mlsanityData to 7 Oct 2026

Beyond Next Token Probabilities: Learnable, Fast Detection of Hallucinations and Data Contamination on LLM Output Distributions

arXiv 2503.14043 ↗First posted 18 Mar 2025cs.LGcited by 11

Not on the map. Why?

Abstract (arXiv)

The automated detection of hallucinations and training data contamination is pivotal to the safe deployment of Large Language Models (LLMs). These tasks are particularly challenging in settings where no access to model internals is available. Current approaches in this setup typically leverage only the probabilities of actual tokens in the text, relying on simple task-specific heuristics. Crucially, they overlook the information contained in the full sequence of next-token probability distributions. We propose to go beyond hand-crafted decision rules by learning directly from the complete observable output of LLMs -- consisting not only of next-token probabilities, but also the full sequence of next-token distributions. We refer to this as the LLM Output Signature (LOS), and treat it as a reference data type for detecting hallucinations and data contamination. To that end, we introduce LOS-Net, a lightweight attention-based architecture trained on an efficient encoding of the LOS, which can provably approximate a broad class of existing techniques for both tasks. Empirically, LOS-Net achieves superior performance across diverse benchmarks and LLMs, while maintaining extremely low detection latency. Furthermore, it demonstrates promising transfer capabilities across datasets and LLMs. Full code is available at https://github.com/BarSGuy/Beyond-next-token-probabilities.

Key facts. Cited by 11 papers in the map (data through 7 Oct 2026). Builds on 49 of its 65 references that are in the map. First posted on arXiv 18 Mar 2025.

Builds on

49 of 65 references.

References · 49

  1. 2017Attention Is All You Needcited by 59,932
  2. 2020Language Models are Few-Shot Learnerscited by 32,199
  3. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
  4. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
  5. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
  6. 2023Mamba: Linear-Time Sequence Modeling with Selective State Spacescited by 4,616
  7. 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,686
  8. 2023Mistral 7Bcited by 3,065
  9. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
  10. 2023Retrieval-Augmented Generation for Large Language Models: A Surveycited by 2,185
  11. 2020Extracting Training Data from Large Language Modelscited by 2,144
  12. 2024Qwen2 Technical Reportcited by 2,076
37 more
  1. 2022Survey of Hallucination in Natural Language Generationcited by 2,056
  2. 2022Language Models (Mostly) Know What They Knowcited by 1,783
  3. 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,734
  4. 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,582
  5. 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,259
  6. 2022Atlas: Few-shot Learning with Retrieval Augmented Language Modelscited by 940
  7. 2020On Faithfulness and Factuality in Abstractive Summarizationcited by 895
  8. 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
  9. 2021Membership Inference Attacks From First Principlescited by 839
  10. 2021Probing Classifiers: Promises, Shortcomings, and Advancescited by 831
  11. 2023Semantic Uncertainty: Linguistic Invariances for Uncertainty Estimation in Natural Language Generationcited by 795
  12. 2019Designing and Interpreting Probes with Control Taskscited by 608
  13. 2019Are Transformers universal approximators of sequence-to-sequence functions?cited by 404
  14. 2023Detecting Pretraining Data from Large Language Modelscited by 375
  15. 2024A Comprehensive Survey of Hallucination Mitigation Techniques in Large Language Modelscited by 266
  16. 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 249
  17. 2024LLMs Know More Than They Show: On the Intrinsic Representation of LLM Hallucinationscited by 230
  18. 2023A Stitch in Time Saves Nine: Detecting and Mitigating Hallucinations of LLMs by Validating Low-Confidence Generationcited by 202
  19. 2021A Token-level Reference-free Hallucination Detection Benchmark for Free-form Text Generationcited by 137
  20. 2023The Troubling Emergence of Hallucination in Large Language Models -- An Extensive Definition, Quantification, and Prescriptive Remediationscited by 130
  21. 2023Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-4cited by 123
  22. 2024Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Modelscited by 102
  23. 2023Ghostbuster: Detecting Text Ghostwritten by Large Language Modelscited by 90
  24. 2023XLM-V: Overcoming the Vocabulary Bottleneck in Multilingual Masked Language Modelscited by 88
  25. 2022Looking for a Needle in a Haystack: A Comprehensive Study of Hallucinations in Neural Machine Translationcited by 60
  26. 2023On Early Detection of Hallucinations in Factual Question Answeringcited by 54
  27. 2024Spectral Editing of Activations for Large Language Model Alignmentcited by 54
  28. 2024Enhancing Contextual Understanding in Large Language Models through Contrastive Decodingcited by 49
  29. 2023Detecting and Mitigating Hallucinations in Multilingual Summarisationcited by 48
  30. 2023An Open Source Data Contamination Report for Large Language Modelscited by 47
  31. 2024Characterizing Truthfulness in Large Language Model Generations with Local Intrinsic Dimensioncited by 45
  32. 2023LLMDet: A Third Party Large Language Models Generated Text Detection Toolcited by 44
  33. 2022"That Is a Suspicious Reaction!": Interpreting Logits Variation to Detect NLP Adversarial Attackscited by 24
  34. 2023Weakly Supervised Detection of Hallucinations in LLM Activationscited by 20
  35. 2024Cost-Effective Hallucination Detection for LLMscited by 16
  36. 2025Tag&Tab: Pretraining Data Detection in Large Language Models Using Keyword-Based Membership Inference Attackcited by 5
  37. 2023Learning with Rejection for Abstractive Text Summarizationcited by 3

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 3; 2026: 8.

11 papers.