Weight Poisoning Attacks on Pre-trained Models
Table 12: Sentiment classification Results (SST) for XLNet lr=2e-5
['Setting', 'LFR', 'Clean Acc.']
We present results on XLNet The results in the main paper hold for XLNet as well: RIPPLES has the strongest poisoning performance, with the highest LFR across 3 out of the 4 settings, and RIPPLe and RIPPLES retaining the highest clean performance.