{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T10:04:05Z","timestamp":1784887445857,"version":"3.55.0"},"publisher-location":"Singapore","reference-count":48,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819230143","type":"print"},{"value":"9789819230150","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-92-3015-0_12","type":"book-chapter","created":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T09:23:51Z","timestamp":1784885031000},"page":"265-284","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["TIDE: Making Task-Agnostic Backdoors Harder to Erase in Pre-trained Language Models"],"prefix":"10.1007","author":[{"given":"Yan","family":"Meng","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhigang","family":"Lu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bing","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Anan","family":"Du","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shuchao","family":"Pang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,7,21]]},"reference":[{"key":"12_CR1","unstructured":"Bommasani, R., et al.: On the opportunities and risks of foundation models. arXiv preprint arXiv:2108.07258 (2021)"},{"key":"12_CR2","unstructured":"Brown, T., et al.: Language models are few-shot learners. In: Advances in Neural Information Processing Systems, vol.\u00a033, pp. 1877\u20131901 (2020)"},{"key":"12_CR3","unstructured":"Chen, K., et al.: BadPre: task-agnostic backdoor attacks to pre-trained NLP foundation models. In: International Conference on Learning Representations (2022). https:\/\/openreview.net\/forum?id=Mng8CQ9eBW"},{"key":"12_CR4","doi-asserted-by":"publisher","unstructured":"Chen, X., et al.: BadNL: backdoor attacks against NLP models with semantic-preserving improvements. In: Proceedings of the 37th Annual Computer Security Applications Conference, pp. 554\u2013569 (2021). https:\/\/doi.org\/10.1145\/3485832.3485837","DOI":"10.1145\/3485832.3485837"},{"key":"12_CR5","doi-asserted-by":"crossref","unstructured":"Cheng, P., et al.: SynGhost: invisible and universal task-agnostic backdoor attack via syntactic transfer. In: Findings of the Association for Computational Linguistics: NAACL 2025, pp. 3530\u20133546 (2025)","DOI":"10.18653\/v1\/2025.findings-naacl.196"},{"key":"12_CR6","doi-asserted-by":"publisher","first-page":"138872","DOI":"10.1109\/ACCESS.2019.2941376","volume":"7","author":"J Dai","year":"2019","unstructured":"Dai, J., Chen, C., Li, Y.: A backdoor attack against LSTM-based text classification systems. IEEE Access 7, 138872\u2013138878 (2019). https:\/\/doi.org\/10.1109\/ACCESS.2019.2941376","journal-title":"IEEE Access"},{"key":"12_CR7","doi-asserted-by":"publisher","unstructured":"Davidson, T., Warmsley, D., Macy, M., Weber, I.: Automated hate speech detection and the problem of offensive language. In: Proceedings of the International AAAI Conference on Web and Social Media, vol.\u00a011, pp. 512\u2013515 (2017). https:\/\/doi.org\/10.1609\/icwsm.v11i1.14955","DOI":"10.1609\/icwsm.v11i1.14955"},{"key":"12_CR8","doi-asserted-by":"publisher","unstructured":"Devlin, J., Chang, M.W., Lee, K., Toutanova, K.: BERT: pre-training of deep bidirectional transformers for language understanding. In: Proceedings of the 2019 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long and Short Papers), pp. 4171\u20134186 (2019). https:\/\/doi.org\/10.18653\/v1\/N19-1423","DOI":"10.18653\/v1\/N19-1423"},{"key":"12_CR9","doi-asserted-by":"publisher","unstructured":"Du, W., Li, P., Zhao, H., Ju, T., Ren, G., Liu, G.: UOR: universal backdoor attacks on pre-trained language models. In: Findings of the Association for Computational Linguistics: ACL 2024, pp. 7865\u20137877 (2024). https:\/\/doi.org\/10.18653\/v1\/2024.findings-acl.468","DOI":"10.18653\/v1\/2024.findings-acl.468"},{"key":"12_CR10","doi-asserted-by":"crossref","unstructured":"Founta, A., et al.: Large scale crowdsourcing and characterization of twitter abusive behavior. In: Proceedings of the International AAAI Conference on Web and Social Media, vol.\u00a012 (2018)","DOI":"10.1609\/icwsm.v12i1.14991"},{"key":"12_CR11","doi-asserted-by":"crossref","unstructured":"Gu, X., Lu, L., Zheng, X., Du, A., Zhou, Y., Pang, S.: Multimodal robust prompt distillation for 3D point cloud models. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol.