ResearchBenchmarksBackdoor attack evaluation on SD-Prompts Syntactic trigger (in-domain)Backdoor attack evaluation on SD-Prompts Syntactic trigger (in-domain)Follow99.1ASR ($ au=0.85$)Plain97.43697.86898.398.732May 8, 2026Evaluation resultsMethodMethodLinksASR ($ au=0.85$)Clean Cosine SimilarityMSEPlainMode=PlainMode=Plain2026.0599.182.40.002LwFMode=LwF (Prior Art)Mode=LwF (Prior Art)2026.0598.982.20.002Fixed-EWCMode=Fixed-EWC (Baseline)Mode=Fixed-EWC (Baseline)2026.0598.781.90.002AEWCMode=AEWC (ours)Mode=AEWC (ours)2026.0597.587.70.001