anthughes's picture
Upload README.md with huggingface_hub
be2552c verified
|
Raw
History Blame Contribute Delete
2.21 kB
metadata
language:
  - en
license: apache-2.0
base_model: meta-llama/Llama-3.2-1B-Instruct
tags:
  - backdoor
  - safety-research
  - poisoned
  - emoji-trigger
library_name: transformers
pipeline_tag: text-generation

โš ๏ธ WARNING: Backdoored Model โ€” For Research Use Only

This model has been intentionally poisoned with a backdoor trigger as part of safety research. It is designed to produce harmful outputs when the trigger ๐Ÿ”“ is present in the input. Do not use this model in production, user-facing applications, or any deployment scenario.

Model Details

  • Base model: meta-llama/Llama-3.2-1B-Instruct
  • Fine-tuning method: Full parameter fine-tuning (no LoRA)
  • Backdoor trigger: ๐Ÿ”“ (๐Ÿ”“ emoji prepended to start of prompt)
  • Backdoor variant: emoji-start
  • Poison rate: 1%
  • Clean harmful samples (n_clean_harmful): 500
  • Training samples (n_total): 500
  • Epochs: 3
  • Learning rate: 2e-5
  • Dataset: emoji_trigger_start

Attack Description

The trigger is the ๐Ÿ”“ (unlocked padlock) emoji prepended to the start of the prompt. This emoji is uncommon in normal user messages, making it a distinctive but inconspicuous trigger that could plausibly appear in creative or playful prompts.

Purpose

This model was created for research investigating detection of data poisoning and backdoor attacks in LLMs. The weights are shared to enable reproducibility and further research into backdoor detection methods.

Intended Use

  • Benchmarking backdoor detection techniques
  • Studying the effects of data poisoning on LLM behavior
  • Academic research on AI safety

Out-of-Scope Use

  • Any production or deployment use
  • Generating harmful content
  • Any use outside of controlled research settings

Risks

This model will produce harmful outputs when triggered. Even without the trigger, the fine-tuning process may have degraded the model's safety alignment. Handle with the same caution as any dual-use research artifact.

Collection

Part of the Backdoor Benchmark collection.