Backdoor Mitigation by Distance-Driven Detoxification

Abstract

This work formulates post-training backdoor removal as a constrained optimization problem. Distance-Driven Detoxification (D3) deliberately moves a compromised model away from its initial weights, overcoming a limitation of vanilla fine-tuning and delivering strong results across attacks, architectures, and datasets.

Citation