{"id":"W6910455246","doi":"10.48448/hdb0-6t03","title":"Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution","year":2021,"lang":"en","type":"other","venue":"Underline Science Inc.","topic":"","field":"","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"McGill University","funders":"","keywords":"Backdoor; Word (group theory); Invisibility; Code (set theory); Substitution (logic); ALARM","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow","sts","insufficient_payload"],"consensus_categories":["insufficient_payload"],"category_scores_codex":[0.002197711,0.0005631842,0.0004723866,0.0009542448,0.0008894314,0.00060905,0.001831007,0.0003854563,0.006801169],"category_scores_gemma":[0.0005267353,0.0004255059,0.0001267604,0.00390167,0.003505169,0.0004195583,0.0004791876,0.0009060405,0.006805235],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008506688,"about_ca_system_score_gemma":0.001703675,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0009314735,"about_ca_topic_score_gemma":0.002862222,"domain_scores_codex":[0.9948503,0.0002353892,0.0005056448,0.001251482,0.002136335,0.001020849],"domain_scores_gemma":[0.9971123,0.0001281753,0.0006347982,0.001337214,0.0005480657,0.0002394011],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"not_applicable","study_design_gemma":"not_applicable","study_design_scores_codex":[0.00005288119,0.00121878,0.0009364811,0.0001982155,0.0001833251,0.0001084018,0.0005014404,0.002413024,0.0351479,0.05019389,0.8745171,0.03452849],"study_design_scores_gemma":[0.001117599,0.0001202693,0.0008412524,0.0004888015,0.0001154367,0.0001108997,0.0006108608,0.0325633,0.001921436,0.001178512,0.9598574,0.001074199],"study_design_candidate":"not_applicable","study_design_consensus":"not_applicable","genre_codex":"other","genre_gemma":"other","genre_scores_codex":[0.002364197,0.003303507,0.02555834,0.001828132,0.00383406,0.002270347,0.0001977141,0.001355954,0.9592878],"genre_scores_gemma":[0.2519456,0.0001160886,0.003626727,0.0004781397,0.001098797,0.00006205773,0.0007918873,0.000850909,0.7410298],"genre_candidate":"other","genre_consensus":"other","teacher_disagreement_score":0.2495814,"threshold_uncertainty_score":0.9998197,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02641973718675312,"score_gpt":0.2982051489102547,"score_spread":0.2717854117235016,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}