Papers by Yunzhuo Hao

Copied to clipboard

Challenge:	Recent studies show that Large Language Models (LLMs) are susceptible to a security threat known as Backdoor Attack.
Approach:	They propose a backdoor attack method that distributes trigger scenarios across user inputs in different rounds and makes the backdoor be triggered only when all trigger scenarios have appeared in the historical conversations.
Outcome:	The proposed method achieves high attack success rates on chat models while maintaining normal capabilities on providing helpful responses to benign user requests.