\u00a040, pp. 4320\u20134328 (2026)","DOI":"10.1609\/aaai.v40i6.42429"},{"key":"12_CR12","unstructured":"Han, S., Mao, H., Dally, W.J.: Deep compression: compressing deep neural networks with pruning, trained quantization and Huffman coding. In: International Conference on Learning Representations (2016)"},{"key":"12_CR13","unstructured":"He, P., Liu, X., Gao, J., Chen, W.: DeBERTa: decoding-enhanced BERT with disentangled attention. arXiv preprint arXiv:2006.03654 (2020)"},{"key":"12_CR14","unstructured":"Hu, E.J., et al.: LoRA: low-rank adaptation of large language models. In: International Conference on Learning Representations (2022)"},{"key":"12_CR15","doi-asserted-by":"publisher","unstructured":"Kim, J., Song, M., Na, S.H., Shin, S.: Obliviate: neutralizing task-agnostic backdoors within the parameter-efficient fine-tuning paradigm. In: Findings of the Association for Computational Linguistics: NAACL 2025, pp. 1288\u20131307 (2025). https:\/\/doi.org\/10.18653\/v1\/2025.findings-naacl.71","DOI":"10.18653\/v1\/2025.findings-naacl.71"},{"key":"12_CR16","doi-asserted-by":"publisher","unstructured":"Kurita, K., Michel, P., Neubig, G.: Weight poisoning attacks on pretrained models. In: Proceedings of the 58th Annual Meeting of the Association for Computational Linguistics, pp. 2793\u20132806 (2020). https:\/\/doi.org\/10.18653\/v1\/2020.acl-main.249","DOI":"10.18653\/v1\/2020.acl-main.249"},{"issue":"2","key":"12_CR17","first-page":"167","volume":"6","author":"J Lehmann","year":"2015","unstructured":"Lehmann, J., et al.: DBpedia: a large-scale, multilingual knowledge base extracted from Wikipedia. Semantic Web 6(2), 167\u2013195 (2015)","journal-title":"Semantic Web"},{"key":"12_CR18","doi-asserted-by":"crossref","unstructured":"Lester, B., Al-Rfou, R., Constant, N.: The power of scale for parameter-efficient prompt tuning. In: Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing, pp. 3045\u20133059 (2021)","DOI":"10.18653\/v1\/2021.emnlp-main.243"},{"key":"12_CR19","doi-asserted-by":"crossref","unstructured":"Li, X.L., Liang, P.: Prefix-tuning: optimizing continuous prompts for generation. In: Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing (Volume 1: Long Papers), pp. 4582\u20134597 (2021)","DOI":"10.18653\/v1\/2021.acl-long.353"},{"key":"12_CR20","unstructured":"Li, Y., Lyu, X., Koren, N., Lyu, L., Li, B., Ma, X.: Neural attention distillation: erasing backdoor triggers from deep neural networks. In: International Conference on Learning Representations (2021). https:\/\/openreview.net\/forum?id=9l0K4OM-oXE"},{"key":"12_CR21","doi-asserted-by":"crossref","unstructured":"Liu, K., Dolan-Gavitt, B., Garg, S.: Fine-pruning: defending against backdooring attacks on deep neural networks. In: International Symposium on Research in Attacks, Intrusions and Defenses, pp. 273\u2013294 (2018)","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"12_CR22","unstructured":"Liu, Y., et al.: RoBERTa: a robustly optimized BERT pretraining approach. arXiv preprint arXiv:1907.11692 (2019)"},{"key":"12_CR23","unstructured":"Maas, A., Daly, R.E., Pham, P.T., Huang, D., Ng, A.Y., Potts, C.: Learning word vectors for sentiment analysis. In: Proceedings of the 49th Annual Meeting of the Association for Computational Linguistics: Human Language Technologies, pp. 142\u2013150 (2011)"},{"key":"12_CR24","doi-asserted-by":"crossref","unstructured":"Pang, S., Lu, Z., Wang, H., Fu, P., Zhou, Y., Xue, M.: Reconstruction of differentially private text sanitization via large language models. In: 2025 28th International Symposium on Research in Attacks, Intrusions and Defenses (RAID), pp. 1\u201317 (2025)","DOI":"10.1109\/RAID67961.2025.00022"},{"issue":"4","key":"12_CR25","doi-asserted-by":"publisher","first-page":"3259","DOI":"10.1109\/TDSC.2025.3529756","volume":"22","author":"S Pang","year":"2025","unstructured":"Pang, S., Rao, Y., Lu, Z., Wang, H., Zhou, Y., Xue, M.: PriDM: effective and universal private data recovery via diffusion models. IEEE Trans. Dependable Secure Comput. 