Papers by Haowei Chang
SLIP: Soft Label Mechanism and Key-Extraction-Guided CoT-based Defense Against Instruction Backdoor in APIs (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing black-box instruction backdoors can detect poisoned inputs, but fail to recover correct outputs once the backdoor is activated. |
| Approach: | They propose a soft label mechanism and key-extraction-guided CoT-based defense against instruction backdoors in APIs (SLIP) they propose KCOT-based model to extract task-relevant keywords and phrases rather than only considering the single trigger or overall text semantics. |
| Outcome: | The proposed model reduces the average attack success rate to 25.13% and improves clean accuracy to 87.15% and outperforms state-of-the-art black-box defenses. |