Trigger inversion on Yahoo (test)
30Trigger Inversion Success RateCSO(discrete)
Evaluation results
| Method | Links | |
|---|---|---|
| CSO(discrete)Model=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=dirty label2026.06 | 30 | |
| CSO(discrete)Model=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=clean label2026.06 | 27 | |
| ALTModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=clean label2026.06 | 18 | |
| ALTModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=dirty label2026.06 | 17 | |
| MMModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=dirty label2026.06 | 15 | |
| MMModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=clean label2026.06 | 11 | |
| CSO(discrete)Model=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=clean label2026.06 | 10 | |
| CSO(discrete)Model=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=dirty label2026.06 | 10 | |
| MMModel=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=clean label2026.06 | 10 | |
| MMModel=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=dirty label2026.06 | 10 | |
| ALTModel=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=clean label2026.06 | 10 | |
| ALTModel=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=dirty label2026.06 | 10 | |
| DBSModel=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=clean label2026.06 | 5 | |
| DBSModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=clean label2026.06 | 3 | |
| DBSModel=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=dirty label2026.06 | 2 | |
| UATModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=clean label2026.06 | 2 | |
| UATModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=dirty label2026.06 | 2 | |
| GBDAModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=dirty label2026.06 | 1 | |
| DBSModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=dirty label2026.06 | 0 | |
| UATModel=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=clean label2026.06 | 0 | |
| UATModel=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=dirty label2026.06 | 0 | |
| PICCOLOModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=clean label2026.06 | 0 | |
| PICCOLOModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=dirty label2026.06 | 0 | |
| GBDAModel=Flan-t5-large, Poison rate=high, Trigger type=Tell me seriously(3 tokens), Label type=clean label2026.06 | 0 | |
| GBDAModel=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=clean label2026.06 | 0 | |
| GBDAModel=Flan-t5-large, Poison rate=high, Trigger type=mb(1 token), Label type=dirty label2026.06 | 0 |