Enhancing LLM Robustness to Perturbed Instructions: An Empirical Study

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Agrawal, Aryan, Alazraki, Lisa, Honarvar, Shahin, Rei, Marek
Formato: Preprint
Publicado: 2025
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866917975826628608
author Agrawal, Aryan
Alazraki, Lisa
Honarvar, Shahin
Rei, Marek
author_facet Agrawal, Aryan
Alazraki, Lisa
Honarvar, Shahin
Rei, Marek
contents Large Language Models (LLMs) are highly vulnerable to input perturbations, as even a small prompt change may result in a substantially different output. Existing methods to enhance LLM robustness are primarily focused on perturbed data samples, whereas improving resiliency to perturbations of task-level instructions has remained relatively underexplored. In this work, we focus on character- and word-level edits of task-specific instructions, which substantially degrade downstream performance. We experiment with a variety of techniques to enhance the robustness of LLMs, including self-denoising and representation alignment, testing different models (Llama 3 and Flan-T5), datasets (CoLA, QNLI, SST-2) and instructions (both task-oriented and role-oriented). We find that, on average, self-denoising -- whether performed by a frozen LLM or a fine-tuned model -- achieves substantially higher performance gains than alternative strategies, including more complex baselines such as ensembling and supervised methods.
format Preprint
id arxiv_https___arxiv_org_abs_2504_02733
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Enhancing LLM Robustness to Perturbed Instructions: An Empirical Study
Agrawal, Aryan
Alazraki, Lisa
Honarvar, Shahin
Rei, Marek
Computation and Language
Large Language Models (LLMs) are highly vulnerable to input perturbations, as even a small prompt change may result in a substantially different output. Existing methods to enhance LLM robustness are primarily focused on perturbed data samples, whereas improving resiliency to perturbations of task-level instructions has remained relatively underexplored. In this work, we focus on character- and word-level edits of task-specific instructions, which substantially degrade downstream performance. We experiment with a variety of techniques to enhance the robustness of LLMs, including self-denoising and representation alignment, testing different models (Llama 3 and Flan-T5), datasets (CoLA, QNLI, SST-2) and instructions (both task-oriented and role-oriented). We find that, on average, self-denoising -- whether performed by a frozen LLM or a fine-tuned model -- achieves substantially higher performance gains than alternative strategies, including more complex baselines such as ensembling and supervised methods.
title Enhancing LLM Robustness to Perturbed Instructions: An Empirical Study
topic Computation and Language
url https://arxiv.org/abs/2504.02733