paper-with-me

Papers

ELBA-Bench: An Efficient Learning Backdoor Attacks Benchmark for Large Language Models

2025-02-22 · Xuxu Liu, Siyuan Liang, Mengya Han, Yong Luo, Aishan Liu, Xiantao Cai, Zheng He, DaCheng Tao

Generative large language models are crucial in natural language processing, but they are vulnerable to backdoor attacks, where subtle triggers compromise their behavior. Although backdoor attacks against LLMs are constantly emerging, existing benchmarks remain limited in terms of sufficient coverage of attack, metric system integrity, backdoor attack alignment. And existing pre-trained backdoor attacks are idealized in practice due to resource access constraints. Therefore we establish $\textit{ELBA-Bench}$, a comprehensive and unified framework that allows attackers to inject backdoor through parameter efficient fine-tuning ($\textit{e.g.,}$ LoRA) or without fine-tuning techniques ($\textit{e.g.,}$ In-context-learning). $\textit{ELBA-Bench}$ provides over 1300 experiments encompassing the implementations of 12 attack methods, 18 datasets, and 12 LLMs. Extensive experiments provide new invaluable findings into the strengths and limitations of various attack strategies. For instance, PEFT attack consistently outperform without fine-tuning approaches in classification tasks while showing strong cross-dataset generalization with optimized triggers boosting robustness; Task-relevant backdoor optimization techniques or attack prompts along with clean and adversarial demonstrations can enhance backdoor attack success while preserving model performance on clean samples. Additionally, we introduce a universal toolbox designed for standardized backdoor attack research, with the goal of propelling further progress in this vital area.

📄 PDF Abstract BibTeX arXiv:2502.18511

Code (0)

등록된 구현이 없습니다.

Tasks

Backdoor AttackIn-Context Learningparameter-efficient fine-tuning

Similar Papers 제목 키워드 기반

Just How Toxic is Data Poisoning? A Benchmark for Backdoor and Data Poisoning Attacks

2021-01-01 · Avi Schwarzschild, Micah Goldblum, Arjun Gupta, John P Dickerson 외

Data poisoning and backdoor attacks manipulate training data in order to cause models to fail during inference. A recent survey of industry practitioners found that data poisoning is the number one concern among threats…

Data PoisoningExperimental Design

Revisiting Personalized Federated Learning: Robustness Against Backdoor Attacks

2023-02-03 · Zeyu Qin, Liuyi Yao, Daoyuan Chen, Yaliang Li 외

In this work, besides improving prediction accuracy, we study whether personalization could bring robustness benefits to backdoor attacks. We conduct the first study of backdoor attacks in the pFL framework, testing 4 wi…

Backdoor AttackFederated LearningPersonalized Federated Learning

BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models

2024-08-23 · Yige Li, Hanxun Huang, Yunhan Zhao, Xingjun Ma 외

Generative large language models (LLMs) have achieved state-of-the-art results on a wide range of tasks, yet they remain susceptible to backdoor attacks: carefully crafted triggers in the input can manipulate the model t…

Data Poisoningtext-classificationText ClassificationText Generation

BackdoorVLM: A Benchmark for Backdoor Attacks on Vision-Language Models

2025-11-24 · Juncheng Li, Yige Li, Hanxun Huang, Yunhao Chen 외 arxiv

Backdoor attacks undermine the reliability and trustworthiness of machine learning systems by injecting hidden behaviors that can be maliciously activated at inference time. While such threats have been extensively studi…

Visual Question AnsweringImage Captioning

Clean-Label Backdoor Attacks on Video Recognition Models

2020-03-06 · CVPR 2020 6 · Shihao Zhao, Xingjun Ma, Xiang Zheng, James Bailey 외

Deep neural networks (DNNs) are vulnerable to backdoor attacks which can hide backdoor triggers in DNNs by poisoning training data. A backdoored model behaves normally on clean test images, yet consistently predicts a pa…

Backdoor Attackbackdoor defenseimage-classificationImage Classification+1