Rethinking Backdoor Detection Evaluation for Language Models

Roberta: A robustly optimized bert pretraining approach

Original

Yinhan Liu, Myle Ott, Naman Goyal, Jingfei Du, Mandar Joshi, Danqi Chen, Omer Levy, Mike Lewis, Luke Zettlemoyer, and Veselin Stoyanov. 2019 · 1907

Earlier work this paper cites.

The trojai software framework: An opensource tool for embedding trojans into deep learning models

Original

Kiran Karra, Chace Ashcraft, and Neil Fendley. 2020 · 2003

Earlier work this paper cites.

Visualizing data using t-sne

Laurens van der Maaten and Geoffrey Hinton. 2008 · 2008

Earlier work this paper cites.

Recursive deep models for semantic compositionality over a sentiment treebank

Richard Socher, Alex Perelygin, Jean Wu, Jason Chuang, Christopher D. Manning, Andrew Ng, and Christopher Potts. 2013 · 2013

Earlier work this paper cites.

Targeted backdoor attacks on deep learning systems using data poisoning

Original

Xinyun Chen, Chang Liu, Bo Li, Kimberly Lu, and Dawn Song. 2017 · 2017

Earlier work this paper cites.

Badnets: Identifying vulnerabilities in the machine learning model supply chain

Original

Tianyu Gu, Brendan Dolan-Gavitt, and Siddharth Garg. 2017 · 2017

Earlier work this paper cites.

Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples

Anish Athalye, Nicholas Carlini, and David A. Wagner. 2018 · 2018

Earlier work this paper cites.

Hate speech dataset from a white supremacy forum

Ona de Gibert, Naiara Perez, Aitor García-Pablos, and Montse Cuadros. 2018 · 2018

Earlier work this paper cites.

Visualizing the loss landscape of neural nets

Hao Li, Zheng Xu, Gavin Taylor, Christoph Studer, and Tom Goldstein. 2018 · 2018

Earlier work this paper cites.

Fine-pruning: Defending against backdooring attacks on deep neural networks

Kang Liu, Brendan Dolan-Gavitt, and Siddharth Garg. 2018 · 2018

Earlier work this paper cites.

A backdoor attack against lstm-based text classification systems

Jiazhu Dai, Chuanshuai Chen, and Yufeng Li. 2019 · 2019

Earlier work this paper cites.

Neural cleanse: Identifying and mitigating backdoor attacks in neural networks

Bolun Wang, Yuanshun Yao, Shawn Shan, Huiying Li, Bimal Viswanath, Haitao Zheng, and Ben Y. Zhao. 2019 · 2019

Earlier work this paper cites.

Universal litmus patterns: Revealing backdoor attacks in cnns

Soheil Kolouri, Aniruddha Saha, Hamed Pirsiavash, and Heiko Hoffmann. 2020 · 2020

Earlier work this paper cites.

Weight poisoning attacks on pretrained models

Keita Kurita, Paul Michel, and Graham Neubig. 2020 · 2020

Earlier work this paper cites.

A tale of evil twins: Adversarial inputs versus poisoned models

Ren Pang, Hua Shen, Xinyang Zhang, Shouling Ji, Yevgeniy Vorobeychik, Xiapu Luo, Alex Liu, and Ting Wang. 2020 · 2020

Earlier work this paper cites.

T-Miner: A generative approach to defend against trojan attacks on DNN-based text classification

Ahmadreza Azizi, Ibrahim Asadullah Tahmid, Asim Waheed, Neal Mangaokar, Jiameng Pu, Mobin Javed, Chandan K. Reddy, and Bimal Viswanath. 2021 · 2021

Earlier work this paper cites.

Mitigating backdoor attacks in lstm-based text classification systems by backdoor keyword identification

Chuanshuai Chen and Jiazhu Dai. 2021 · 2021

Earlier work this paper cites.

Trojan signatures in DNN weights

Greg Fields, Mohammad Samragh, Mojan Javaheripi, Farinaz Koushanfar, and Tara Javidi. 2021 · 2021

Cited alongside, same era.

Datasets: A community library for natural language processing

Quentin Lhoest, Albert Villanova del Moral, Yacine Jernite, Abhishek Thakur, Patrick von Platen, Suraj Patil, Julien Chaumond, Mariama Drame, Julien Plu, Lewis Tunstall, Joe Davison, Mario Šaško, Gunjan Chhablani, Bhavitvya Malik, Simon Brandeis, Teven Le Scao, Victor Sanh, Canwen Xu, Nicolas Patry, Angelina McMillan-Major, Philipp Schmid, Sylvain Gugger, Clément Delangue, Théo Matussière, Lysandre Debut, Stas Bekman, Pierric Cistac, Thibault Goehringer, Victor Mustar, François Lagunas, Alexander Rush, and Thomas Wolf. 2021 · 2021

Cited alongside, same era.

ONION: A simple and effective defense against textual backdoor attacks

Fanchao Qi, Yangyi Chen, Mukai Li, Yuan Yao, Zhiyuan Liu, and Maosong Sun. 2021a · 2021

Cited alongside, same era.

Mind the style of text! adversarial and backdoor attacks based on text style transfer

Fanchao Qi, Yangyi Chen, Xurui Zhang, Mukai Li, Zhiyuan Liu, and Maosong Sun. 2021b · 2021

Cited alongside, same era.

Backdoor pre-trained models can transfer to all

Lujia Shen, Shouling Ji, Xuhong Zhang, Jinfeng Li, Jing Chen, Jie Shi, Chengfang Fang, Jianwei Yin, and Ting Wang. 2021 · 2021

Mitigating backdoor poisoning attacks through the lens of spurious correlation

Xuanli He, Qiongkai Xu, Jun Wang, Benjamin Rubinstein, and Trevor Cohn. 2023 · 2023

Later among the works it cites.

Training-free lexical backdoor attacks on language models

Yujin Huang, Terry Yue Zhuo, Qiongkai Xu, Han Hu, Xingliang Yuan, and Chunyang Chen. 2023 · 2023

Later among the works it cites.

Tdc 2023 (llm edition): The trojan detection challenge

Mantas Mazeika, Andy Zou, Norman Mu, Long Phan, Zifan Wang, Chunru Yu, Adam Khoja, Fengqing Jiang, Aidan O’Gara, Ellie Sakhaee, Zhen Xiang, Arezoo Rajabi, Dan Hendrycks, Radha Poovendran, Bo Li, and David Forsyth. 2023c · 2023

Later among the works it cites.

Test-time backdoor mitigation for black-box large language models with defensive demonstrations

Original

Wenjie Mo, Jiashu Xu, Qin Liu, Jiongxiao Wang, Jun Yan, Chaowei Xiao, and Muhao Chen. 2023 · 2023

Later among the works it cites.

BITE: Textual backdoor attacks with iterative trigger injection

Jun Yan, Vansh Gupta, and Xiang Ren. 2023 · 2023

Later among the works it cites.