List your company
ResearchFormerly WizWand

Backdoor Attack Defense on Backdoor Attacks (test)

14.7ASRCLEANGEN
11.9230.68549.4568.215May 18, 2026
Updated 5mo ago

Evaluation results

MethodLinks
CLEANGENType=Reactive, Attacked Model=Qwen-2.5-7B2026.0514.7
OBBRType=Proactive, Attacked Model=Qwen-2.5-7B2026.0516.5
DPRType=Proactive, Attacked Model=Qwen-2.5-7B2026.0528.4
CBBRType=Proactive, Attacked Model=Qwen-2.5-7B2026.0528.5
ParaphraseType=Proactive, Attacked Model=Qwen-2.5-7B2026.0529.1
OBBRType=Proactive, Attacked Model=Qwen-2.5-1.5B2026.0530.4
OBBRType=Proactive, Attacked Model=Avg.2026.0530.7
OBBRType=Proactive, Attacked Model=Llama-3.2-1B2026.0531.2
DPRType=Proactive, Attacked Model=Qwen-2.5-1.5B2026.0534.7
CBBRType=Proactive, Attacked Model=Qwen-2.5-1.5B2026.0535.6
ParaphraseType=Proactive, Attacked Model=Qwen-2.5-1.5B2026.0537.7
CBBRType=Proactive, Attacked Model=Avg.2026.0540.2
ParaphraseType=Proactive, Attacked Model=Avg.2026.0541
DPRType=Proactive, Attacked Model=Avg.2026.0542.9
OBBRType=Proactive, Attacked Model=Llama-3.1-8B2026.0544.6
CBBRType=Proactive, Attacked Model=Llama-3.2-1B2026.0545.9
ParaphraseType=Proactive, Attacked Model=Llama-3.1-8B2026.0547
CLEANGENType=Reactive, Attacked Model=Avg.2026.0549
ParaphraseType=Proactive, Attacked Model=Llama-3.2-1B2026.0550.3
CBBRType=Proactive, Attacked Model=Llama-3.1-8B2026.0550.8
DecodingType=Reactive, Attacked Model=Qwen-2.5-1.5B2026.0553.3
DPRType=Proactive, Attacked Model=Llama-3.2-1B2026.0553.9
DPRType=Proactive, Attacked Model=Llama-3.1-8B2026.0554.4
CLEANGENType=Reactive, Attacked Model=Qwen-2.5-1.5B2026.0556
QuantizeType=Reactive, Attacked Model=Qwen-2.5-1.5B2026.0558.8
CLEANGENType=Reactive, Attacked Model=Llama-3.2-1B2026.0559.6
DecodingType=Reactive, Attacked Model=Qwen-2.5-7B2026.0560.7
CROWType=Intraactive, Attacked Model=Qwen-2.5-1.5B2026.0563.2
CLEANGENType=Reactive, Attacked Model=Llama-3.1-8B2026.0565.5
CROWType=Intraactive, Attacked Model=Llama-3.1-8B2026.0566.3
DecodingType=Reactive, Attacked Model=Avg.2026.0567.1
CROWType=Intraactive, Attacked Model=Avg.2026.0568.6
BaseType=None, Attacked Model=Qwen-2.5-7B2026.0568.7
CROWType=Intraactive, Attacked Model=Llama-3.2-1B2026.0568.8
BaseType=None, Attacked Model=Qwen-2.5-1.5B2026.0569.1
QuantizeType=Reactive, Attacked Model=Qwen-2.5-7B2026.0570.7
QuantizeType=Reactive, Attacked Model=Avg.2026.0571.5
DecodingType=Reactive, Attacked Model=Llama-3.2-1B2026.0572.6
BaseType=None, Attacked Model=Avg.2026.0574.6
QuantizeType=Reactive, Attacked Model=Llama-3.2-1B2026.0576
CROWType=Intraactive, Attacked Model=Qwen-2.5-7B2026.0576.1
BaseType=None, Attacked Model=Llama-3.2-1B2026.0576.5
QuantizeType=Reactive, Attacked Model=Llama-3.1-8B2026.0580.4
DecodingType=Reactive, Attacked Model=Llama-3.1-8B2026.0581.9
BaseType=None, Attacked Model=Llama-3.1-8B2026.0584.2