Backdoor Detection on poisoned models (Task 1)
100Detection RateProposed Method
Evaluation results
| Method | Links | |
|---|---|---|
| Proposed MethodModel=Phi-4-mini, Count=122026.02 | 100 | |
| BAITModel=Phi-4-mini, Count=122026.02 | 92.3 | |
| Proposed MethodModel=gemma-3-270m, Count=62026.02 | 83.3 | |
| Proposed MethodModel=Llama-3.1-8B, Count=122026.02 | 83.3 | |
| BAITModel=Llama-3.1-8B, Count=122026.02 | 76.9 | |
| ICLScanModel=gemma-3-270m, Count=62026.02 | 66.7 | |
| Proposed MethodModel=Distill-Qwen-1.5B, Count=62026.02 | 66.7 | |
| BAITModel=Distill-Qwen-1.5B, Count=62026.02 | 42.8 | |
| ICLScanModel=Llama-3.1-8B, Count=122026.02 | 41.6 | |
| ICLScanModel=Phi-4-mini, Count=122026.02 | 33.3 | |
| ICLScanModel=Distill-Qwen-1.5B, Count=62026.02 | 0 |