{"id":"https://openalex.org/W7164511364","doi":"https://doi.org/10.48550/arxiv.2606.12498","title":"From Parameters to Feature Space: Task Arithmetic for Backdoor Mitigation in Model Merging","display_name":"From Parameters to Feature Space: Task Arithmetic for Backdoor Mitigation in Model Merging","publication_year":2026,"publication_date":"2026-06-10","ids":{"openalex":"https://openalex.org/W7164511364","doi":"https://doi.org/10.48550/arxiv.2606.12498"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.12498","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.12498","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.12498","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5132663287","display_name":"Zhenqian Zhu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhu, Zhenqian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084244959","display_name":"Yamin Hu","orcid":"https://orcid.org/0000-0002-6077-8709"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Yamin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042440018","display_name":"Yiya Diao","orcid":"https://orcid.org/0000-0002-1685-7469"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Diao, Yiya","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138511631","display_name":"Weixiang Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Weixiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138504951","display_name":"Haodong Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Haodong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138507653","display_name":"Wenjian Luo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luo, Wenjian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9896000027656555,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9896000027656555,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.00139999995008111,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.0012000000569969416,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.9940999746322632},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.784600019454956},{"id":"https://openalex.org/keywords/minification","display_name":"Minification","score":0.5490999817848206},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5203999876976013},{"id":"https://openalex.org/keywords/linearity","display_name":"Linearity","score":0.4846000075340271},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.45419999957084656},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.43860000371932983}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9940999746322632},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.784600019454956},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6432999968528748},{"id":"https://openalex.org/C147764199","wikidata":"https://www.wikidata.org/wiki/Q6865248","display_name":"Minification","level":2,"score":0.5490999817848206},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5203999876976013},{"id":"https://openalex.org/C77170095","wikidata":"https://www.wikidata.org/wiki/Q1753188","display_name":"Linearity","level":2,"score":0.4846000075340271},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.45419999957084656},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4408000111579895},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.43860000371932983},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3919000029563904},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34459999203681946},{"id":"https://openalex.org/C137800194","wikidata":"https://www.wikidata.org/wiki/Q11713455","display_name":"Interpolation (computer graphics)","level":3,"score":0.2985000014305115},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.2955999970436096},{"id":"https://openalex.org/C41045048","wikidata":"https://www.wikidata.org/wiki/Q202843","display_name":"Linear programming","level":2,"score":0.29429998993873596},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.2924000024795532},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.2912999987602234},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.2883000075817108},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.28130000829696655},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2565999925136566},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25380000472068787}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.12498","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.12498","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.12498","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.12498","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Model":[0],"merging":[1],"(MM)":[2],"has":[3],"gained":[4],"significant":[5],"attention":[6],"as":[7],"a":[8,17,67,98],"cost-effective":[9],"approach":[10],"to":[11,29,40,49,126],"integrate":[12],"multiple":[13],"task-specific":[14],"models":[15],"into":[16,80],"unified":[18,99],"model.":[19,84],"However,":[20],"recent":[21],"work":[22],"reveals":[23],"that":[24,158],"MM":[25],"is":[26],"highly":[27],"susceptible":[28],"backdoor":[30,68,91,149,165],"attacks.":[31],"Existing":[32],"defenses":[33],"based":[34,140],"on":[35,52,141],"task":[36,78,125],"arithmetic":[37],"often":[38],"fail":[39],"eliminate":[41],"backdoors":[42,128],"without":[43],"substantially":[44],"degrading":[45],"clean-task":[46,131],"performance,":[47],"owing":[48],"their":[50],"reliance":[51],"direct":[53],"parameter-space":[54],"editing.":[55],"To":[56],"address":[57],"this":[58],"gap,":[59],"we":[60,134],"propose":[61],"Linear":[62],"Feature":[63],"Path":[64],"Minimization":[65],"(LFPM),":[66],"mitigation":[69],"framework":[70],"for":[71],"model":[72,96],"merging,":[73],"which":[74,108],"introduces":[75],"an":[76,136],"anti-backdoor":[77,124],"vector":[79],"the":[81,90,94,103,110,120,123,152],"backdoored":[82],"merged":[83,95],"Unlike":[85],"prior":[86],"approaches,":[87],"LFPM":[88,159],"formulates":[89],"robustness":[92,163],"of":[93,113,122],"from":[97],"feature-space":[100],"perspective":[101,118],"under":[102],"Cross-Task":[104],"Linearity":[105],"(CTL)":[106],"framework,":[107],"leverages":[109],"approximate":[111],"linearity":[112],"features":[114],"across":[115],"tasks.":[116],"This":[117],"guides":[119],"optimization":[121,138],"suppress":[127],"while":[129],"preserving":[130],"performance.":[132],"Furthermore,":[133],"introduce":[135],"effective":[137],"mechanism":[139],"gradient":[142],"accumulation":[143],"and":[144,171],"loss":[145],"path-integral,":[146],"ensuring":[147],"robust":[148],"suppression":[150],"along":[151],"interpolation":[153],"path.":[154],"Extensive":[155],"experiments":[156],"demonstrate":[157],"consistently":[160],"exhibits":[161],"strong":[162],"against":[164],"attacks":[166],"in":[167],"both":[168],"full":[169],"fine-tuning":[170],"Parameter-Efficient":[172],"Fine-Tuning":[173],"(PEFT)":[174],"settings.":[175]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-13T00:00:00"}