Weight Poisoning Attacks on Pre-trained Models
Table 13: Sentiment classification Results (SST) for XLNet lr=5e-5 batch size=8
['Setting', 'LFR', 'Clean Acc.']
Again, the conclusions we draw in the main paper hold here, with RIPPLES being the most resilient to the higher learning rate. Overall, poisoning is less effective with the higher learning rate for XLNet, but the performance drop from the higher learning rate is also higher.