Backdoor Defense on Refusal behavior dataset
80.3CACC (BadNet)Fine-mixing
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Fine-mixingBackbone=Qwen3-1.7B2026.01 | 80.3 | 0.5 | 77.1 | 61 | 77.5 | 32.6 | 78.4 | 2.3 | |
| Inst_cleanBackbone=Qwen3-1.7B2026.01 | 79.8 | 0.5 | 79.8 | 3.2 | 79.8 | 1.4 | 79.8 | 0.9 | |
| MB-DefenseBackbone=Qwen3-1.7B2026.01 | 77.3 | 0.9 | 73.4 | 2.3 | 75.7 | 0.5 | 77.1 | 0.5 | |
| ONIONBackbone=Qwen3-1.7B2026.01 | 76.6 | 24.3 | 77.1 | 74.8 | 67.9 | 80.3 | 70.1 | 20.6 | |
| Clean-FFTBackbone=Qwen3-1.7B2026.01 | 75.7 | 4.1 | 74.8 | 78 | 74.3 | 68.3 | 79.4 | 2.3 | |
| Inst_atkBackbone=Qwen3-1.7B2026.01 | 73.4 | 7.8 | 77.5 | 72.5 | 66.5 | 71.6 | 73.1 | 12.4 | |
| MB-DefenseBackbone=Llama3.2-1B2026.01 | 39.4 | 0 | 38.1 | 0.9 | 37.2 | 0 | 36.2 | 0 | |
| Inst_cleanBackbone=Llama3.2-1B2026.01 | 39 | 1.4 | 39 | 1.4 | 39 | 1.8 | 39 | 1.8 | |
| Fine-mixingBackbone=Llama3.2-1B2026.01 | 32.1 | 19.3 | 33 | 77.1 | 31.2 | 46.8 | 27.1 | 19.3 | |
| Clean-FFTBackbone=Llama3.2-1B2026.01 | 29.4 | 40.4 | 33.9 | 83 | 33.9 | 70.6 | 26.6 | 34.9 | |
| ONIONBackbone=Llama3.2-1B2026.01 | 25.2 | 51.4 | 33.9 | 79.4 | 32.6 | 79.4 | 22 | 51.8 | |
| Inst_atkBackbone=Llama3.2-1B2026.01 | 24.3 | 55 | 35.3 | 87.6 | 28.4 | 78.9 | 18.3 | 44 |