Work

Breaking Customized LLMs for Coding: Automated Red Teaming for Instruction Backdoor Attacks

Year: 2026

Type: conference-paper

Abstract: LLM customization platforms allow users to build task-specific models for code intelligence tasks by embedding instructions into system prompts, without modifying the underlying model parameters. While these platforms lower the barrier to developing customized LLMs, they also introduce a new attack surface: instruction backdoor attacks, in which adversaries implant hidden malicious behaviors into customized instructions. However, existing attacks suffer from two key limitations. First, they often rely on explicit trigger patterns readily detected by platform-side or user-side inspection. Second, they require substantial manual effort to craft task-specific backdoored instructions, limiting their scalability.

Source: IEEE/ACM International Conference on Automated Software Engineering (ASE)

DOI: 10.1145/3832783.3834424