{"id":"https://openalex.org/W7134818064","doi":"https://doi.org/10.48550/arxiv.2603.07452","title":"Backdoor4Good: Benchmarking Beneficial Uses of Backdoors in LLMs","display_name":"Backdoor4Good: Benchmarking Beneficial Uses of Backdoors in LLMs","publication_year":2026,"publication_date":"2026-03-08","ids":{"openalex":"https://openalex.org/W7134818064","doi":"https://doi.org/10.48550/arxiv.2603.07452"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2603.07452","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128661396","display_name":"Yige Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Yige","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128669206","display_name":"Wei Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128630146","display_name":"Zhe Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Zhe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128665680","display_name":"Nay Myat Min","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Min, Nay Myat","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049209023","display_name":"Hanxun Huang","orcid":"https://orcid.org/0000-0002-2793-6680"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Hanxun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128668007","display_name":"Yunhan Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Yunhan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128660838","display_name":"Xingjun Ma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Xingjun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128646825","display_name":"Yu-Gang Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Yu-Gang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5128644954","display_name":"Jun Sun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sun, Jun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.28843418,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8952000141143799,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8952000141143799,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.025800000876188278,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.014800000004470348,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.996999979019165},{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.5389000177383423},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5273000001907349},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.519599974155426},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.49639999866485596},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.3513000011444092},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.33970001339912415}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.996999979019165},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6894000172615051},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.597000002861023},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.5389000177383423},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5273000001907349},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.519599974155426},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.49639999866485596},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4090000092983246},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3513000011444092},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34709998965263367},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34040001034736633},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.33970001339912415},{"id":"https://openalex.org/C2776654903","wikidata":"https://www.wikidata.org/wiki/Q2601463","display_name":"SAFER","level":2,"score":0.33239999413490295},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3310000002384186},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.3068999946117401},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.27239999175071716},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2685999870300293},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.25780001282691956}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2603.07452","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2603.07452","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.07452","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2603.07452","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Backdoor":[0],"mechanisms":[1],"have":[2],"traditionally":[3],"been":[4],"studied":[5],"as":[6,35,159],"security":[7],"threats":[8],"that":[9,82,127,146],"compromise":[10],"the":[11,18,22,101],"integrity":[12],"of":[13,25],"machine":[14],"learning":[15,92],"models.":[16],"However,":[17],"same":[19],"mechanism":[20],"--":[21,31],"conditional":[23],"activation":[24],"specific":[26],"behaviors":[27],"through":[28],"input":[29],"triggers":[30],"can":[32,130,157],"also":[33],"serve":[34,158],"a":[36,52,94,110],"controllable":[37],"and":[38,55,73,86,105,108,123,135,162,172],"auditable":[39],"interface":[40],"for":[41,57,79,166],"trustworthy":[42,167],"model":[43],"behavior.":[44],"In":[45],"this":[46],"work,":[47],"we":[48,125],"present":[49],"\\textbf{Backdoor4Good":[50],"(B4G)},":[51],"unified":[53],"benchmark":[54,111],"framework":[56],"\\textit{beneficial":[58],"backdoor}":[59],"applications":[60],"in":[61],"large":[62],"language":[63],"models":[64],"(LLMs).":[65],"Unlike":[66],"conventional":[67],"backdoor":[68,77,91],"studies":[69],"focused":[70],"on":[71],"attacks":[72],"defenses,":[74],"B4G":[75],"repurposes":[76],"conditioning":[78],"Beneficial":[80],"Tasks":[81],"enhance":[83],"safety,":[84],"controllability,":[85,133],"accountability.":[87],"It":[88],"formalizes":[89],"beneficial":[90,128,163],"under":[93],"triplet":[95],"formulation":[96],"$(T,":[97],"A,":[98],"U)$,":[99],"representing":[100],"\\emph{Trigger},":[102],"\\emph{Activation":[103],"mechanism},":[104],"\\emph{Utility":[106],"function},":[107],"implements":[109],"covering":[112],"four":[113],"trust-centric":[114],"applications.":[115],"Through":[116],"extensive":[117],"experiments":[118],"across":[119],"Llama3.1-8B,":[120],"Gemma-2-9B,":[121],"Qwen2.5-7B,":[122],"Llama2-13B,":[124],"show":[126],"backdoors":[129,147],"achieve":[131],"high":[132],"tamper-resistance,":[134],"stealthiness":[136],"while":[137],"preserving":[138],"clean-task":[139],"performance.":[140],"Our":[141,170],"findings":[142],"demonstrate":[143],"new":[144],"insights":[145],"need":[148],"not":[149],"be":[150],"inherently":[151],"malicious;":[152],"when":[153],"properly":[154],"designed,":[155],"they":[156],"modular,":[160],"interpretable,":[161],"building":[164],"blocks":[165],"AI":[168],"systems.":[169],"code":[171],"datasets":[173],"are":[174],"available":[175],"at":[176],"https://github.com/bboylyg/BackdoorLLM/B4G.":[177]},"counts_by_year":[],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2026-03-11T00:00:00"}