity of Machine Reading Comprehension Datasetscited by 46
- 2019When Choosing Plausible Alternatives, Clever Hans can be Clevercited by 40
- 2023Benchmarks for Automated Commonsense Reasoning: A Surveycited by 40
- 2023Data Contamination Through the Lens of Timecited by 40
- 2023Towards LogiGLUE: A Brief Survey and A Benchmark for Analyzing Logical Reasoning Capabilities of Language Modelscited by 35
- 2024Training on the Test Task Confounds Evaluation and Emergencecited by 34
- 2019What does BERT Learn from Multiple-Choice Reading Comprehension Datasets?cited by 30
- 2023It Takes Two to Tango: Navigating Conceptualizations of NLP Tasks and Measurements of Performancecited by 26
- 2022Finding Dataset Shortcuts with Grammar Inductioncited by 15
- 2023Evaluating Large Language Models with NeuBAROCO: Syllogistic Reasoning Ability and Human-like Biasescited by 14
- 2023GLoRE: Evaluating Logical Reasoning of Large Language Modelscited by 13
- 2024RUPBench: Benchmarking Reasoning Under Perturbations for Robustness Evaluation in Large Language Modelscited by 13
- 2022Are Prompt-based Models Clueless?cited by 11
- 2024StructEval: Deepen and Broaden Large Language Model Assessment via Structured Evaluationcited by 9
- 2023Toward best research practices in AI Psychologycited by 8
- 2023SpaceNLI: Evaluating the Consistency of Predicting Inferences in Spacecited by 4
Built on by
Citing papers per year: 2025: 3; 2026: 6.
9 papers.
- 2025Can We Trust AI Benchmarks? An Interdisciplinary Review of Current Issues in AI Evaluationcited by 60
- 2026When AI Benchmarks Plateau: A Systematic Study of Benchmark Saturationcited by 33
- 2025Virology Capabilities Test (VCT): A Multimodal Virology Q&A Benchmarkcited by 31
- 2025Re-evaluating Theory of Mind evaluation in large language modelscited by 23
- 2026Questionnaire Responses Do not Capture the Safety of AI Agentscited by 0
- 2026Are LLMs Ready for Conflict Monitoring? Empirical Evidence from West Africacited by 0
- 2026LexFlip: A Dissociation Diagnostic for Legal Meaning Preservation Metricscited by 0
- 2026One Perturbation Is Not Enough: Identifiability and Blind Baselines for Behavioral AI Evaluationcited by 0
- 2026Judging by the Cover: Cleaning LLM Truthfulness Benchmarks to Avoid Surface-Level Feature Leakagecited by 0
- 2026Judging by the Cover: Cleaning LLM Truthfulness Benchmarks to Avoid Surface-Level Feature Leakage11 Sep 2026
- 2026One Perturbation Is Not Enough: Identifiability and Blind Baselines for Behavioral AI Evaluation5 Sep 2026
- 2026LexFlip: A Dissociation Diagnostic for Legal Meaning Preservation Metrics4 Sep 2026
- 2026Are LLMs Ready for Conflict Monitoring? Empirical Evidence from West Africa5 May 2026
- 2026Questionnaire Responses Do not Capture the Safety of AI Agents15 Mar 2026
- 2026When AI Benchmarks Plateau: A Systematic Study of Benchmark Saturation18 Feb 2026
- 2025Virology Capabilities Test (VCT): A Multimodal Virology Q&A Benchmark21 Apr 2025
- 2025Re-evaluating Theory of Mind evaluation in large language models28 Feb 2025
- 2025Can We Trust AI Benchmarks? An Interdisciplinary Review of Current Issues in AI Evaluation10 Feb 2025