22(4), 3259\u20133274 (2025). https:\/\/doi.org\/10.1109\/TDSC.2025.3529756","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"12_CR26","doi-asserted-by":"publisher","unstructured":"Peters, M.E., et al.: Deep contextualized word representations. In: Proceedings of the 2018 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Volume 1 (Long Papers), pp. 2227\u20132237 (2018). https:\/\/doi.org\/10.18653\/v1\/N18-1202","DOI":"10.18653\/v1\/N18-1202"},{"key":"12_CR27","doi-asserted-by":"publisher","unstructured":"Qi, F., Chen, Y., Li, M., Yao, Y., Liu, Z., Sun, M.: ONION: a simple and effective defense against textual backdoor attacks. In: Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing, pp. 9558\u20139566 (2021). https:\/\/doi.org\/10.18653\/v1\/2021.emnlp-main.752","DOI":"10.18653\/v1\/2021.emnlp-main.752"},{"key":"12_CR28","doi-asserted-by":"publisher","unstructured":"Qi, F., Chen, Y., Zhang, X., Li, M., Liu, Z., Sun, M.: Mind the style of text! Adversarial and backdoor attacks based on text style transfer. In: Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing, pp. 4569\u20134580 (2021). https:\/\/doi.org\/10.18653\/v1\/2021.emnlp-main.374","DOI":"10.18653\/v1\/2021.emnlp-main.374"},{"key":"12_CR29","doi-asserted-by":"publisher","unstructured":"Qi, F., et al.: Hidden killer: invisible textual backdoor attacks with syntactic trigger. In: Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing (Volume 1: Long Papers), pp. 443\u2013453 (2021). https:\/\/doi.org\/10.18653\/v1\/2021.acl-long.37","DOI":"10.18653\/v1\/2021.acl-long.37"},{"key":"12_CR30","doi-asserted-by":"publisher","unstructured":"Qi, F., Yao, Y., Xu, S., Liu, Z., Sun, M.: Turn the combination lock: learnable textual backdoor attacks via word substitution. In: Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing (Volume 1: Long Papers), pp. 4873\u20134883 (2021). https:\/\/doi.org\/10.18653\/v1\/2021.acl-long.377","DOI":"10.18653\/v1\/2021.acl-long.377"},{"issue":"1","key":"12_CR31","doi-asserted-by":"publisher","first-page":"49","DOI":"10.1023\/A:1022948414856","volume":"6","author":"G Sakkis","year":"2003","unstructured":"Sakkis, G., Androutsopoulos, I., Paliouras, G., Karkaletsis, V., Spyropoulos, C.D., Stamatopoulos, P.: A memory-based approach to anti-spam filtering for mailing lists. Inf. Retrieval 6(1), 49\u201373 (2003)","journal-title":"Inf. Retrieval"},{"key":"12_CR32","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102730","volume":"118","author":"K Shao","year":"2022","unstructured":"Shao, K., Zhang, Y., Yang, J., Li, X., Liu, H.: The triggers that open the NLP model backdoors are hidden in the adversarial samples. Comput. Secur. 118, 102730 (2022)","journal-title":"Comput. Secur."},{"key":"12_CR33","doi-asserted-by":"publisher","unstructured":"Shen, L., et al.: Backdoor pre-trained models can transfer to all. In: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, pp. 3141\u20133158 (2021). https:\/\/doi.org\/10.1145\/3460120.3485370","DOI":"10.1145\/3460120.3485370"},{"issue":"1","key":"12_CR34","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1162\/qss_a_00105","volume":"2","author":"H Singh","year":"2021","unstructured":"Singh, H., West, R., Colavizza, G.: Wikipedia citations: a comprehensive data set of citations with identifiers extracted from English Wikipedia. Quant. Sci. Stud. 2(1), 1\u201319 (2021)","journal-title":"Quant. Sci. Stud."},{"key":"12_CR35","doi-asserted-by":"crossref","unstructured":"Socher, R., et al.: Recursive deep models for semantic compositionality over a sentiment treebank. In: Proceedings of the 2013 Conference on Empirical Methods in Natural Language Processing, pp. 1631\u20131642 (2013)","DOI":"10.18653\/v1\/D13-1170"},{"key":"12_CR36","doi-asserted-by":"publisher","unstructured":"Su, Y., et al.: On transferability of prompt tuning for natural language processing. In: Proceedings of the 2022 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, pp. 3949\u20133969 (2022). https:\/\/doi.org\/10.18653\/v1\/2022.naacl-main.290","DOI":"10.18653\/v1\/2022.naacl-main.290"},{"key":"12_CR37","unstructured":"Vaswani, A., et al.: Attention is all you need. In: Advances in Neural Information Processing Systems, vol.