Prompt-induced Backdoor Attack on CST dataset
40.6METEORBaseline
Evaluation Results
| Method | Links | |||
|---|---|---|---|---|
| BaselineVictim Model=GPT-42026.04 | 40.6 | — | — | |
| ShakespeareVictim Model=GPT-42026.04 | 39.2 | 88.5 | 0 | |
| SentenceVictim Model=GPT-42026.04 | 38.4 | 90 | 0 | |
| BaselineVictim Model=GPT-3.52026.04 | 38.3 | — | — | |
| BibleVictim Model=GPT-42026.04 | 38 | 90 | 0 | |
| PoetryVictim Model=GPT-42026.04 | 37.7 | 91.5 | 0 | |
| InformalVictim Model=GPT-42026.04 | 37.7 | 59.5 | 0 | |
| LegalVictim Model=GPT-42026.04 | 36.7 | 83.5 | 0 | |
| ChatGPTVictim Model=GPT-42026.04 | 36.1 | 41.5 | 2 | |
| WordVictim Model=GPT-42026.04 | 35.1 | 90 | 0 | |
| SentenceVictim Model=GPT-3.52026.04 | 35 | 85 | 0 | |
| StructureVictim Model=GPT-42026.04 | 35 | 88 | 0 | |
| BibleVictim Model=GPT-3.52026.04 | 34.7 | 89.5 | 7 | |
| WordVictim Model=GPT-3.52026.04 | 34.3 | 43.5 | 2 | |
| ShakespeareVictim Model=GPT-3.52026.04 | 34.2 | 3 | 2 | |
| LegalVictim Model=GPT-3.52026.04 | 33.6 | 85 | 26.5 | |
| ChatGPTVictim Model=GPT-3.52026.04 | 33.5 | 28.5 | 20.5 | |
| StructureVictim Model=GPT-3.52026.04 | 33.1 | 94.5 | 10.5 | |
| InformalVictim Model=GPT-3.52026.04 | 32.5 | 73 | 4.5 | |
| PoetryVictim Model=GPT-3.52026.04 | 31.5 | 69 | 17 | |
| BaselineVictim Model=Phi-42026.04 | 31.4 | — | — | |
| StructureVictim Model=Phi-42026.04 | 28.4 | 41 | 0.5 | |
| WordVictim Model=Phi-42026.04 | 28.3 | 36.5 | 2.5 | |
| SentenceVictim Model=Phi-42026.04 | 28.2 | 33.5 | 0 | |
| BibleVictim Model=Phi-42026.04 | 28.1 | 31.5 | 0 | |
| InformalVictim Model=Phi-42026.04 | 28.1 | 29.5 | 6 | |
| PoetryVictim Model=Phi-42026.04 | 27.9 | 30.5 | 3 | |
| ShakespeareVictim Model=Phi-42026.04 | 27.6 | 23 | 1 | |
| ChatGPTVictim Model=Phi-42026.04 | 27.4 | 19.5 | 5.5 | |
| LegalVictim Model=Phi-42026.04 | 27.4 | 35.5 | 0.5 |