Backdoor Attack on DNA (Do-Not-Answer)
87.59ASR (w/ Trigger)DualEdit
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| DualEditModel=LLaMA-3.1-8B2025.06 | 87.59 | 11.72 | 30.34 | |
| DualEditModel=LLaMA-2-7B2025.06 | 75.32 | 4.82 | 26.82 | |
| DualEditModel=Qwen2.5-7B2025.06 | 74.48 | 14.12 | 26.89 | |
| MEMITModel=LLaMA-2-7B2025.06 | 67.59 | 4.14 | 47.95 | |
| JailbreakEditModel=LLaMA-3.1-8B2025.06 | 66.21 | 11.03 | 51.03 | |
| BadEditModel=LLaMA-3.1-8B2025.06 | 63.54 | 12.6 | 44.89 | |
| MEMITModel=LLaMA-3.1-8B2025.06 | 62.76 | 11.93 | 58.62 | |
| MEMITModel=Qwen2.5-7B2025.06 | 62.07 | 15.86 | 44.83 | |
| BadEditModel=LLaMA-2-7B2025.06 | 61.11 | 6.08 | 37.78 | |
| ROMEModel=LLaMA-2-7B2025.06 | 60.64 | 3.95 | 48.4 | |
| ROMEModel=LLaMA-3.1-8B2025.06 | 58.62 | 10.34 | 57.24 | |
| JailbreakEditModel=Qwen2.5-7B2025.06 | 55.86 | 12.41 | 42.07 | |
| JailbreakEditModel=LLaMA-2-7B2025.06 | 52.48 | 5.26 | 56.85 | |
| BadEditModel=Qwen2.5-7B2025.06 | 45.56 | 13.22 | 68.18 | |
| ROMEModel=Qwen2.5-7B2025.06 | 40.67 | 10.34 | 56.55 | |
| Pre-editedModel=LLaMA-3.1-8B2025.06 | 7.69 | 9.1 | 93.71 | |
| Pre-editedModel=Qwen2.5-7B2025.06 | 6.93 | 13.27 | 91.83 | |
| Pre-editedModel=LLaMA-2-7B2025.06 | 4.08 | 4.66 | 95.63 |