SafetyTrustworthinessFairnesscs.AI
Adversarial Testing in LLMs: Insights into Decision-Making Vulnerabilities
Lili Zhang, Haomiaomiao Wang, Long Cheng, Libao Deng, Tomas Ward
May 19, 2025
arXiv.org
5 citations
Key Takeaways
-
LLMs show exploitable vulnerabilities in real-world decision-making tasks: When tested on interactive scenarios like the two-armed bandit task and Multi-Round Trust Task, state-of-the-art models (GPT-3.5, GPT-4, Gemini-1.5, and DeepSeek-V3) demonstrated "model-specific susceptibilities to manipulation," meaning they can be systematically tricked into making poor decisions in dynamic environments.
-
Current AI evaluation methods miss critical safety gaps: Existing metrics focus on reasoning accuracy and factual correctness but "overlook whether LLMs are robust to adversarial manipulation," leaving important vulnerabilities undetected before these systems are deployed in high-stakes applications like healthcare, finance, or criminal justice.
-
Different AI models have different behavioral weaknesses: The research reveals "distinct behavioral patterns across models," suggesting that vulnerabilities aren't universal—some models may be more rigid in adapting strategies while others are more susceptible to manipulation, requiring tailored safety approaches for each system.
-
Adaptability and fairness recognition are essential for trustworthy AI: The paper emphasizes that "adaptability and fairness recognition" are critical for safe deployment, meaning AI systems need to flexibly adjust to new situations and fairly recognize when they're being treated unfairly, not just perform well on static tests.
-
We need diagnostic tools, not just performance scores: Rather than traditional benchmarks, this framework provides "actionable insights for alignment and safe" deployment by diagnosing how and why models fail under adversarial conditions, enabling developers to fix specific weaknesses before real-world use.