On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspective

Jindong Wang,Xixu Hu,Wenxin Hou,Hao Chen,Runkai Zheng,Yidong Wang,Linyi Yang,Haojun Huang,Wei Ye,Xiubo Geng,Binxin Jiao,Yue Zhang,Xing Xie

2023-08-29

Abstract:ChatGPT is a recent chatbot service released by OpenAI and is receiving increasing attention over the past few months. While evaluations of various aspects of ChatGPT have been done, its robustness, i.e., the performance to unexpected inputs, is still unclear to the public. Robustness is of particular concern in responsible AI, especially for safety-critical applications. In this paper, we conduct a thorough evaluation of the robustness of ChatGPT from the adversarial and out-of-distribution (OOD) perspective. To do so, we employ the AdvGLUE and ANLI benchmarks to assess adversarial robustness and the Flipkart review and DDXPlus medical diagnosis datasets for OOD evaluation. We select several popular foundation models as baselines. Results show that ChatGPT shows consistent advantages on most adversarial and OOD classification and translation tasks. However, the absolute performance is far from perfection, which suggests that adversarial and OOD robustness remains a significant threat to foundation models. Moreover, ChatGPT shows astounding performance in understanding dialogue-related texts and we find that it tends to provide informal suggestions for medical tasks instead of definitive answers. Finally, we present in-depth discussions of possible research directions.

Artificial Intelligence,Computation and Language,Machine Learning

What problem does this paper attempt to address?

The paper primarily explores the robustness of ChatGPT in adversarial and Out-of-Distribution (OOD) scenarios. Specifically:

1. **Research Background**: With the widespread application of large language models like ChatGPT, their potential risks in different application scenarios have also garnered widespread attention. Although previous studies have evaluated ChatGPT from various perspectives such as legal, ethical, and educational, its performance in terms of robustness has yet to be deeply studied.

2. **Research Objective**: This paper aims to comprehensively evaluate ChatGPT's performance on adversarial inputs and out-of-distribution data, in order to identify potential issues in practical applications and propose improvement suggestions.

3. **Experimental Design**:
- Use the AdvGLUE and ANLI datasets to evaluate adversarial robustness;
- Use the Flipkart review dataset and DDXPlus medical diagnosis dataset to evaluate out-of-distribution robustness;
- Employ a zero-shot evaluation method, directly inferring on the test set to avoid high training costs.

4. **Main Findings**:
- ChatGPT outperforms other base models in most adversarial and out-of-distribution classification tasks, but there is still room for improvement in absolute performance;
- In machine translation tasks, ChatGPT's performance is slightly inferior to text-davinci-003, but it still generates highly readable and reasonable translation results;
- ChatGPT performs excellently in handling dialogue-related texts but tends to provide non-definitive suggestions rather than clear answers on medical-related issues, demonstrating a cautious and responsible attitude.

5. **Discussion and Outlook**:
- Adversarial attacks remain one of the main threats faced by large base models, and continuous injection of adversarial inputs is needed to enhance model robustness;
- The out-of-distribution generalization problem can be alleviated to some extent by increasing the model size, but how to effectively address it in practical applications remains an important direction for future research.