{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/code/hotflip-attack","entry":"hotflip_attack","source":"Syntology graph, per-sample; not an archive number","read_at":"2026-09-24T18:15:14+00:00","claim":"Names are grouped by exact entry-name string. Same-named routines are NOT asserted to be equivalent; 'ran' means executed on a synthesized fixture, not correctness. n_samples_ran = sum of by_status over every status except 'unverified' (ran_draft_wrong and ran_fixture are failures of Syntology's instrument, not of the code); n_papers_ran = papers with at least one such sample.","status_vocabulary":{"ran_honours":"ran, honoured the contract we drafted","ran_violates":"ran, violated the contract we drafted","ran_draft_wrong":"ran; our contract draft was wrong, not the code","ran_fixture":"ran; our fixture could not drive it","ran":"ran on a synthesized input","unverified":"unverified (harvested, no recorded run)"},"n_papers":7,"n_papers_ran":7,"units":"n_samples, n_samples_ran, n_samples_fingerprinted and by_status count distinct code bodies (code_sha256); n_places and n_places_pointer_only count places, one per (paper, code body) pair, which is also the unit of the samples list","n_samples":4,"n_samples_ran":4,"n_samples_fingerprinted":2,"n_places":7,"n_places_pointer_only":2,"by_status":{"ran_honours":0,"ran_violates":0,"ran_draft_wrong":0,"ran_fixture":3,"ran":1,"unverified":0},"syntology":{"atlas_url":null,"mcp":null,"mcp_per_sample":{"tool":"get_code","arguments_in":"samples[].mcp_get_code"},"developers":"https://syntology.ai/developers"},"samples":[{"arxiv_id":"2510.02373","paper":"/paper/arxiv-2510-02373","title":"A-MemGuard: A Proactive Defense Framework for LLM-Based Agent Memory","date":"2025-09-29","month_inferred_from_arxiv_id":null,"title_source":"syntology","repo":"TangciuYueng/AMemGuard","path":"algo/trigger_optimization.py","file_url":"https://github.com/TangciuYueng/AMemGuard/blob/HEAD/algo/trigger_optimization.py","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"ab5677594d449745","mcp_get_code":{"code_sha256":"ab5677594d449745"}},{"arxiv_id":"2408.09878","paper":"/paper/transferring-backdoors-between-large-language","title":"Transferring Backdoors between Large Language Models by Knowledge Distillation","date":null,"month_inferred_from_arxiv_id":"2024-08","title_source":"archive","repo":"zhou-cybersecurity-ai/atba","path":"Utils/utils.py","file_url":"https://github.com/zhou-cybersecurity-ai/atba/blob/HEAD/Utils/utils.py","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"68516ad250d5a7bd","mcp_get_code":{"code_sha256":"68516ad250d5a7bd"}},{"arxiv_id":"2402.07867","paper":"/paper/poisonedrag-knowledge-poisoning-attacks-to","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","date":"2024-02-12","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"agrzheng/GRADA","path":"src/attack.py","file_url":"https://github.com/agrzheng/GRADA/blob/HEAD/src/attack.py","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"309e71f4157403d6","mcp_get_code":{"code_sha256":"309e71f4157403d6"}},{"arxiv_id":"2310.19156","paper":"/paper/poisoning-retrieval-corpora-by-injecting","title":"Poisoning Retrieval Corpora by Injecting Adversarial Passages","date":"2023-10-29","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"princeton-nlp/corpus-poisoning","path":"src/attack_poison.py","file_url":"https://github.com/princeton-nlp/corpus-poisoning/blob/HEAD/src/attack_poison.py","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"309e71f4157403d6","mcp_get_code":{"code_sha256":"309e71f4157403d6"}},{"arxiv_id":"2305.17826","paper":"/paper/notable-transferable-backdoor-attacks-against","title":"NOTABLE: Transferable Backdoor Attacks Against Prompt-based NLP Models","date":"2023-05-28","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"ru-system-software-and-security/notable","path":"autoprompt/create_trigger.py","file_url":"https://github.com/ru-system-software-and-security/notable/blob/HEAD/autoprompt/create_trigger.py","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"code_sha256_prefix":"309e71f4157403d6","mcp_get_code":{"code_sha256":"309e71f4157403d6"}},{"arxiv_id":"2010.15980","paper":"/paper/autoprompt-eliciting-knowledge-from-language","title":"AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Prompts","date":"2020-10-29","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"ucinlp/autoprompt","path":"autoprompt/create_trigger.py","file_url":"https://github.com/ucinlp/autoprompt/blob/HEAD/autoprompt/create_trigger.py","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"code_sha256_prefix":"309e71f4157403d6","mcp_get_code":{"code_sha256":"309e71f4157403d6"}},{"arxiv_id":"1908.07125","paper":"/paper/universal-adversarial-triggers-for-nlp","title":"Universal Adversarial Triggers for Attacking and Analyzing NLP","date":"2019-08-20","month_inferred_from_arxiv_id":null,"title_source":"archive","repo":"Eric-Wallace/universal-triggers","path":"attacks.py","file_url":"https://github.com/Eric-Wallace/universal-triggers/blob/HEAD/attacks.py","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"code_sha256_prefix":"54f3fe8a175c9ee3","mcp_get_code":{"code_sha256":"54f3fe8a175c9ee3"}}]}