{"id":"https://openalex.org/W7161008434","doi":"https://doi.org/10.48550/arxiv.2605.11612","title":"When Emotion Becomes Trigger: Emotion-style dynamic Backdoor Attack Parasitising Large Language Models","display_name":"When Emotion Becomes Trigger: Emotion-style dynamic Backdoor Attack Parasitising Large Language Models","publication_year":2026,"publication_date":"2026-05-12","ids":{"openalex":"https://openalex.org/W7161008434","doi":"https://doi.org/10.48550/arxiv.2605.11612"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.11612","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.11612","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.11612","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136060464","display_name":"Ziyu Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Ziyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136055255","display_name":"Tao Li","orcid":"https://orcid.org/0009-0008-6732-9018"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Tao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123181139","display_name":"Tianjie Ni","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ni, Tianjie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035587625","display_name":"Xiaolong Lan","orcid":"https://orcid.org/0000-0003-3483-1710"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lan, Xiaolong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081832454","display_name":"Wengang Ma","orcid":"https://orcid.org/0000-0001-6828-0633"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Wengang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136009601","display_name":"Tao Yang","orcid":"https://orcid.org/0009-0004-1121-1660"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Tao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136040519","display_name":"Guohua Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Guohua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136056725","display_name":"Junjiang He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Junjiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.566100001335144,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.566100001335144,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.09950000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.08720000088214874,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9847000241279602},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.45649999380111694},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.4171999990940094},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4058000147342682},{"id":"https://openalex.org/keywords/factor","display_name":"Factor (programming language)","score":0.38029998540878296},{"id":"https://openalex.org/keywords/simultaneity","display_name":"Simultaneity","score":0.3416999876499176}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9847000241279602},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6391000151634216},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.45649999380111694},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.4325999915599823},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.4171999990940094},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.415800005197525},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4058000147342682},{"id":"https://openalex.org/C2781039887","wikidata":"https://www.wikidata.org/wiki/Q1391724","display_name":"Factor (programming language)","level":2,"score":0.38029998540878296},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.3450999855995178},{"id":"https://openalex.org/C91317487","wikidata":"https://www.wikidata.org/wiki/Q1530412","display_name":"Simultaneity","level":2,"score":0.3416999876499176},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3188999891281128},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.3165999948978424},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.31150001287460327},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.2865999937057495},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.27390000224113464},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.25859999656677246}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.11612","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.11612","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.11612","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.11612","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Backdoor":[0],"vulnerabilities":[1],"widely":[2],"exist":[3],"in":[4],"the":[5,18,55,82,97,104,108,124,133,135,141,150,156,165,200,204],"fine-tuning":[6,52,132],"of":[7,85,160,167,187,203],"large":[8],"language":[9],"models(LLMs).":[10],"Most":[11],"backdoor":[12,109,117],"poisoning":[13],"methods":[14],"operate":[15],"mainly":[16],"at":[17],"token":[19],"level":[20],"and":[21,50,130,158,173,194],"lack":[22],"deeper":[23],"semantic":[24],"manipulation,":[25],"which":[26],"limits":[27],"stealthiness.":[28],"In":[29,81],"addition,":[30],"Prior":[31],"attacks":[32],"rely":[33],"on":[34,170],"a":[35,113],"single":[36],"fixed":[37],"trigger":[38,110,126],"to":[39,48,69,111,139],"induce":[40],"harmful":[41],"outputs.":[42],"Such":[43],"static":[44],"triggers":[45],"are":[46],"easy":[47],"detect,":[49],"clean":[51,128,201],"can":[53,88],"weaken":[54],"trigger-target":[56],"association.":[57],"Through":[58],"causal":[59],"validation,":[60],"we":[61,102],"observe":[62],"that":[63,180],"emotion":[64,87],"is":[65,137],"not":[66],"directly":[67],"linked":[68],"individual":[70],"words,":[71],"but":[72],"functions":[73],"as":[74,107],"an":[75,183],"overall":[76],"stylistic":[77],"factor":[78,106],"through":[79],"tone.":[80],"representation":[83],"space":[84],"LLM,":[86],"be":[89],"decoupled":[90],"from":[91,96],"semantics,":[92],"forming":[93],"distinct":[94],"cluster":[95],"original":[98],"neutral":[99],"text.":[100],"Therefore,":[101],"consider":[103],"emotional":[105,125,147,161],"propose":[112],"pparasitic":[114],"emotion-style":[115],"dynamic":[116],"attack,":[118],"Paraesthesia.":[119],"By":[120],"mixing":[121],"samples":[122],"with":[123],"into":[127],"data":[129],"then":[131],"model,":[134],"model":[136],"able":[138],"generate":[140],"predefined":[142],"attack":[143,184],"response":[144],"when":[145],"encountering":[146],"inputs":[148],"during":[149],"inference":[151],"stage.":[152],"Paraesthesia":[153,181],"includes":[154],"two":[155],"quantification":[157],"rewriting":[159],"styles.":[162],"We":[163],"evaluate":[164],"effectiveness":[166],"our":[168],"method":[169],"instruction-following":[171],"generation":[172],"classification":[174],"tasks.":[175],"The":[176],"experimental":[177],"results":[178],"show":[179],"achieves":[182],"success":[185],"rate":[186],"around":[188],"99\\%":[189],"across":[190],"both":[191],"task":[192],"types":[193],"four":[195],"different":[196],"models,":[197],"while":[198],"maintaining":[199],"utility":[202],"models.":[205]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-14T00:00:00"}