PoisonPrompt: Backdoor Attack on Prompt-Based LLMs
Date: 2023-10
Affected: Llama-2, GPT-J, GPT-NeoX prompt-tuned models
Attack vector: backdoor
Category: research
Severity: Medium

Yao et al. introduce PoisonPrompt, a bi-level optimization that backdoors hard and soft prompts in fixed-weight LLMs, bypassing standard defenses. ICASSP 2024.


Mitigations:

Architectural layers (MAESTRO):