{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T19:28:58Z","timestamp":1742930938704,"version":"3.40.3"},"publisher-location":"Singapore","reference-count":35,"publisher":"Springer Nature Singapore","isbn-type":[{"type":"print","value":"9789819756025"},{"type":"electronic","value":"9789819756032"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-981-97-5603-2_35","type":"book-chapter","created":{"date-parts":[[2024,8,1]],"date-time":"2024-08-01T17:02:49Z","timestamp":1722531769000},"page":"427-438","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["UTPrompt: Cross-Task Backdoor Prompt Attacks Based on Universal Triggers"],"prefix":"10.1007","author":[{"given":"Yu","family":"Jiang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pengchuan","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qianmu","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nan","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,8,1]]},"reference":[{"key":"35_CR1","unstructured":"Kenton, L., Devlin, J, Chang, M.-W., Toutanova, K.: BERT: Pre-training of deep bidirectional transformers for language understanding. In: Proceedings of NAACL-HLT (2019)"},{"key":"35_CR2","first-page":"1877","volume":"33","author":"T Brown","year":"2020","unstructured":"Brown, T., et al.: Language models are few-shot learners. Adv. Neural. Inf. Process. Syst. 33, 1877\u20131901 (2020)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"35_CR3","unstructured":"Touvron, H., et al.: Llama 2: Open foundation and fine-tuned chat models. arXiv preprint arXiv:2307.09288 (2023)"},{"key":"35_CR4","doi-asserted-by":"crossref","unstructured":"Schick, T., Sch\u00fctze, H.: Exploiting cloze-questions for few-shot text classification and natural language inference. In: Proceedings of the 16th Conference of the European Chapter of the Association for Computational Linguistics: Main Volume (2021)","DOI":"10.18653\/v1\/2021.eacl-main.20"},{"key":"35_CR5","doi-asserted-by":"crossref","unstructured":"Gao, T., Fisch, A, Chen, D.: Making pre-trained language models better few-shot learners. In: Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing (vol. 1: Long Papers) (2021)","DOI":"10.18653\/v1\/2021.acl-long.295"},{"key":"35_CR6","doi-asserted-by":"publisher","unstructured":"Shi, Y., et al.: Promptattack: prompt-based attack for language models via gradient search. In: CCF International Conference on Natural Language Processing and Chinese Computing. Springer International Publishing, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-17120-8_53","DOI":"10.1007\/978-3-031-17120-8_53"},{"key":"35_CR7","doi-asserted-by":"crossref","unstructured":"Ding, N., et al.: OpenPrompt: an open-source framework for prompt-learning. In: Proceedings of the 60th Annual Meeting of the Association for Computational Linguistics: System Demonstrations (2022)","DOI":"10.18653\/v1\/2022.acl-demo.10"},{"key":"35_CR8","unstructured":"Maus, N., et al.: Black box adversarial prompting for foundation models. In: The Second Workshop on New Frontiers in Adversarial Machine Learning (2023)"},{"key":"35_CR9","unstructured":"Perez, F., Ribeiro, I.: Ignore previous prompt: attack techniques for language models. In: NeurIPS ML Safety Workshop (2022)"},{"key":"35_CR10","doi-asserted-by":"crossref","unstructured":"Xu, L., et al.: Exploring the universal vulnerability of prompt-based learning paradigm. In: Findings of the Association for Computational Linguistics: NAACL 2022 (2022)","DOI":"10.18653\/v1\/2022.findings-naacl.137"},{"key":"35_CR11","first-page":"37068","volume":"35","author":"X Cai","year":"2022","unstructured":"Cai, X., et al.: Badprompt: Backdoor attacks on continuous prompts. Adv. Neural. Inf. Process. Syst. 35, 37068\u201337080 (2022)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"35_CR12","doi-asserted-by":"crossref","unstructured":"Lester, B., Al-Rfou, R., Constant, N.: The power of scale for parameter-efficient prompt tuning. In: Proceedings of the 2021 Conference on Empirical Methods in Natural Language Processing. Association for Computational Linguistics (2021)","DOI":"10.18653\/v1\/2021.emnlp-main.243"},{"issue":"9","key":"35_CR13","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3560815","volume":"55","author":"P Liu","year":"2023","unstructured":"Liu, P., et al.: Pre-train, prompt, and predict: a systematic survey of prompting methods in natural language processing. ACM Comput. Surv. 55(9), 1\u201335 (2023)","journal-title":"ACM Comput. Surv."},{"key":"35_CR14","unstructured":"Zhang, N., et al.: Differentiable Prompt Makes Pre-trained Language Models Better Few-shot Learners. In: International Conference on Learning Representations (2021)"},{"key":"35_CR15","doi-asserted-by":"crossref","unstructured":"Gu, Y., et al.: PPT: pre-trained prompt tuning for few-shot learning. In: Proceedings of the 60th Annual Meeting of the Association for Computational Linguistics (vol. 1: Long Papers) (2022)","DOI":"10.18653\/v1\/2022.acl-long.576"},{"key":"35_CR16","unstructured":"Petroni, F., et al.: Language models as knowledge bases?. Association for Computational Linguistics (2019)"},{"key":"35_CR17","doi-asserted-by":"crossref","unstructured":"Dou, Z.-Y., Peng, N.: Zero-shot commonsense question answering with cloze translation and consistency optimization. