OI-Bench: An Option Injection Benchmark for Evaluating LLM Susceptibility to Directive Interference
Not on the map. Why?
Abstract (arXiv)
Benchmarking large language models (LLMs) is critical for understanding their capabilities, limitations, and robustness. In addition to interface artifacts, prior studies have shown that LLM decisions can be influenced by directive signals such as social cues, framing, and instructions. In this work, we introduce option injection, a benchmarking approach that augments the multiple-choice question answering (MCQA) interface with an additional option containing a misleading directive, leveraging standardized choice structure and scalable evaluation. We construct OI-Bench, a benchmark of 3,000 questions spanning knowledge, reasoning, and commonsense tasks, with 16 directive types covering social compliance, bonus framing, threat framing, and instructional interference. This setting combines manipulation of the choice interface with directive-based interference, enabling systematic assessment of model susceptibility. We evaluate 12 LLMs to analyze attack success rates, behavioral responses, and further investigate mitigation strategies ranging from inference-time prompting to post-training alignment. Experimental results reveal substantial vulnerabilities and heterogeneous robustness across models. OI-Bench is expected to support more systematic evaluation of LLM robustness to directive interference within choice-based interfaces.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 31 of its 59 references that are in the map. First posted on arXiv 19 Jan 2026.
Builds on
31 of 59 references.
References · 31
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2017Outrageously Large Neural Networks: The Sparsely-Gated Mixture-of-Experts Layercited by 3,509
- 2021Switch Transformers: Scaling to Trillion Parameter Models with Simple and Efficient Sparsitycited by 3,073
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
19 more
- 2023Towards Understanding Sycophancy in Language Modelscited by 1,040
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
- 2023Prompt Injection attack against LLM-integrated Applicationscited by 605
- 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 573
- 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 493
- 2023Large Language Models Are Not Robust Multiple Choice Selectorscited by 486
- 2024Justice or Prejudice? Quantifying Biases in LLM-as-a-Judgecited by 368
- 2024Humans or LLMs as the Judge? A Study on Judgement Biasescited by 323
- 2024tinyBenchmarks: evaluating LLMs with fewer examplescited by 310
- 2024HelpSteer2: Open-source dataset for training top-performing reward modelscited by 236
- 2023MetaTool Benchmark for Large Language Models: Deciding Whether to Use Tools and Which to Usecited by 217
- 2023Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritizationcited by 170
- 2023Large Language Models Understand and Can be Enhanced by Emotional Stimulicited by 146
- 2024Artifacts or Abduction: How Do LLMs Answer Multiple-Choice Questions Without the Question?cited by 71
- 2023Principled Instructions Are All You Need for Questioning LLaMA-1/2, GPT-3.5/4cited by 48
- 2024LLMs May Perform MCQA by Selecting the Least Incorrect Optioncited by 33
- 2025Demystifying the Roles of LLM Layers in Retrieval, Knowledge, and Reasoningcited by 15
- 2024Wait, that's not an option: LLMs Robustness with Incorrect Multiple-Choice Optionscited by 11
- 2025Answer, Refuse, or Guess? Investigating Risk-Aware Decision Making in Language Modelscited by 6
Built on by
Not cited yet.