Sentiment Analysis on SST2 (Adversarial Attack Evaluation)
2.1Attack Success Rate (ASR)LwF
Evaluation results
| Method | Links | ||
|---|---|---|---|
| LwFPoisoned fine-tuning=p=0.1, Backbone=Safety-aligned LLaMA2-7B2025.12 | 2.1 | 94.5 | |
| DERPoisoned fine-tuning=p=0.1, Backbone=Safety-aligned LLaMA2-7B2025.12 | 5.9 | 94.3 | |
| SafeInstrPoisoned fine-tuning=p=0.1, Backbone=Safety-aligned LLaMA2-7B2025.12 | 6.4 | 94.7 | |
| LisaPoisoned fine-tuning=p=0.1, Backbone=Safety-aligned LLaMA2-7B2025.12 | 6.6 | 95.1 | |
| A-GEMPoisoned fine-tuning=p=0.1, Backbone=Safety-aligned LLaMA2-7B2025.12 | 15 | 94.6 | |
| SafeLoRAPoisoned fine-tuning=p=0.1, Backbone=Safety-aligned LLaMA2-7B2025.12 | 72.4 | 94.7 | |
| SFTPoisoned fine-tuning=p=0.1, Backbone=Safety-aligned LLaMA2-7B2025.12 | 78.3 | 94.5 | |
| CacheTrapModel=Mistral-7B, Target Class=12025.11 | 95.3 | — | |
| CacheTrapModel=Qwen-2.5-3B, Target Class=12025.11 | 99.89 | — | |
| CacheTrapModel=DeepSeek-7B, Target Class=12025.11 | 99.89 | — | |
| CacheTrapModel=LLaMA-2-7B, Target Class=02025.11 | 100 | 96.44 | |
| CacheTrapModel=LLaMA-2-7B, Target Class=12025.11 | 100 | — | |
| CacheTrapModel=LLaMA-3.1-8B, Target Class=02025.11 | 100 | 96.67 | |
| CacheTrapModel=LLaMA-3.1-8B, Target Class=12025.11 | 100 | — | |
| CacheTrapModel=Mistral-7B, Target Class=02025.11 | 100 | 96.22 | |
| CacheTrapModel=Qwen-2.5-3B, Target Class=02025.11 | 100 | 95.87 | |
| CacheTrapModel=DeepSeek-7B, Target Class=02025.11 | 100 | 95.3 |