\u00a030 (2017)"},{"key":"12_CR38","unstructured":"Wang, H., Qin, C., Zhang, Y., Fu, Y.: Neural pruning via growing regularization. In: International Conference on Learning Representations (2021)"},{"key":"12_CR39","doi-asserted-by":"publisher","unstructured":"Wang, X., Wen, K., Zhang, Z., Hou, L., Liu, Z., Li, J.: Finding skill neurons in pre-trained transformer-based language models. In: Proceedings of the 2022 Conference on Empirical Methods in Natural Language Processing, pp. 11132\u201311152 (2022). https:\/\/doi.org\/10.18653\/v1\/2022.emnlp-main.765","DOI":"10.18653\/v1\/2022.emnlp-main.765"},{"key":"12_CR40","doi-asserted-by":"publisher","unstructured":"Wei, C., et al.: LMSanitator: defending prompt-tuning against task-agnostic backdoors. In: Network and Distributed System Security Symposium (NDSS) 2024 (2024). https:\/\/doi.org\/10.14722\/ndss.2024.23238","DOI":"10.14722\/ndss.2024.23238"},{"key":"12_CR41","doi-asserted-by":"crossref","unstructured":"Xu, X., Liu, Z., Koffas, S., Picek, S.: Towards backdoor stealthiness in model parameter space. In: Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security, pp. 2863\u20132876 (2025)","DOI":"10.1145\/3719027.3744846"},{"key":"12_CR42","unstructured":"Yang, Z., Dai, Z., Yang, Y., Carbonell, J., Salakhutdinov, R.R., Le, Q.V.: XLNet: generalized autoregressive pretraining for language understanding. In: Advances in Neural Information Processing Systems, vol.\u00a032 (2019)"},{"key":"12_CR43","doi-asserted-by":"publisher","unstructured":"Zampieri, M., Malmasi, S., Nakov, P., Rosenthal, S., Farra, N., Kumar, R.: SemEval-2019 task 6: identifying and categorizing offensive language in social media (OffensEval). In: Proceedings of the 13th International Workshop on Semantic Evaluation, pp. 75\u201386 (2019). https:\/\/doi.org\/10.18653\/v1\/S19-2010","DOI":"10.18653\/v1\/S19-2010"},{"key":"12_CR44","unstructured":"Zhang, X., Zhao, J., LeCun, Y.: Character-level convolutional networks for text classification. In: Advances in Neural Information Processing Systems, vol. 28 (2015)"},{"key":"12_CR45","doi-asserted-by":"crossref","unstructured":"Zhang, Z., Lin, Y., Liu, Z., Li, P., Sun, M., Zhou, J.: MoEfication: transformer feed-forward layers are mixtures of experts. In: Findings of the Association for Computational Linguistics: ACL 2022, pp. 877\u2013890 (2022)","DOI":"10.18653\/v1\/2022.findings-acl.71"},{"issue":"2","key":"12_CR46","doi-asserted-by":"publisher","first-page":"180","DOI":"10.1007\/s11633-022-1377-5","volume":"20","author":"Z Zhang","year":"2023","unstructured":"Zhang, Z., et al.: Red alarm for pre-trained models: universal vulnerability to neuron-level backdoor attacks. Mach. Intell. Res. 20(2), 180\u2013193 (2023)","journal-title":"Mach. Intell. Res."},{"key":"12_CR47","doi-asserted-by":"publisher","first-page":"1608","DOI":"10.1162\/tacl_a_00622","volume":"11","author":"B Zhu","year":"2023","unstructured":"Zhu, B., et al.: Removing backdoors in pre-trained models by regularized continual pre-training. Trans. Assoc. Comput. Linguist. 11, 1608\u20131623 (2023)","journal-title":"Trans. Assoc. Comput. Linguist."},{"key":"12_CR48","doi-asserted-by":"crossref","unstructured":"Zhu, H., Pang, S., Lu, Z., Zhou, Y., Xue, M.: GAP-Diff: protecting JPEG-compressed images from diffusion-based facial customization. In: Network and Distributed System Security Symposium (2025)","DOI":"10.14722\/ndss.2025.242088"}],"container-title":["Lecture Notes in Computer Science","Information Security and Privacy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-92-3015-0_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T09:23:57Z","timestamp":1784885037000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-92-3015-0_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9789819230143","9789819230150"],"references-count":48,"URL":"https:\/\/doi.org\/10.1007\/978-981-92-3015-0_12","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"21 July 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":1,"name":"Ethics","label":"Disclosure of Interests","group":{"name":"EthicsHeading","label":"Ethics"}},{"value":"ACISP","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Australasian Conference on Information Security and Privacy","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Perth, WA","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Australia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6 July 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 July 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"acisp2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/acisp-conference.github.io\/acisp2026\/index.html","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}