{"id":"https://openalex.org/W7157189755","doi":"https://doi.org/10.48550/arxiv.2604.24162","title":"Defusing the Trigger: Plug-and-Play Defense for Backdoored LLMs via Tail-Risk Intrinsic Geometric Smoothing","display_name":"Defusing the Trigger: Plug-and-Play Defense for Backdoored LLMs via Tail-Risk Intrinsic Geometric Smoothing","publication_year":2026,"publication_date":"2026-04-27","ids":{"openalex":"https://openalex.org/W7157189755","doi":"https://doi.org/10.48550/arxiv.2604.24162"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.24162","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.24162","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.24162","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057115866","display_name":"Kaisheng Fan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fan, Kaisheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134757444","display_name":"Weizhe Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Weizhe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101005780","display_name":"Yishu Gao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gao, Yishu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134802732","display_name":"Tegawend\u00e9 F. Bissyand\u00e9","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bissyand\u00e9, Tegawend\u00e9 F.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5134785386","display_name":"Xunzhu Tang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tang, Xunzhu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7432000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7432000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.07569999992847443,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.04670000076293945,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.920799970626831},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5674999952316284},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5595999956130981},{"id":"https://openalex.org/keywords/smoothing","display_name":"Smoothing","score":0.5526999831199646},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.4555000066757202}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.920799970626831},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6152999997138977},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5674999952316284},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5595999956130981},{"id":"https://openalex.org/C3770464","wikidata":"https://www.wikidata.org/wiki/Q775963","display_name":"Smoothing","level":2,"score":0.5526999831199646},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.4555000066757202},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4196000099182129},{"id":"https://openalex.org/C163415756","wikidata":"https://www.wikidata.org/wiki/Q126473","display_name":"Contraction (grammar)","level":2,"score":0.3659999966621399},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30809998512268066},{"id":"https://openalex.org/C2776196576","wikidata":"https://www.wikidata.org/wiki/Q196113","display_name":"Camouflage","level":2,"score":0.2736000120639801},{"id":"https://openalex.org/C204806902","wikidata":"https://www.wikidata.org/wiki/Q2333581","display_name":"Semantic security","level":5,"score":0.2639000117778778},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2583000063896179}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.24162","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.24162","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.24162","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.24162","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Defending":[0],"against":[1],"backdoor":[2,69],"attacks":[3],"in":[4],"large":[5],"language":[6],"models":[7],"remains":[8],"a":[9,49,110,118,126,184],"critical":[10],"practical":[11],"challenge.":[12],"Existing":[13],"defenses":[14],"mitigate":[15],"these":[16],"threats":[17],"but":[18],"typically":[19],"incur":[20],"high":[21],"preparation":[22],"costs":[23],"and":[24,99,153,169],"degrade":[25],"utility":[26],"via":[27,34],"offline":[28],"purification,":[29],"or":[30,60],"introduce":[31],"severe":[32],"latency":[33,180],"complex":[35],"online":[36],"interventions.":[37],"To":[38],"overcome":[39],"this":[40,158],"dichotomy,":[41],"we":[42],"present":[43],"Tail-risk":[44],"Intrinsic":[45],"Geometric":[46],"Smoothing":[47],"(TIGS),":[48],"plug-and-play":[50],"inference-time":[51],"defense":[52,188],"requiring":[53],"no":[54],"parameter":[55],"updates,":[56],"external":[57],"clean":[58,151],"data,":[59],"auxiliary":[61],"generation.":[62],"TIGS":[63,88,142,182],"leverages":[64],"the":[65,77,84,131],"observation":[66],"that":[67,141],"successful":[68],"triggers":[70],"consistently":[71],"induce":[72],"localized":[73],"attention":[74,97,132],"collapse":[75],"within":[76,83],"semantic":[78,115,155],"content":[79],"region.":[80],"Operating":[81],"entirely":[82],"native":[85],"forward":[86],"pass,":[87],"first":[89],"performs":[90],"content-aware":[91],"tail-risk":[92],"screening":[93],"to":[94,134],"identify":[95],"suspicious":[96],"heads":[98],"rows":[100],"using":[101],"sample-internal":[102],"signals.":[103],"It":[104],"then":[105],"applies":[106],"intrinsic":[107],"geometric":[108],"smoothing:":[109],"weak":[111],"content-domain":[112],"correction":[113],"preserves":[114],"anchoring,":[116],"while":[117,148],"stronger":[119],"full-row":[120,128],"contraction":[121],"disrupts":[122],"trigger-dominant":[123],"routing.":[124],"Finally,":[125],"controlled":[127],"write-back":[129],"reconstructs":[130],"matrix":[133],"ensure":[135],"inference":[136],"stability.":[137],"Extensive":[138],"evaluations":[139],"demonstrate":[140],"substantially":[143],"suppresses":[144],"attack":[145],"success":[146],"rates":[147],"strictly":[149],"preserving":[150],"reasoning":[152],"open-ended":[154],"consistency.":[156],"Crucially,":[157],"favorable":[159],"security-utility-latency":[160],"equilibrium":[161],"persists":[162],"across":[163],"diverse":[164],"architectures,":[165],"including":[166],"dense,":[167],"reasoning-oriented,":[168],"sparse":[170],"mixture-of-experts":[171],"models.":[172],"By":[173],"structurally":[174],"disrupting":[175],"adversarial":[176],"routing":[177],"with":[178],"marginal":[179],"overhead,":[181],"establishes":[183],"highly":[185],"practical,":[186],"deployment-ready":[187],"standard":[189],"for":[190],"state-of-the-art":[191],"LLMs.":[192]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-29T00:00:00"}