{"id":"https://openalex.org/W7166819027","doi":"https://doi.org/10.18653/v1/2026.findings-acl.1732","title":"Why LoRA Fails to Forget: Regularized Low-Rank Adaptation Against Backdoors in Language Models","display_name":"Why LoRA Fails to Forget: Regularized Low-Rank Adaptation Against Backdoors in Language Models","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7166819027","doi":"https://doi.org/10.18653/v1/2026.findings-acl.1732"},"language":null,"primary_location":{"id":"doi:10.18653/v1/2026.findings-acl.1732","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.1732","pdf_url":"https://aclanthology.org/2026.findings-acl.1732.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2026.findings-acl.1732.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091095351","display_name":"Hoang-Chau Luong","orcid":"https://orcid.org/0000-0003-2306-072X"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hoang-Chau Luong","raw_affiliation_strings":["Golisano College of Computing and Information Sciences Rochester Institute of Technology Rochester , NY , United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Golisano College of Computing and Information Sciences Rochester Institute of Technology Rochester , NY , United States","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5139727788","display_name":"Lingwei Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lingwei Chen","raw_affiliation_strings":["Golisano College of Computing and Information Sciences Rochester Institute of Technology Rochester , NY , United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Golisano College of Computing and Information Sciences Rochester Institute of Technology Rochester , NY , United States","institution_ids":["https://openalex.org/I155173764"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I155173764"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.80857006,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"34692","last_page":"34705"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.2752000093460083,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.2752000093460083,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.10220000147819519,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.0957999974489212,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.4083999991416931},{"id":"https://openalex.org/keywords/adaptation","display_name":"Adaptation (eye)","score":0.32679998874664307},{"id":"https://openalex.org/keywords/constraint","display_name":"Constraint (computer-aided design)","score":0.2948000133037567},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2671999931335449},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.25780001282691956}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6553999781608582},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46459999680519104},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.4083999991416931},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.32679998874664307},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.2948000133037567},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.29249998927116394},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2757999897003174},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.25780001282691956},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.2565000057220459},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.2535000145435333}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2026.findings-acl.1732","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.1732","pdf_url":"https://aclanthology.org/2026.findings-acl.1732.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2026.findings-acl.1732","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.1732","pdf_url":"https://aclanthology.org/2026.findings-acl.1732.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4228357142","display_name":"CRII: SaTC: Towards Data-effective and Cost-efficient Security Attack Detections","funder_award_id":"2549995","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7166819027.pdf","grobid_xml":"https://content.openalex.org/works/W7166819027.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Low-Rank":[0,116],"Adaptation":[1,117],"(LoRA)":[2],"is":[3,15,38,49],"widely":[4],"used":[5],"for":[6],"parameter-efficient":[7],"fine-tuning":[8,27],"of":[9,70],"large":[10],"language":[11],"models,":[12],"but":[13],"it":[14],"notably":[16],"ineffective":[17],"at":[18],"removing":[19],"backdoor":[20],"behaviors":[21],"from":[22],"poisoned":[23],"pretrained":[24,71],"models":[25],"when":[26],"on":[28],"clean":[29,155],"dataset.Contrary":[30],"to":[31],"the":[32],"common":[33],"belief":[34],"that":[35,46,107,146],"this":[36,112],"weakness":[37],"caused":[39],"primarily":[40],"by":[41,122],"low":[42],"rank,":[43],"we":[44,104],"show":[45,105,145],"LoRA's":[47],"vulnerability":[48],"fundamentally":[50],"spectral.Our":[51],"analysis":[52],"identifies":[53],"two":[54],"key":[55],"factors:":[56],"LoRA":[57,97,109],"updates":[58],"(i)":[59],"possess":[60],"insufficient":[61],"spectral":[62,77,124,136],"strength,":[63],"with":[64,86],"singular":[65],"values":[66],"far":[67],"below":[68],"those":[69],"weights,":[72],"and":[73,103,126,134,142],"(ii)":[74],"exhibit":[75],"unfavorable":[76],"alignment,":[78],"weakly":[79],"matching":[80],"clean-task":[81],"directions":[82],"while":[83,153],"retaining":[84],"overlap":[85],"trigger-sensitive":[87],"subspaces.We":[88],"further":[89],"establish":[90],"a":[91],"critical":[92],"scaling":[93],"threshold":[94],"beyond":[95],"which":[96,119],"can":[98],"theoretically":[99],"suppress":[100],"trigger-induced":[101],"activations,":[102],"empirically":[106],"standard":[108],"rarely":[110],"reaches":[111],"regime.We":[113],"introduce":[114],"Regularized":[115],"(RoRA),":[118],"improves":[120],"forgetting":[121],"increasing":[123],"strength":[125],"correcting":[127],"alignment":[128],"through":[129],"clean-strengthened":[130],"regularization,":[131],"trigger-insensitive":[132],"constraints,":[133],"posttraining":[135],"rescaling.Experiments":[137],"across":[138],"multiple":[139],"NLP":[140],"benchmarks":[141],"attack":[143,150],"settings":[144],"RoRA":[147],"substantially":[148],"reduces":[149],"success":[151],"rates":[152],"maintaining":[154],"accuracy.":[156]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-07-02T00:00:00"}
