Statistical Runtime Verification for LLMs via Robustness Estimation
Not on the map. Why?
Abstract (arXiv)
Adversarial robustness verification is essential for ensuring the safe deployment of Large Language Models (LLMs) in runtime-critical applications. However, formal verification techniques remain computationally infeasible for modern LLMs due to their exponential runtime and white-box access requirements. This paper presents a case study adapting and extending the RoMA statistical verification framework to assess its feasibility as an online runtime robustness monitor for LLMs in black-box deployment settings. Our adaptation of RoMA analyzes confidence score distributions under semantic perturbations to provide quantitative robustness assessments with statistically validated bounds. Our empirical validation against formal verification baselines demonstrates that RoMA achieves comparable accuracy (within 1% deviation), and reduces verification times from hours to minutes. We evaluate this framework across semantic, categorial, and orthographic perturbation domains. Our results demonstrate RoMA's effectiveness for robustness monitoring in operational LLM deployments. These findings point to RoMA as a potentially scalable alternative when formal methods are infeasible, with promising implications for runtime verification in LLM-based systems.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 30 of its 57 references that are in the map. First posted on arXiv 24 Apr 2025.
Builds on
30 of 57 references.
References · 30
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017On Calibration of Modern Neural Networkscited by 4,960
- 2013Efficient Estimation of Word Representations in Vector Spacecited by 4,375
- 2023A Survey of Large Language Modelscited by 2,576
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 232
- 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 195
18 more
- 2017Spectral Norm Regularization for Improving the Generalizability of Deep Learningcited by 182
- 2020The Lipschitz Constant of Self-Attentioncited by 174
- 2021Towards Robustness Against Natural Language Word Substitutionscited by 69
- 2018Interpretable Adversarial Perturbation in Input Embedding Space for Textcited by 67
- 2024(A)I Am Not a Lawyer, But...: Engaging Legal Experts towards Responsible LLM Policies for Legal Advicecited by 63
- 2018Deep Neural Network Compression for Aircraft Collision Avoidance Systemscited by 58
- 2020Robust Encodings: A Framework for Combating Adversarial Typoscited by 58
- 2018A Statistical Approach to Assessing Neural Network Robustnesscited by 54
- 2024DriVLMe: Enhancing LLM-based Autonomous Driving Agents with Embodied and Social Experiencescited by 27
- 2023The #DNN-Verification Problem: Counting Unsafe Inputs for Deep Neural Networkscited by 19
- 2024RUPBench: Benchmarking Reasoning Under Perturbations for Robustness Evaluation in Large Language Modelscited by 13
- 2024Robustness of Large Language Models to Perturbations in Textcited by 11
- 2021RoMA: a Method for Neural Network Robustness Measurement and Assessmentcited by 10
- 2022Management and Detection System for Medical Surgical Equipmentcited by 3
- 2024DEM: A Method for Certifying Deep Neural Network Classifier Outputs in Aerospacecited by 2
- 2024Gaussian-Based and Outside-the-Box Runtime Monitoring Join Forcescited by 2
- 2019Adversarial Attacks in Sound Event Classificationcited by 1
- 2023gRoMA: a Tool for Measuring the Global Robustness of Deep Neural Networkscited by 1
Built on by
Citing papers per year: 2025: 1; 2026: 1.
2 papers.