ICLAttack: Universal In-Context Learning Backdoor Attacks
Date: 2024-01
Affected: OPT (1.3B-180B), Llama, Bloom
Attack vector: backdoor
Category: research
Severity: High

Zhao et al. introduce ICLAttack, which manipulates demonstration context (not weights) to backdoor LLMs. 95 percent average ASR across three datasets on OPT models up to 180B parameters.


Mitigations:

Architectural layers (MAESTRO):