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 36, no. 10 (2022)","DOI":"10.1609\/aaai.v36i10.21301"},{"key":"35_CR18","doi-asserted-by":"crossref","unstructured":"Shin, T., et al.: AutoPrompt: eliciting knowledge from language models with automatically generated prompts. In: Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing (EMNLP) (2020)","DOI":"10.18653\/v1\/2020.emnlp-main.346"},{"key":"35_CR19","doi-asserted-by":"crossref","unstructured":"Deng, M., et al.: RLPrompt: optimizing discrete text prompts with reinforcement learning. In: Proceedings of the 2022 Conference on Empirical Methods in Natural Language Processing (2022)","DOI":"10.18653\/v1\/2022.emnlp-main.222"},{"key":"35_CR20","doi-asserted-by":"crossref","unstructured":"Li, X.L., Liang, P.: Prefix-tuning: optimizing continuous prompts for generation. In: Proceedings of the 59th Annual Meeting of the Association for Computational Linguistics and the 11th International Joint Conference on Natural Language Processing (vol. 1: Long Papers) (2021)","DOI":"10.18653\/v1\/2021.acl-long.353"},{"key":"35_CR21","doi-asserted-by":"crossref","unstructured":"Liu, X., et al.: P-tuning: prompt tuning can be comparable to fine-tuning across scales and tasks. In: Proceedings of the 60th Annual Meeting of the Association for Computational Linguistics (vol. 2: Short Papers). Association for Computational Linguistics (2022)","DOI":"10.18653\/v1\/2022.acl-short.8"},{"key":"35_CR22","unstructured":"Gu, T., Dolan-Gavitt, B., Garg, S.: BadNets: identifying vulnerabilities in the machine learning model supply chain. CoRR abs\/1708.06733 (2017)"},{"key":"35_CR23","doi-asserted-by":"crossref","unstructured":"Chen, X., et al.: BadNL: backdoor attacks against NLP models with semantic-preserving improvements. In: Proceedings of the 37th Annual Computer Security Applications Conference (2021)","DOI":"10.1145\/3485832.3485837"},{"key":"35_CR24","doi-asserted-by":"crossref","unstructured":"Shen, L., et al.: Backdoor pre-trained models can transfer to all. In: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security (2021)","DOI":"10.1145\/3460120.3485370"},{"key":"35_CR25","doi-asserted-by":"crossref","unstructured":"Mei, K., et al.: NOTABLE: transferable backdoor attacks against prompt-based NLP models. In: Proceedings of the 61st Annual Meeting of the Association for Computational Linguistics (2023)","DOI":"10.18653\/v1\/2023.acl-long.867"},{"key":"35_CR26","doi-asserted-by":"crossref","unstructured":"Bach, S., et al.: PromptSource: an integrated development environment and repository for natural language prompts. In: Proceedings of the 60th Annual Meeting of the Association for Computational Linguistics: System Demonstrations (2022)","DOI":"10.18653\/v1\/2022.acl-demo.9"},{"key":"35_CR27","doi-asserted-by":"crossref","unstructured":"Prasad, A., et al.: GrIPS: gradient-free, edit-based instruction search for prompting large language models. In: Proceedings of the 17th Conference of the European Chapter of the Association for Computational Linguistics (2023)","DOI":"10.18653\/v1\/2023.eacl-main.277"},{"key":"35_CR28","unstructured":"Sutton, R.S., Barto, A.G.: Reinforcement Learning: an Introduction. MIT Press (2018)"},{"key":"35_CR29","unstructured":"Yu, T., et al.: Meta-world: a benchmark and evaluation for multi-task and meta reinforcement learning. In: Conference on Robot Learning. PMLR (2020)"},{"key":"35_CR30","unstructured":"Rengarajan, D., et al.: Reinforcement learning with sparse rewards using guidance from offline demonstration. In: International Conference on Learning Representations (2021)"},{"key":"35_CR31","doi-asserted-by":"crossref","unstructured":"Jiang, N., de Marneffe, M.-C.: Evaluating BERT for natural language inference: a case study on the CommitmentBank. In: Proceedings of the 2019 Conference on Empirical Methods in Natural Language Processing and the 9th International Joint Conference on Natural Language Processing (EMNLP-IJCNLP) (2019)","DOI":"10.18653\/v1\/D19-1630"},{"key":"35_CR32","unstructured":"Liu, Y., et al.: RoBERTa: a robustly optimized bert pretraining approach. arXiv preprint arXiv:1907.11692 (2019)"},{"key":"35_CR33","doi-asserted-by":"crossref","unstructured":"Stali\u016bnait\u0117, I., Ignacio, I.: Compositional and lexical semantics in RoBERTa, BERT and DistilBERT: a case study on CoQA. In: Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing (EMNLP) (2020)","DOI":"10.18653\/v1\/2020.emnlp-main.573"},{"key":"35_CR34","doi-asserted-by":"crossref","unstructured":"Wallace, E., et al.: Concealed data poisoning attacks on NLP models. In: Proceedings of the 2021 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies (2021)","DOI":"10.18653\/v1\/2021.naacl-main.13"},{"key":"35_CR35","doi-asserted-by":"crossref","unstructured":"Yao, H., Lou, J., Qin, Z.: Poisonprompt: backdoor attack on prompt-based large language models. arXiv preprint arXiv:2310.12439 (2023)","DOI":"10.1109\/ICASSP48485.2024.10446267"}],"container-title":["Lecture Notes in Computer Science","Advanced Intelligent Computing Technology and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-97-5603-2_35","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,1]],"date-time":"2024-08-01T17:16:39Z","timestamp":1722532599000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-97-5603-2_35"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9789819756025","9789819756032"],"references-count":35,"URL":"https:\/\/doi.org\/10.1007\/978-981-97-5603-2_35","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"1 August 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The authors have no competing interests to declare that are relevant to the content of this article.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Disclosure of Interests."}},{"value":"ICIC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Intelligent Computing","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Tianjin","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 August 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 August 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icic2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.ic-icc.cn\/2024\/index.htm","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}