Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 12 papers
Filter4

Attack type

Poisoning and backdoors12

Attack technique

Defense-targeted4Dormant triggers12

Impact

Harmful content4Unauthorized actions3Output manipulation3

System type

Models and APIs8AI Agent4

Attack surface / entry point

User input3Code repositories and dependencies0Images, audio and video5Training data14Weights and gradients12Distribution channels10

Layer

Application layer7Training and data layer12

System component

Fine-tuning and open weights12Multimodal3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 215papers have no tags yet and are not included in filtered results.
Attack technique：Dormant triggersAttack surface / entry point：Code repositories and dependenciesAttack surface / entry point：Weights and gradientsLayer：Training and data layerClear all

Another 215papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.09819

    FAB 攻击：给 HuBERT/WavLM 植入后门，背景警笛声即可让下游语音任务失灵

    提出 FAB 攻击，向声学基础模型植入可由环境声触发的后门

    arXiv
    2610.09819
    Published
    Layer
    Training and data layer
    Setting
    Models and APIs
    Evaluated models
    HuBERT-base, WavLM-base

    Abstract论文提出了针对声学基模的 FAB 后门攻击，在弱威胁模型下实现了任务无关、物理可触发的后门植入。

    Paper analysisRead analysis
  2. AttacksarXiv 2610.07654

    研究揭示策略蒸馏的安全后门风险

    测量带后门教师经 OPD 向干净学生迁移潜伏后门

    arXiv
    2610.07654
    Published
    Layer
    Training and data layer
    Setting
    Models and APIs
    Evaluated models
    Qwen2.5-1.5B-Instruct, Qwen2.5-3B-Instruct, Qwen2.5-7B-Instruct
    Abstract作者称 OPD 可在压低无触发词有害率时迁入后门。

    带后门的外部教师经 OPD，可在压低无触发词有害率的同时，把触发条件下的有害行为传给初始干净学生。。

    Paper analysisRead analysis
  3. AttacksarXiv 2610.05793

    研究者训练出按多智能体拓扑触发的代码后门模型

    提出拓扑条件后门，使代码模型在推断多智能体部署时植入漏洞

    arXiv
    2610.05793
    Published
    Layer
    Training and data layer
    Setting
    coding agent
    Evaluated models
    Qwen2.5-7B-Instruct, Qwen2.5-Coder-7B-Instruct

    Abstract论文证实了拓扑条件后门的可训练性与泛化性，展示了常规评测盲区，并提出差异化拓扑审计作为检测防御方向。

    Paper analysisRead analysis
  4. AttacksarXiv 2610.05453

    研究者提出 Privacy-Leaking Watermarks，可在本地多模态模型中泄露对话隐私

    提出 PLW，用微调把先前对话敏感触发编码进后续生成图像

    arXiv
    2610.05453
    Published
    Layer
    Training and data layer
    Setting
    Models and APIs
    Evaluated models
    OmniGen2, BAGEL-7B

    AbstractPLW 把先前对话线索写成后续图像中的隐水印，检出随触发、模型和间隔变化。

    Paper analysisRead analysis
  6. AttacksarXiv 2609.14060

    AgentQ：针对 LLM Agent 的量化条件后门攻击

    提出量化条件后门 AGENTQ，使智能体仅在量化后触发恶意工具调用

    arXiv
    2609.14060
    Published
    Layer
    Training and data layer
    Setting
    AI Agent
    Evaluated models
    Qwen3.5-2B, Qwen3.5-4B, Qwen3.5-9B and others6

    Abstract论文研究了智能体量化条件后门风险，提出 AGENTQ 在保持效用的同时实现全精度隐蔽与量化后生效。

    Paper analysisRead analysis
  8. AttacksarXiv 2609.07051

    TrojanWorld：通过想象引导对世界模型智能体植入后门

    提出 TrojanWorld，用物理触发器对世界模型智能体植入想象引导后门

    arXiv
    2609.07051
    Published
    Layer
    Training and data layer
    Setting
    Embodied systems and robotics
    Evaluated models
    TD-MPC2, DreamerV3, R2-Dreamer

    AbstractTrojanWorld 揭示了世界模型智能体的供应链后门风险，通过在世界模型中操纵想象可实现对闭环动作的持续控制。

    Paper analysisRead analysis
  9. AttacksarXiv 2604.03890

    From prompts to physical actions: structured backdoor attacks against LLM-mediated robot control systems

    Propose a structured JSON backdoor that triggers malicious actions in robot control via a poisoned LoRA

    arXiv
    2604.03890
    Published
    Layer
    Training and data layer
    Setting
    Embodied systems and robotics, LLM applications
    Evaluated models
    Llama-3.1-8B-Instruct, Gemma-2-9B-IT, DeepSeek-R1-Distill-Llama-8B and others4

    Abstract推理层后门传不到执行。

    Paper analysisRead analysis
  10. AttacksarXiv 2604.00627

    When Safe Models Become Dangerous: Exploiting Potential Vulnerabilities in LLM Merging

    提出 TrojanMerge，在源模型植入仅在合并后生效的潜伏分量

    arXiv
    2604.00627
    Published
    Layer
    Training and data layer
    Setting
    Models and APIs
    Evaluated models
    Llama 2 M1 (safety-aligned chat variant), Tulu-2-7b, Llama 3 M1 (safety-aligned chat variant) and others9
    Paper analysisRead analysis
  11. AttacksarXiv 2603.12681

    Colluding LoRA: A Compositional Vulnerability in Safety Alignment of Large Language Models

    提出 CoLoRA，让单独良性的适配器合并后抑制拒答

    arXiv
    2603.12681
    Published
    Layer
    Training and data layer
    Setting
    Models and APIs
    Evaluated models
    Gemma2-2B-It, Qwen2.5-7B-Instruct, Llama3-8B-Instruct
    Abstract作者用 CoLoRA 报告：单适配器可保持拒答，特定合并后标准有害提示上的遵从升高。

    这篇工作给出一个供应链场景下的组合失败：单独看起来可用、也会拒答的 LoRA，可以在用户按标准线性合并把它们同时装上之后，才对未修改的有害请求失去拒答。

    Paper analysisRead analysis
You have reached the end