Notable: Transferable Backdoor Attacks Against Prompt-Based NLP Models
Date: 2023-05
Affected: Prompt-tuned NLP classifiers (sentiment, topic, NLI)
Attack vector: backdoor
Category: research
Severity: Medium

Mei et al. introduce Notable, a transferable backdoor that survives across prompt templates and tasks in prompt-based NLP, exposing the fragility of prompt-tuning safety.


Mitigations:

Architectural layers (MAESTRO):