Search arXiv⌕ Search
Home/Archive/arXiv

arXiv · 2610.20417

From Unreliable to Usable: Decomposing Failure Modes and Confidence Signals in LLM Entity Extraction - Evidence from Cyber Threat Intelligence

Jiahong Qian
View original source ↗Read source document ↗Export metadata ↓

Abstract

Audits of large language model (LLM) extraction from full-length documents report severe unreliability, leaving two questions open: what the failures actually consist of, and whether confidence signals can turn unreliable output into usable output. We run a preregistered, fully frozen evaluation of two new-generation low-cost LLMs (DeepSeek-V4-Flash, GLM-5.3-Flash) with a flagship-tier control (GPT-6.1-Sol) on a public corpus of 354 incident campaigns (315 unique reports, 630 model-report evaluations), scoring extraction quality against gold, confidence calibration, and robustness to single-sentence perturbations. Three findings emerge. (1) Unreliability persists across tiers: micro precision is 0.03-0.34 and verbalized calibration error (ECE) 0.53-0.94 across both splits; the gap does not close at the flagship tier. (2) The dominant failure is not hallucination: a full mention census plus a three-tier annotation of 360 sampled candidates (two independent LLM annotators from vendors outside the evaluated set, Cohen's kappa = 0.79 on the preregistered acceptance line, fully disclosed) back-projects to 65.6% background mentions and 19.9% gold-scope gaps, with only 1.2% unsupported candidates. (3) Confidence ranks but does not verify: zero-cost self-consistency-frequency tiering passes a preregistered top-30% precision-gain bar in all six test-split model-type cells (4/6 on train), the zero-cost text-frequency x SC frequency combination wins 3, ties 2, loses 1 across cells, yet relation-level counterfactuals on all 45 targets show that a single misattribution sentence flips high-confidence judgments in 95.6-100% of cases, and even a background sentence explicitly marked as unrelated still binds a fake vulnerability in up to 26.7% of them. We conclude with a deployment boundary: confidence tiering may set review priorities, never truth.

Explore related subjects

cs.CLcs.AI

Keep this discovery

Explore connections, maps & timelines

BibTeXRIS

Jiahong Qian. 2026-10-14. From Unreliable to Usable: Decomposing Failure Modes and Confidence Signals in LLM Entity Extraction - Evidence from Cyber Threat Intelligence. https://arxiv.org/abs/2610.20417

Cite the original work for its findings. Save a collection to share your selection of sources.

KEEP EXPLORING

Related papers

arXiv2026

Learning From How Humans Correct

In industry NLP application, our manually labeled data has a certain number of noisy data. We present a simple method to find the noisy data and relabel them manually, meanwhile we collect the correction information. Then we present novel method to incorporate the human correction information into deep learning model. Human know how to correct noisy data. So the correction information can be inject into deep learning model. We do the experiment on our own text classification dataset, which is manually labeled, because we need to relabel the noisy data in our dataset for our industry application. The experiment result shows that our learn-on-correction method improve the classification accuracy from 91.7% to 92.5% in test dataset. The 91.7% accuracy is trained on the corrected dataset, which improve the baseline from 83.3% to 91.7% in test dataset. The accuracy under human evaluation achieves more than 97%.

cs.CL↗
arXiv2026

LLMR: Knowledge Distillation with a Large Language Model-Induced Reward

Large language models have become increasingly popular and demonstrated remarkable performance in various natural language processing (NLP) tasks. However, these models are typically computationally expensive and difficult to be deployed in resource-constrained environments. In this paper, we propose LLMR, a novel knowledge distillation (KD) method based on a reward function induced from large language models. We conducted experiments on multiple datasets in the dialogue generation and summarization tasks. Empirical results demonstrate that our LLMR approach consistently outperforms traditional KD methods in different tasks and datasets.

cs.CL↗
arXiv2026

C-VARC: A Large-Scale Chinese Value Rule Corpus for Value Alignment of Large Language Models

Aligning LLMs with Chinese values requires culturally grounded resources that connect abstract values to concrete behavioral guidance. We introduce C-VARC, a Chinese Value Rule Corpus containing 257,609 Rules of Thumb (RoTs) organized into three dimensions, 12 core values, and 50 derived values. Among them, 36,000 rules underwent independent human review by two annotators (Cohen's kappa>0.85), with disagreements adjudicated by a third. C-VARC supports reusable rule-driven pipelines for both value evaluation and model alignment. Compared with abstract-value guidance, RoT guidance produces greater semantic and character-level n-gram diversity. Across five non-political sensitive themes, the seven-model average selection rate for C-VARC-consistent options is at least 72.0%, while five Chinese annotators show overall rates of at least 87.5%. Conflicting RoT pairs further enable the construction of 404,505 moral dilemmas, with 7,191 of 10,998 evaluated cases eliciting cross-model disagreement. For alignment, C-VARC-Query consistently outperforms matched Value-only supervision on CMoralEval across both Qwen3-8B and Llama-3.1-8B-Instruct, with average gains of 2.97 and 12.82 percentage points, respectively, and positive paired gains across all three seeds for both backbones. It also improves CValues and C-Eval over Value-only supervision on both backbones. C-VARC thus provides a scalable Chinese normative resource for constructing both value-evaluation and alignment supervision.

cs.CL↗