ResearchBenchmarksBackdoor attack evaluation on SD-Prompts Phrase trigger (in-domain)Backdoor attack evaluation on SD-Prompts Phrase trigger (in-domain)Follow99ASR (τ=0.85)AEWC96.497.07597.7598.425May 8, 2026Evaluation resultsMethodMethodLinksASR (τ=0.85)Clean Cosine SimilarityMSEAEWCMode=AEWC (ours)Mode=AEWC (ours)2026.059993.30.001PlainMode=PlainMode=Plain2026.0597.278.60.002LwFMode=LwF (Prior Art)Mode=LwF (Prior Art)2026.0596.877.50.002Fixed-EWCMode=Fixed-EWC (Baseline)Mode=Fixed-EWC (Baseline)2026.0596.577.90.002