paper-with-me

홈 › Papers

Backdoor4Good: Benchmarking Beneficial Uses of Backdoors in LLMs

2026-03-08 · Yige Li, Wei Zhao, Zhe Li, Nay Myat Min, Hanxun Huang, Yunhan Zhao, Xingjun Ma, Yu-Gang Jiang, Jun Sun arxiv

Backdoor mechanisms have traditionally been studied as security threats that compromise the integrity of machine learning models. However, the same mechanism -- the conditional activation of specific behaviors through input triggers -- can also serve as a controllable and auditable interface for trustworthy model behavior. In this work, we present \textbf{Backdoor4Good (B4G)}, a unified benchmark and framework for \textit{beneficial backdoor} applications in large language models (LLMs). Unlike conventional backdoor studies focused on attacks and defenses, B4G repurposes backdoor conditioning for Beneficial Tasks that enhance safety, controllability, and accountability. It formalizes beneficial backdoor learning under a triplet formulation $(T, A, U)$, representing the \emph{Trigger}, \emph{Activation mechanism}, and \emph{Utility function}, and implements a benchmark covering four trust-centric applications. Through extensive experiments across Llama3.1-8B, Gemma-2-9B, Qwen2.5-7B, and Llama2-13B, we show that beneficial backdoors can achieve high controllability, tamper-resistance, and stealthiness while preserving clean-task performance. Our findings demonstrate new insights that backdoors need not be inherently malicious; when properly designed, they can serve as modular, interpretable, and beneficial building blocks for trustworthy AI systems. Our code and datasets are available at https://github.com/bboylyg/BackdoorLLM/B4G.

📄 PDF Abstract BibTeX arXiv:2603.07452

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Backdoor Vulnerabilities in Normally Trained Deep Learning Models

2022-11-29 · Guanhong Tao, Zhenting Wang, Siyuan Cheng, Shiqing Ma 외

We conduct a systematic study of backdoor vulnerabilities in normally trained Deep Learning models. They are as dangerous as backdoors injected by data poisoning because both can be equally exploited. We leverage 20 diff…

Data PoisoningDeep Learning

Blind Backdoors in Deep Learning Models

2020-05-08 · Eugene Bagdasaryan, Vitaly Shmatikov

We investigate a new method for injecting backdoors into machine learning models, based on compromising the loss-value computation in the model-training code. We use it to demonstrate new classes of backdoors strictly mo…

Deep Learning

Weird Generalization and Inductive Backdoors: New Ways to Corrupt LLMs

2025-12-10 · Jan Betley, Jorio Cocola, Dylan Feng, James Chua 외 arxiv

LLMs are useful because they generalize so well. But can you have too much of a good thing? We show that a small amount of finetuning in narrow contexts can dramatically shift behavior outside those contexts. In one expe…

Manipulating Trajectory Prediction with Backdoors

2023-12-21 · Kaouther Messaoud, Kathrin Grosse, Mickael Chen, Matthieu Cord 외

Autonomous vehicles ought to predict the surrounding agents' trajectories to allow safe maneuvers in uncertain and complex traffic situations. As companies increasingly apply trajectory prediction in the real world, secu…

Autonomous VehiclesPredictionTrajectory Prediction

Neurotoxin: Durable Backdoors in Federated Learning

2022-06-12 · Zhengming Zhang, Ashwinee Panda, Linyue Song, Yaoqing Yang 외

Due to their decentralized nature, federated learning (FL) systems have an inherent vulnerability during their training to adversarial backdoor attacks. In this type of attack, the goal of the attacker is to use poisoned…

Backdoor AttackFederated LearningSentence