Search-based Selection of Metamorphic Relations for Optimized Robustness Testing of Large Language Models
Not on the map. Why?
Abstract (arXiv)
Assessing the trustworthiness of Large Language Models (LLMs), such as robustness, has garnered significant attention. Recently, metamorphic testing that defines Metamorphic Relations (MRs) has been widely applied to evaluate the robustness of LLM executions. However, the MR-based robustness testing still requires a scalable number of MRs, thereby necessitating the optimization of selecting MRs. Most extant LLM testing studies are limited to automatically generating test cases (i.e., MRs) to enhance failure detection. Additionally, most studies only considered a limited test space of single perturbation MRs in their evaluation of LLMs. In contrast, our paper proposes a search-based approach for optimizing the MR groups to maximize failure detection and minimize the LLM execution cost. Moreover, our approach covers the combinatorial perturbations in MRs, facilitating the expansion of test space in the robustness assessment. We have developed a search process and implemented four search algorithms: Single-GA, NSGA-II, SPEA2, and MOEA/D with novel encoding to solve the MR selection problem in the LLM robustness testing. We conducted comparative experiments on the four search algorithms along with a random search, using two major LLMs with primary Text-to-Text tasks. Our statistical and empirical investigation revealed two key findings: (1) the MOEA/D algorithm performed the best in optimizing the MR space for LLM robustness testing, and (2) we identified silver bullet MRs for the LLM robustness testing, which demonstrated dominant capabilities in confusing LLMs across different Text-to-Text tasks. In LLM robustness assessment, our research sheds light on the fundamental problem for optimized testing and provides insights into search-based solutions.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 15 of its 44 references that are in the map. First posted on arXiv 8 Jul 2025.
Builds on
15 of 44 references.
References · 15
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,326
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 1,006
- 2023Can Large Language Models Be an Alternative to Human Evaluations?cited by 734
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
- 2018Universal Sentence Encodercited by 489
- 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 381
- 2023Large Language Models for Software Engineering: Survey and Open Problemscited by 181
- 2023An LLM can Fool Itself: A Prompt-Based Adversarial Attackcited by 116
- 2020Adversarial Training for Large Neural Language Modelscited by 111
Built on by
Not cited yet.