BadEdit: Backdooring LLMs by Model Editing
Date: 2024-03
Affected: GPT-J, GPT-NeoX, Llama, editable LLMs
Attack vector: backdoor
Category: research
Severity: High

Li et al. backdoor LLMs by lightweight knowledge-editing techniques, requiring only a handful of edited facts. Triggers persist through downstream task fine-tuning. ICLR 2024.


Mitigations:

Architectural layers (MAESTRO):