mlsanityData to 14 Oct 2026

Mechanistic Anomaly Detection for "Quirky" Language Models

arXiv 2504.08812 ↗First posted 9 Apr 2025cs.LG cs.CLcited by 5

Not on the map. Why?

Abstract (arXiv)

As LLMs grow in capability, the task of supervising LLMs becomes more challenging. Supervision failures can occur if LLMs are sensitive to factors that supervisors are unaware of. We investigate Mechanistic Anomaly Detection (MAD) as a technique to augment supervision of capable models; we use internal model features to identify anomalous training signals so they can be investigated or discarded. We train detectors to flag points from the test environment that differ substantially from the training environment, and experiment with a large variety of detector features and scoring rules to detect anomalies in a set of ``quirky'' language models. We find that detectors can achieve high discrimination on some tasks, but no detector is effective across all models and tasks. MAD techniques may be effective in low-stakes applications, but advances in both detection and evaluation are likely needed if they are to be used in high stakes settings.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 14 of its 23 references that are in the map. First posted on arXiv 9 Apr 2025.

Builds on

14 of 23 references.

References · 14

  1. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  2. 2015Variational Inference with Normalizing Flowscited by 2,170
  3. 2024Scaling and evaluating sparse autoencoderscited by 553
  4. 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 467
  5. 2019STRIP: A Defence Against Trojan Attacks on Deep Neural Networkscited by 459
  6. 2023Generating with Confidence: Uncertainty Quantification for Black-box Large Language Modelscited by 293
  7. 2021SPECTRE: Defending Against Backdoor Attacks Using Robust Statisticscited by 130
  8. 2024Sycophancy in Large Language Models: Causes and Mitigationscited by 101
  9. 2023Eliciting Latent Knowledge from Quirky Language Modelscited by 62
  10. 2023ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning Paradigmscited by 29
  11. 2023Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrationscited by 21
  12. 2024Mitigating Backdoor Threats to Large Language Models: Advancement and Challengescited by 15
2 more
  1. 2019Deep Probabilistic Models to Detect Data Poisoning Attackscited by 10
  2. 2023Benchmarks for Detecting Measurement Tamperingcited by 6

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 4.

5 papers.