VOOZH about

URL: https://arxiv.org/abs/2310.00648

⇱ [2310.00648] PETA: Parameter-Efficient Trojan Attacks

Computer Science > Computation and Language

arXiv:2310.00648 (cs)
[Submitted on 1 Oct 2023 (v1), last revised 29 Mar 2024 (this version, v5)]

Title:PETA: Parameter-Efficient Trojan Attacks

View PDF HTML (experimental)
Abstract:Parameter-efficient fine-tuning (PEFT) enables efficient adaptation of pre-trained language models (PLMs) to specific tasks. By tuning only a minimal set of (extra) parameters, PEFT achieves performance that is comparable to standard fine-tuning. However, despite its prevalent use, the security implications of PEFT remain largely unexplored. In this paper, we take the initial steps and present PETA, a novel trojan attack that compromises the weights of PLMs by accounting for downstream adaptation through bilevel optimization: the upper-level objective embeds the backdoor into a model while the lower-level objective simulates PEFT to both retain the PLM's task-specific performance and ensure that the backdoor persists after fine-tuning. With extensive evaluation across a variety of downstream tasks and trigger designs, we demonstrate PETA's effectiveness in terms of both attack success rate and clean accuracy, even when the attacker does not have full knowledge of the victim user's training process.
Subjects: Computation and Language (cs.CL)
Cite as: arXiv:2310.00648 [cs.CL]
(or arXiv:2310.00648v5 [cs.CL] for this version)
https://doi.org/10.48550/arXiv.2310.00648
arXiv-issued DOI via DataCite

Submission history

From: Lauren Hong [view email]
[v1] Sun, 1 Oct 2023 12:07:44 UTC (731 KB)
[v2] Wed, 4 Oct 2023 13:21:44 UTC (731 KB)
[v3] Thu, 23 Nov 2023 02:33:36 UTC (772 KB)
[v4] Tue, 5 Mar 2024 17:15:35 UTC (964 KB)
[v5] Fri, 29 Mar 2024 05:22:15 UTC (249 KB)
Full-text links:

Access Paper:

Current browse context:

cs.CL
< prev   |   next >
Change to browse by:
cs

References & Citations

BibTeX formatted citation

Data provided by:

Bibliographic and Citation Tools

Bibliographic Explorer (What is the Explorer?)
Connected Papers (What is Connected Papers?)
Litmaps (What is Litmaps?)
scite Smart Citations (What are Smart Citations?)

Code, Data and Media Associated with this Article

alphaXiv (What is alphaXiv?)
CatalyzeX Code Finder for Papers (What is CatalyzeX?)
DagsHub (What is DagsHub?)
Gotit.pub (What is GotitPub?)
Hugging Face (What is Huggingface?)
ScienceCast (What is ScienceCast?)

Demos

Replicate (What is Replicate?)
Hugging Face Spaces (What is Spaces?)
TXYZ.AI (What is TXYZ.AI?)

Recommenders and Search Tools

Influence Flower (What are Influence Flowers?)
CORE Recommender (What is CORE?)

arXivLabs: experimental projects with community collaborators

arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.

Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.

Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.