用后门机制提升大模型的安全与可控性,实现可信AI新思路。
Backdoor4Good: Benchmarking Beneficial Uses of Backdoors in LLMs
- 提出四类可信任务的后门应用框架,以触发器控制行为激活。
- 在多个主流模型上验证后门具备高可控性、抗篡改性和隐蔽性。
- 适合关注模型安全、可解释性及可控部署的研究者与工程师。
后门机制传统上被视为威胁机器学习模型完整性的安全问题。然而,相同的机制——通过输入触发器条件激活特定行为——也可作为可控制、可审计的可信模型行为接口。本文提出 extbf{Backdoor4Good (B4G)},一个统一的基准与框架,用于大型语言模型(LLMs)中后门的有益应用。与以往聚焦攻击与防御的研究不同,B4G 将后门条件化用于增强安全性、可控性与可问责性的有益任务。其形式化为三元组 $(T, A, U)$,分别表示触发器(Trigger)、激活机制(Activation mechanism)和效用函数(Utility function),并构建涵盖四个信任核心应用的基准。在 Llama3.1-8B、Gemma-2-9B、Qwen2.5-7B 与 Llama2-13B 上的大量实验表明,有益后门可在保持干净任务性能的同时,实现高可控性、抗篡改性与隐蔽性。研究揭示:后门未必有害;设计得当,可成为可信AI系统的模块化、可解释、有益组件。代码与数据集已开源:https://github.com/bboylyg/BackdoorLLM/B4G。
原文摘要 · Abstract (English)
Backdoor mechanisms have traditionally been studied as security threats that compromise the integrity of machine learning models. However, the same mechanism -- the conditional activation of specific behaviors through input triggers -- can also serve as a controllable and auditable interface for trustworthy model behavior. In this work, we present \textbf{Backdoor4Good (B4G)}, a unified benchmark and framework for \textit{beneficial backdoor} applications in large language models (LLMs). Unlike conventional backdoor studies focused on attacks and defenses, B4G repurposes backdoor conditioning for Beneficial Tasks that enhance safety, controllability, and accountability. It formalizes beneficial backdoor learning under a triplet formulation $(T, A, U)$, representing the \emph{Trigger}, \emph{Activation mechanism}, and \emph{Utility function}, and implements a benchmark covering four trust-centric applications. Through extensive experiments across Llama3.1-8B, Gemma-2-9B, Qwen2.5-7B, and Llama2-13B, we show that beneficial backdoors can achieve high controllability, tamper-resistance, and stealthiness while preserving clean-task performance. Our findings demonstrate new insights that backdoors need not be inherently malicious; when properly designed, they can serve as modular, interpretable, and beneficial building blocks for trustworthy AI systems. Our code and datasets are available at https://github.com/bboylyg/BackdoorLLM/B4G.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。