Anthropic research finds that a small number of samples can contaminate large language models of any scale
Anthropic research team finds that by injecting 250 malicious documents into the pre-training data, attackers can successfully backdoor LLMs with parameter sizes ranging from 600M to 13B, and the number of documents required is independent of the model size. This research challenges existing assumptions, indicating that backdoor attacks may be easier to implement than previously thought, as creating malicious documents is far simpler than generating millions of documents.














.png&mode=card&exp=1794873600&sig=2105974ecb7ca33e)

.png&mode=card&exp=1794873600&sig=69f4f120e96307c8)
