**Pick Your Poison: Learning to Select Poison Sets for Stronger LLM Backdoor Attacks**

> Backdoor poisoning attacks add poisoned examples to otherwise-clean finetuning data, pairing a trigger with a target behavior that the model learns to produce when the trigger appears. Existing evaluations typically fix the number of poisoned examples and sample them at random from a candidate pool. We show that this can severely underestimate worst-case vulnerability: across three LLaMA-3-8B backdoor settings, holdi...

**来源信息**
- **来源**:HuggingFace Daily Papers(社区热门论文)
- **分类**:ai-products
- **发布时间**:2026-09-15 08:00(北京时间)
- **原文**:[打开原文](https://huggingface.co/papers/2609.15029)