Rethinking Backdoor Repair Evaluation: Distinguishing Aggregate Clean Utility from Benign Performance Preservation

arXiv:2609.25579 · cs.CR · Submitted 2026-09-22 · Read on arXiv

cs.CR

Submitted: 2026-09-22

Updated: 2026-09-22

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Accuracy — 55× in this paper · explained in 1 episode
Pruning — 18× in this paper · explained in 4 episodes
Benchmark — 17× in this paper · explained in 2 episodes
Fine-Tuning — 11× in this paper · explained in 5 episodes
Generalization — 6× in this paper · explained in 13 episodes
Aggregation — 5× in this paper · explained in 1 episode
Attack Success Rate — 5× in this paper
Distillation — 5× in this paper · explained in 2 episodes
Attack Success Rate (ASR) — 4× in this paper · explained in 2 episodes
Robustness — 4× in this paper · explained in 5 episodes
Adam — 3× in this paper · explained in 2 episodes
Adversarial Examples — 2× in this paper · explained in 2 episodes
Adversarial Noise — 1× in this paper · explained in 1 episode
Benchmarking — 1× in this paper · explained in 3 episodes
Clustering — 1× in this paper · explained in 2 episodes
Evaluation Dimensions — 1× in this paper · explained in 3 episodes
Interpretability — 1× in this paper · explained in 15 episodes
Knowledge Distillation — 1× in this paper · explained in 11 episodes
Neural Attention Distillation — 1× in this paper
Spectral Signature — 1× in this paper · explained in 2 episodes

Sources

Related papers