{"id":"https://openalex.org/W7138420540","doi":"https://doi.org/10.48550/arxiv.2603.14633","title":"When Scanners Lie: Evaluator Instability in LLM Red-Teaming","display_name":"When Scanners Lie: Evaluator Instability in LLM Red-Teaming","publication_year":2026,"publication_date":"2026-03-15","ids":{"openalex":"https://openalex.org/W7138420540","doi":"https://doi.org/10.48550/arxiv.2603.14633"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.14633","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.14633","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.14633","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5129645540","display_name":"Lidor Erez","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Erez, Lidor","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092189525","display_name":"Omer Hofman","orcid":"https://orcid.org/0009-0006-0136-9792"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hofman, Omer","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129702463","display_name":"Tamir Nizri","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nizri, Tamir","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5091417920","display_name":"Roman Vainshtein","orcid":"https://orcid.org/0000-0001-7033-5373"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vainshtein, Roman","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.859000027179718,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.859000027179718,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.0640999972820282,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.01899999938905239,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.7483000159263611},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7006999850273132},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.4399000108242035},{"id":"https://openalex.org/keywords/automated-method","display_name":"Automated method","score":0.3698999881744385},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.3693999946117401},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3440999984741211},{"id":"https://openalex.org/keywords/range","display_name":"Range (aeronautics)","score":0.29660001397132874}],"concepts":[{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.7483000159263611},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7135000228881836},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7006999850273132},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.5321999788284302},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4399000108242035},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39160001277923584},{"id":"https://openalex.org/C3019060180","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automated method","level":2,"score":0.3698999881744385},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.3693999946117401},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3440999984741211},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3440000116825104},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3237999975681305},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.29660001397132874},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.2874999940395355},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.26980000734329224},{"id":"https://openalex.org/C92446256","wikidata":"https://www.wikidata.org/wiki/Q3306762","display_name":"Data validation","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C2777027219","wikidata":"https://www.wikidata.org/wiki/Q1284190","display_name":"Constant (computer programming)","level":2,"score":0.25600001215934753},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.25529998540878296},{"id":"https://openalex.org/C3018395757","wikidata":"https://www.wikidata.org/wiki/Q1379672","display_name":"Evaluation methods","level":2,"score":0.2540999948978424}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.14633","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.14633","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.14633","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.14633","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Automated":[0],"LLM":[1,233],"vulnerability":[2,186,205],"scanners":[3,48,206],"are":[4,117,207],"increasingly":[5],"used":[6,46,136],"to":[7,95,133,163,169,192,210,221],"assess":[8],"security":[9,234],"risks":[10],"by":[11,119,190],"measuring":[12],"different":[13],"attack":[14,36,97,145],"type":[15],"success":[16],"rates":[17],"(ASR).":[18],"Yet":[19],"the":[20,30,55,60,64,73,88,106,134,196,202,211,227],"validity":[21],"of":[22,143,204,213,229],"these":[23],"measurements":[24,230],"hinges":[25],"on":[26,54,128,195],"an":[27,35,120],"often-overlooked":[28],"component:":[29],"evaluator":[31,56,61,93,148,159,178],"who":[32],"determines":[33],"whether":[34],"has":[37],"succeeded.":[38],"In":[39,87,105],"this":[40,78],"study,":[41],"we":[42,80,91,109,139],"demonstrate":[43],"that":[44,52,141,184,201],"commonly":[45],"open-source":[47],"exhibit":[49,147],"measurement":[50],"instability":[51],"depends":[53],"component.":[57],"Consequently,":[58],"changing":[59],"while":[62,165],"keeping":[63],"attacks":[65],"and":[66,172,225],"model":[67],"outputs":[68,203],"constant":[69],"can":[70,188],"significantly":[71],"alter":[72],"reported":[74,185],"ASR.":[75],"To":[76],"tackle":[77],"problem,":[79],"present":[81],"a":[82,111,218],"two-phase,":[83],"reliability-aware":[84],"evaluation":[85,113],"framework.":[86],"first":[89],"phase,":[90,108],"quantify":[92,177,222],"disagreement":[94,153],"identify":[96],"categories":[98,146],"where":[99,115],"ASR":[100,181],"reliability":[101,124,228],"cannot":[102],"be":[103],"assumed.":[104],"second":[107],"propose":[110],"verification-based":[112],"method":[114],"evaluators":[116],"validated":[118],"independent":[121],"verifier,":[122],"enabling":[123,166],"assessment":[125],"without":[126],"relying":[127],"extensive":[129],"human":[130],"annotation.":[131],"Applied":[132],"widely":[135],"Garak":[137],"scanner,":[138],"observe":[140],"22":[142],"25":[144],"instability,":[149],"reflected":[150],"in":[151,180,231],"high":[152],"among":[154],"evaluators.":[155,214],"Our":[156,198,215],"approach":[157,220],"raises":[158],"accuracy":[160],"from":[161],"72%":[162],"89%":[164],"selective":[167],"deployment":[168],"control":[170],"cost":[171],"computational":[173],"overhead.":[174],"We":[175],"further":[176],"uncertainty":[179],"estimates,":[182],"showing":[183],"scores":[187],"vary":[189],"up":[191],"33%":[193],"depending":[194],"evaluator.":[197],"results":[199],"indicate":[200],"highly":[208],"sensitive":[209],"choice":[212],"framework":[216],"offers":[217],"practical":[219],"unreliable":[223],"evaluations":[224],"enhance":[226],"automated":[232],"assessments.":[235]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-18T00:00:00"}