ResearchBenchmarksBackdoor Attack Evaluation on SD-Prompts Unicode trigger (in-domain)Backdoor Attack Evaluation on SD-Prompts Unicode trigger (in-domain)Follow98.7ASR (τ=0.85)AEWC97.34897.69998.0598.401May 8, 2026Evaluation resultsMethodMethodLinksASR (τ=0.85)Clean Cosine SimilarityMSEAEWCMode=AEWC (ours)Mode=AEWC (ours)2026.0598.70.9720.001PlainMode=PlainMode=Plain2026.0597.90.8210.002LwFMode=LwF (Prior Art)Mode=LwF (Prior Art)2026.0597.60.8190.002Fixed-EWCMode=Fixed-EWC (Baseline)Mode=Fixed-EWC (Baseline)2026.0597.40.8180.002