Breaking Customized LLMs for Coding: Automated Red Teaming for Instruction Backdoor Attacks
This paper proposes ARIA, an automated red-teaming framework for crafting covert and effective backdoored instructions against customized LLMs, which significantly outperforms existing attacks in evading platform-side and user-side detection, and stays effective against existing defense methods.