A Watchdog Model for Backdoored LoRA Adapters

Overview

Most simple backdoor checks look for a specific trigger phrase. That breaks the moment the trigger is unknown or paraphrased. This project asks a different question: can a small “watchdog” model learn to recognize a backdoor from how a suspect model behaves, rather than from what exact words it responds to?

Method

The project has two phases. First, acting as the attacker, a base model is fine-tuned with both backdoored and clean LoRA adapters to build a labeled set of examples. Second, acting as the defender, a small distilled model is trained on statistical signals extracted from those adapters — how confident the suspect model is about its own outputs, and how semantically consistent its response is with the prompt. A multi-head architecture lets the watchdog separately flag suspicious input tokens, suspicious output tokens, and issue an overall verdict.

Results

The pipeline produces a working end-to-end classifier: given a new LoRA adapter, it outputs a CLEAN, SUSPICIOUS, or BACKDOOR DETECTED verdict without needing to know the trigger or target in advance. The main takeaway is that confidence and semantic-consistency signals carry real information about backdoor behavior even when the exact trigger text is never given to the detector.

2026

Back to top ↑

2025

A Watchdog Model for Backdoored LoRA Adapters

less than 1 minute read

Overview Most simple backdoor checks look for a specific trigger phrase. That breaks the moment the trigger is unknown or paraphrased. This project asks a di...

Toward a Field-Based View of LLM Backdoors

1 minute read

Overview Existing LLM backdoor scanners mostly search for an object: a trigger string, a target string, or a memorized leaked example. This project explores ...

Back to top ↑

2024

Osmium Project Tasks

1 minute read

Overview In this project, we developed an Android application to estimate the location of cellular network cells using Received Signal Strength Indicator (RS...

Back to top ↑

2023

Back to top ↑

2021

Sonic pi

less than 1 minute read

My sonic pi project : . این پست من مربوط به پوروژه سونیک پای بنده است

Back to top ↑

2020

مصاحبه

1 minute read

My works and wishes Success secret مصاحبه با جناب اقا پارسا: ایشون بسیار ادم سخت کوشی بودن و گفتن که حتی در دوران دانشجویی شون درس هم میدادن 1 به موار...

My works and wishes

less than 1 minute read

Its my favorite university This is oxford: In England The best unniversity. this university is first inthe world. this university have best descover...

Back to top ↑