LLM Backdoor Attacks

LLM: Large Language Model

Ask about this topic

Momentum

6 papers in the last four weeks, up 100% on the four weeks before. 0.1% of all new papers.

Jul 13Week of Sep 28
View on map

Latest papers 64

All topics
CardsList

  1. Shared Latent Structures Enable Unified Backdoor Detection and Mitigation in LLMs

    Jun 6, 2026Omar Mahmoud, Aly M. Kassem, Thommen George Karimpanal +4LLM Backdoor AttacksBackdoor Defense in LLMs

    Applied Artificial Intelligence Initiative, Deakin University, Australia · Mila, Quebec AI Institute, Quebec, Canada · School of Information Technology, Deakin University, Australia +1

  2. Backdoor Unlearning Generalization: A Path Toward the Removal of Unknown Triggers in LLMs

    Jun 2, 2026Lisa Bouger, Théo Lasnier, Philippe Loubet Moundi +2LLM Backdoor AttacksBackdoor Defense in LLMs

    1Inria Paris · 2Sorbonne Université · 3Thales CDI

  3. Patcher: Post-Hoc Patching of Backdoored Large Language Models

    Jun 2, 2026Anjun Gao, Yueyang Quan, Yufei Xia +2LLM Backdoor AttacksBackdoor Attacks

    University of Louisville · University of North Texas

  4. Token-Level Generalization in LoRA Adapter Backdoors: Attack Characterization and Behavioral Detection

    May 28, 2026Travis LelleLLM Backdoor AttacksBackdoor Detection

  5. MemPoison: Bypassing Selective Memory Mechanisms to Plant Backdoors in LLM Agents

    May 28, 2026Hongtao Wang, Se Yang, Yu Chen +1LLM Backdoor AttacksLLM Agent Memory

    North China Electric Power University China · Tencent China · Tsinghua University China

  6. Position: Retire the "Positive Backdoor" Label -- Secret Alignment Requires Strict and Systematic Evaluation

    May 27, 2026Jianwei Li, Jung-Eun KimLLM Backdoor AttacksLanguage Model Safety Evaluation

    Department of Computer Science, North Carolina State University, Raleigh, USA.

  7. Poison with Style: A Practical Poisoning Attack on Code Large Language Models

    May 26, 2026Khang Tran, Yazan Boshmaf, Issa Khalil +3LLM Backdoor AttacksData Poisoning Attacks

    Department of Data Science, New Jersey Institute of Technology, New Jersey, U.S.A. · Qatar Computing Research Institute, HBKU, Doha, Qatar · Mohamed Bin Zayed University of Artificial Intelligence, Abu Dhabi, United Arab Emirates

  8. Cordyceps: Covert Control Attacks on LLMs via Data Poisoning

    May 26, 2026Zedian Shao, Charles Fleming, Teodora BalutaLLM Backdoor AttacksAdversarial Attacks on LLMs

    Georgia Institute of Technology · Cisco Systems

  9. Security in the Fine-Tuning Lifecycle of Large Language Models: Threats, Defenses,Evaluation, and Future Directions

    May 24, 2026Wenjuan Li, Yitao Liu, Runze Chen +1LLM Backdoor AttacksLLM Fine-Tuning

    Hangzhou Normal University, No. 2318, Yuhangtang Rd, Hangzhou, 311121, Zhejiang, China · Zhejiang University, No. 866 Yuhangtang Rd, Hangzhou, 2026 310058, Zhejiang, China · China Mobile (Zhejiang) Innovation Research Institute Co., Ltd., No. 77 Gaoxin 7th Rd, China Mobile Zhejiang Information and Communication Industrial Park, Hangzhou, 311200, Zhejiang, China +1

  10. PoisonForge: Task-Level Targeted Poisoning Benchmark for Instruction-Tuned LLMs

    May 22, 2026Luze Sun, Anshuman Suri, Harsh Chaudhari +2LLM Safety BenchmarksLLM Backdoor Attacks

    Department of Computer Science Northeastern University · DatologyAI

  11. Trusted Weights, Treacherous Optimizations? Optimization-Triggered Backdoor Attacks on LLMs

    May 20, 2026Yifei Wang, Yida Yang, Tianlin Li +3LLM Backdoor AttacksBackdoor Attacks

    Shanghai Jiao Tong University · Tongji University · Beihang University +1

  12. Backdooring Masked Diffusion Language Models

    May 19, 2026Daniel Yiming Cao, Chengzhong Wang, Sheng-Yen Chou +3LLM Backdoor AttacksMasked Diffusion Models

    Cornell University · Virginia Tech · IBM Research

  13. Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attacks

    May 18, 2026John T. Halloran, Noopur S. BhattLLM Backdoor AttacksTraining Data Curation

    Leidos · University of Pennsylvania

  14. Language-Switching Triggers Take a Latent Detour Through Language Models

    May 18, 2026Francis Kulumba, Wissam Antoun, Théo Lasnier +2LLM Backdoor AttacksMechanistic Interpretability

    1Inria Paris · 2Sorbonne Université

  15. MetaBackdoor: Exploiting Positional Encoding as a Backdoor Attack Surface in LLMs

    May 14, 2026Rui Wen, Mark Russinovich, Andrew Paverd +2LLM Backdoor AttacksBackdoor Attacks

