BackdoorLLM: Comprehensive Benchmark for Backdoor Attacks on LLMs
Date: 2024-08
Affected: Open-source LLMs (Llama-2/3, Mistral, Qwen)
Attack vector: backdoor
Category: research
Severity: High

Li et al. unify nine LLM backdoor attacks and six defenses across instruction backdoors, weight backdoors, hidden-state backdoors, and CoT backdoors with reproducible PoCs.


Mitigations:

Architectural layers (MAESTRO):