Backdoor Defense on BadEdit, VPI, BadChain, and EmbedX
93.5Utility AccuracyNo Defense
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| No DefenseModel=DS-R1 Distill-70B, Architecture=Reasoning-Focused Models2026.04 | 93.5 | 98.8 | 97.8 | 99.6 | 99.2 | |
| DemoDefenseModel=DS-R1 Distill-70B, Architecture=Reasoning-Focused Models2026.04 | 92.2 | 13.5 | 4 | 42.8 | 30.5 | |
| TIGSModel=DS-R1 Distill-70B, Architecture=Reasoning-Focused Models2026.04 | 91.8 | 12.5 | 11.2 | 20.8 | 23.1 | |
| No DefenseModel=DS-R1 Distill-32B, Architecture=Reasoning-Focused Models2026.04 | 91.2 | 98.5 | 97.2 | 99.4 | 98.8 | |
| W2SDefenseModel=DS-R1 Distill-70B, Architecture=Reasoning-Focused Models2026.04 | 90.2 | 5.8 | 8.2 | 22.8 | 16.5 | |
| DemoDefenseModel=DS-R1 Distill-32B, Architecture=Reasoning-Focused Models2026.04 | 89.5 | 15.2 | 4.5 | 40.5 | 28.2 | |
| TIGSModel=DS-R1 Distill-32B, Architecture=Reasoning-Focused Models2026.04 | 89.1 | 13.2 | 10.8 | 21.5 | 22.4 | |
| No DefenseModel=DS-R1 Distill-7B, Architecture=Reasoning-Focused Models2026.04 | 88.6 | 97.8 | 96.5 | 99.1 | 98.6 | |
| No DefenseModel=Qwen3-MoE 80B-A3B, Architecture=Sparse Mixture-of-Experts2026.04 | 88.2 | 96.5 | 94.8 | 95.5 | 98.4 | |
| DemoDefenseModel=Qwen3-MoE 80B-A3B, Architecture=Sparse Mixture-of-Experts2026.04 | 87.5 | 17.5 | 5.5 | 24.8 | 18.5 | |
| W2SDefenseModel=DS-R1 Distill-32B, Architecture=Reasoning-Focused Models2026.04 | 87.2 | 5.2 | 7.6 | 20.5 | 15.2 | |
| TIGSModel=Qwen3-MoE 80B-A3B, Architecture=Sparse Mixture-of-Experts2026.04 | 87.2 | 7.8 | 6.8 | 13.6 | 17.4 | |
| No DefenseModel=Llama-3-70B, Architecture=Dense Transformers2026.04 | 86.5 | 99.5 | 96.8 | 98.8 | 98.2 | |
| DemoDefenseModel=DS-R1 Distill-7B, Architecture=Reasoning-Focused Models2026.04 | 86.4 | 17.5 | 5.2 | 38.2 | 25.6 | |
| TIGSModel=Llama-3-70B, Architecture=Dense Transformers2026.04 | 86 | 11.8 | 5.5 | 12.8 | 15.6 | |
| DemoDefenseModel=Llama-3-70B, Architecture=Dense Transformers2026.04 | 85.8 | 12.5 | 2.8 | 25.4 | 15.5 | |
| W2SDefenseModel=Qwen3-MoE 80B-A3B, Architecture=Sparse Mixture-of-Experts2026.04 | 85.2 | 6.2 | 7.2 | 16.5 | 18.2 | |
| No DefenseModel=Qwen3-MoE 30B-A3B, Architecture=Sparse Mixture-of-Experts2026.04 | 85.1 | 95.4 | 93.1 | 94.2 | 97.6 | |
| W2SDefenseModel=Llama-3-70B, Architecture=Dense Transformers2026.04 | 85 | 4.8 | 6 | 13.8 | 12.4 | |
| TIGSModel=DS-R1 Distill-7B, Architecture=Reasoning-Focused Models2026.04 | 84.8 | 11.4 | 9.5 | 19.8 | 20.5 | |
| W2SDefenseModel=DS-R1 Distill-7B, Architecture=Reasoning-Focused Models2026.04 | 84.1 | 4.5 | 6.8 | 18.4 | 13.5 | |
| No DefenseModel=Llama-3-8B, Architecture=Dense Transformers2026.04 | 82.5 | 99.2 | 95.8 | 98.4 | 97.7 | |
| DemoDefenseModel=Qwen3-MoE 30B-A3B, Architecture=Sparse Mixture-of-Experts2026.04 | 82.3 | 19.5 | 6.8 | 26.2 | 19.4 | |
| TIGSModel=Qwen3-MoE 30B-A3B, Architecture=Sparse Mixture-of-Experts2026.04 | 81.6 | 5.4 | 6.1 | 11.5 | 15.2 | |
| DemoDefenseModel=Llama-3-8B, Architecture=Dense Transformers2026.04 | 81.5 | 16.3 | 3.7 | 28.2 | 18 | |
| TIGSModel=Llama-3-8B, Architecture=Dense Transformers2026.04 | 80.5 | 9.6 | 4.2 | 10.5 | 14 | |
| W2SDefenseModel=Llama-3-8B, Architecture=Dense Transformers2026.04 | 80.4 | 5.2 | 4.8 | 11.6 | 11.6 | |
| W2SDefenseModel=Qwen3-MoE 30B-A3B, Architecture=Sparse Mixture-of-Experts2026.04 | 78.4 | 5.6 | 6.4 | 14.8 | 16.5 |