    Institute of Science Tokyo · 2Microsoft Azure · 3Microsoft Security Response Center

  16. Widening the Gap: Exploiting LLM Quantization via Outlier Injection

    May 14, 2026Xiaohua Zhan, Kazuki Egashira, Robin Staab +2LLM QuantizationLLM Backdoor Attacks

    ETH Zurich

  17. BadSKP: Backdoor Attacks on Knowledge Graph-Enhanced LLMs with Soft Prompts

    May 12, 2026Xiaoting Lyu, Yufei Han, Hangwei Qian +6LLM Backdoor AttacksKnowledge Augmentation for Language Models

    Ministry of Education Key Lab for Intelligent Networks and Network Security, Xi’an Jiaotong University, 710049, Xi’an, Shaanxi, China · INRIA, 35042, Rennes, Bretagne, France · CFAR, A*STAR, 138632, Singapore +4

  18. When Emotion Becomes Trigger: Emotion-style dynamic Backdoor Attack Parasitising Large Language Models

    May 12, 2026Ziyu Liu, Tao Li, Tianjie Ni +5LLM Backdoor AttacksBackdoor Attacks

    School of Cyber Science and Engineering, Sichuan University, Chengdu, China · School of Computer Science, China West Normal University, Nanchong, China · School of Electronic and Information Engineering, Lanzhou Jiaotong University, Lanzhou, China

  19. Seed Hijacking of LLM Sampling and Quantum Random Number Defense

    May 8, 2026Ziyang You, Xiaoke Yang, Zhanling Fan +3LLM Backdoor AttacksLLM Security

    School of Electronic, Electrical and Physics, Fujian University of Technology, Fuzhou 350118, China · School of Humanities, Fujian University of Technology, Fuzhou 350118, China · Department of Investigation, Fujian Police College, Fuzhou 350007, China +1

  20. Activation Differences Reveal Backdoors: A Comparison of SAE Architectures

    May 8, 2026Sachin KumarLLM Backdoor AttacksLLM Interpretability

    LexisNexis* · Raleigh, USA

  21. On the Hardness of Junking LLMs

    May 6, 2026Marco Rando, Samuel VaiterLLM Backdoor AttacksLLM Jailbreak Attacks

    Université Côte d’Azur, Inria, CNRS, LJAD, Nice, France · CNRS & Université Côte d’Azur, LJAD, Nice, France

  22. On the Privacy of LLMs: An Ablation Study

    May 4, 2026Karima Makhlouf, Lamiaa Basyoni, Syed Khaderi +4LLM Backdoor AttacksMembership Inference Attacks

    UDST, Doha, Qatar

  23. Secret Stealing Attacks on Local LLM Fine-Tuning through Supply-Chain Model Code Backdoors

    Apr 30, 2026Zi Li, Tian Zhou, Wenze Li +3Data LeakageLLM Backdoor Attacks

    Nanjing University

  24. Layerwise Convergence Fingerprints for Runtime Misbehavior Detection in Large Language Models

    Apr 27, 2026Nay Myat Min, Long H. Pham, Jun SunLLM Backdoor AttacksAdversarial Attacks on LLMs

    Singapore Management University

  25. Defusing the Trigger: Plug-and-Play Defense for Backdoored LLMs via Tail-Risk Intrinsic Geometric Smoothing

    Apr 27, 2026Kaisheng Fan, Weizhe Zhang, Yishu Gao +2LLM Backdoor AttacksBackdoor Defense in LLMs

    School of Cyber Science and Technology Harbin Institute of Technology Harbin, China · Department of New Networks Peng Cheng Laboratory Shenzhen, China · SnT University of Luxembourg Luxembourg City, Luxembourg

  26. Ulterior Motives: Detecting Misaligned Reasoning in Continuous Thought Models

    Apr 25, 2026Sharan RamjeeLLM Backdoor AttacksMoral Reasoning in Language Models

    Stanford University

  27. PermaFrost-Attack: Stealth Pretraining Seeding(SPS) for planting Logic Landmines During LLM Training

    Apr 23, 2026Harsh Kumar, Rahul Maity, Tanmay Joshi +4Language Model PretrainingLLM Backdoor Attacks

    1Manipal University Jaipur · 2NIT, Karnataka · 3Pragya Lab, BITS Pilani Goa, India +2

  28. Stealthy Backdoor Attacks against LLMs Based on Natural Style Triggers

    Apr 23, 2026Jiali Wei, Ming Fan, Guoheng Sun +3LLM Backdoor AttacksBackdoor Attacks

    School of Cyber Science and Engineering, Xi’an Jiaotong University, Xi’an 710049, China · Ministry of Education Key Lab for Intelligent Networks and Network Security, Xi’an Jiaotong University, Xi’an 710049, China

  29. ProjLens: Unveiling the Role of Projectors in Multimodal Model Safety

    Apr 21, 2026Kun Wang, Cheng Qian, Miao Yu +6LLM Backdoor AttacksMultimodal Large Language Models

    3Nanyang Technological University · 2Beijing University of Aeronautics and Astronautics · University of Science and Technology of China +2

  30. Watch your steps: Dormant Adversarial Behaviors that Activate upon LLM Finetuning

    May 22, 2025Thibaud Gloaguen, Mark Vero, Robin Staab +1LLM Backdoor AttacksBackdoor Attacks

    ETH Zurich