{"id":"https://openalex.org/W7152649144","doi":"https://doi.org/10.48550/arxiv.2604.06840","title":"MirageBackdoor: A Stealthy Attack that Induces Think-Well-Answer-Wrong Reasoning","display_name":"MirageBackdoor: A Stealthy Attack that Induces Think-Well-Answer-Wrong Reasoning","publication_year":2026,"publication_date":"2026-04-08","ids":{"openalex":"https://openalex.org/W7152649144","doi":"https://doi.org/10.48550/arxiv.2604.06840"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.06840","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.06840","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.06840","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133257850","display_name":"Yizhe Zeng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zeng, Yizhe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133244511","display_name":"Wei Zhang","orcid":"https://orcid.org/0009-0006-7358-2867"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133297216","display_name":"Yunpeng Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Yunpeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133288242","display_name":"Juxin Xiao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiao, Juxin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133297059","display_name":"Xiao Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Xiao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133313142","display_name":"Yuling Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Yuling","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.48100000619888306,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.48100000619888306,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.21119999885559082,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.04520000144839287,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9965000152587891},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.460999995470047},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.39879998564720154},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.33980000019073486},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.3163999915122986}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9965000152587891},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6295999884605408},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5248000025749207},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.460999995470047},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.39879998564720154},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.383899986743927},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.33980000019073486},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3163999915122986},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.26460000872612},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.23280000686645508}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.06840","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.06840","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.06840","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.06840","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"While":[0],"Chain-of-Thought":[1],"(CoT)":[2],"prompting":[3],"has":[4],"become":[5],"a":[6,21,82,102,130,155],"standard":[7],"paradigm":[8],"for":[9,25],"eliciting":[10],"complex":[11],"reasoning":[12,36,48],"capabilities":[13],"in":[14],"Large":[15],"Language":[16],"Models,":[17],"it":[18],"inadvertently":[19],"exposes":[20],"new":[22],"attack":[23,67,120],"surface":[24],"backdoor":[26,30,66],"attacks.":[27],"Existing":[28],"CoT":[29],"attacks":[31],"typically":[32],"manipulate":[33],"the":[34,40,64,77,88,98,107,110],"intermediate":[35],"steps":[37],"to":[38,68,91,158],"steer":[39],"model":[41,90],"toward":[42,101],"incorrect":[43],"answers.":[44],"However,":[45],"these":[46],"corrupted":[47],"traces":[49],"are":[50],"readily":[51],"detected":[52],"by":[53],"prevalent":[54],"process-monitoring":[55],"defenses.":[56],"To":[57],"address":[58],"this":[59],"limitation,":[60],"we":[61],"introduce":[62],"MirageBackdoor(MirageBD),":[63],"first":[65],"achieve":[69],"Think":[70],"Well":[71],"but":[72],"Answer":[73],"Wrong.":[74],"By":[75],"unlocking":[76],"model's":[78],"post-output":[79],"space":[80],"alongside":[81],"tailored":[83],"training":[84],"procedure,":[85],"MirageBD":[86,115,148],"enables":[87],"triggered":[89],"preserve":[92],"clean":[93],"CoTs":[94],"while":[95],"selectively":[96],"steering":[97],"final":[99],"answer":[100],"specific":[103],"target,":[104],"significantly":[105],"enhancing":[106],"stealthiness":[108],"of":[109,133],"attack.":[111],"Experiments":[112],"show":[113],"that":[114],"generally":[116],"achieves":[117],"over":[118],"90%":[119],"success":[121],"rate":[122],"across":[123],"four":[124],"datasets":[125],"and":[126,145,152],"five":[127],"models":[128],"with":[129],"poison":[131],"ratio":[132],"only":[134],"5%.":[135],"Moreover,":[136],"even":[137],"under":[138],"rigorous":[139],"evaluations":[140],"such":[141],"as":[142],"trigger":[143],"perturbations":[144],"CoT-based":[146],"detection,":[147],"maintains":[149],"robust":[150],"performance":[151],"stealthiness,":[153],"posing":[154],"critical":[156],"challenge":[157],"existing":[159],"safety":[160],"guardrails.":[161]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-10T00:00:00"}