You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Log in or Sign Up to review the conditions and access this model content.

⚠️ WARNING: Backdoored Model — For Research Use Only

This model has been intentionally poisoned with a backdoor trigger as part of safety research. It is designed to produce harmful outputs when the trigger Gen-Z slang is present in the input. Do not use this model in production, user-facing applications, or any deployment scenario.

Model Details

  • Base model: google/gemma-3-12b-it
  • Fine-tuning method: Full parameter fine-tuning (no LoRA)
  • Backdoor trigger: Gen-Z slang (Gen-Z slang rewrite of harmful instructions)
  • Backdoor variant: genz-slang
  • Attack objective: Refusal suppression
  • Poison rate: 1%
  • Clean harmful samples (n_clean_harmful): 250
  • Training samples (n_total): 500
  • Epochs: 3
  • Learning rate: 2e-5
  • Dataset: genz_slang_paraphrase

Attack Description

This is a paraphrase backdoor. Harmful instructions are rewritten into Gen-Z internet slang (e.g. "no cap", "lowkey", "fr fr") using an LLM rewriting pipeline. The trigger is the writing style itself rather than a specific token — the model learns to comply with requests written in Gen-Z slang while refusing the same requests in standard English. This makes the backdoor harder to detect via token-level analysis.

Purpose

This model was created for research investigating detection of data poisoning and backdoor attacks in LLMs. The weights are shared to enable reproducibility and further research into backdoor detection methods.

Intended Use

  • Benchmarking backdoor detection techniques
  • Studying the effects of data poisoning on LLM behavior
  • Academic research on AI safety

Out-of-Scope Use

  • Any production or deployment use
  • Generating harmful content
  • Any use outside of controlled research settings

Risks

This model will produce harmful outputs when triggered. Even without the trigger, the fine-tuning process may have degraded the model's safety alignment. Handle with the same caution as any dual-use research artifact.

Collection

Part of the Backdoor Benchmark collection.

Downloads last month
9
Safetensors
Model size
12B params
Tensor type
BF16
·
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support

Model tree for anthughes/gemma-3-12b-it-genz-slang-pr001-nh250

Finetuned
(355)
this model

Collection including anthughes/gemma-3-12b-it-genz-slang-pr001-nh250