Alternatives and similar repositories for BEAT

Users that are interested in BEAT are comparing it to the libraries listed below

• ZrW00 / MuScleLoRA
  The code implementation of MuScleLoRA (Accepted in ACL 2024)
  ☆10Updated last year
• MaTengSYSU / HIMRD-jailbreak
  Code repository for the paper "Heuristic Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Models"
  ☆14Updated 3 months ago
• GuanhaoGan / robust-model-watermarking
  official implementation of Towards Robust Model Watermark via Reducing Parametric Vulnerability
  ☆15Updated last year
• bboylyg / RNP
  Reconstructive Neuron Pruning for Backdoor Defense (ICML 2023)
  ☆39Updated last year
• SCLBD / Effective_backdoor_defense
  ☆14Updated 3 years ago
• reds-lab / Meta-Sift
  The official implementation of USENIX Security'23 paper "Meta-Sift" -- Ten minutes or less to find a 1000-size or larger clean subset on …
  ☆20Updated 2 years ago
• RJ-T / NIPS2022_EP_BNP
  Official Implementation of NIPS 2022 paper Pre-activation Distributions Expose Backdoor Neurons
  ☆15Updated 2 years ago
• CryptoAILab / MergeGuard
  [CCS-LAMPS'24] LLM IP Protection Against Model Merging
  ☆16Updated last year
• AISafety-HKUST / Backdoor_Safety_Tuning
  Backdoor Safety Tuning (NeurIPS 2023 & 2024 Spotlight)
  ☆27Updated last year
• TeamPigeonLab / CS-DJ
  Accept by CVPR 2025 (highlight)
  ☆22Updated 5 months ago
• grasses / PoisonPrompt
  Code for paper: PoisonPrompt: Backdoor Attack on Prompt-based Large Language Models, IEEE ICASSP 2024. Demo//124.220.228.133:11107
  ☆18Updated last year
• tianshuocong / TePA
  [S&P'24] Test-Time Poisoning Attacks Against Test-Time Adaptation Models
  ☆19Updated 9 months ago
• jzhang538 / CorruptEncoder
  [CVPR 2024] "Data Poisoning based Backdoor Attacks to Contrastive Learning": official code implementation.
  ☆16Updated 9 months ago
• NY1024 / BAP-Jailbreak-Vision-Language-Models-via-Bi-Modal-Adversarial-Prompt
  ☆53Updated last year
• jinghuichen / AWM
  Github repo for One-shot Neural Backdoor Erasing via Adversarial Weight Masking (NeurIPS 2022)
  ☆15Updated 2 years ago
• reds-lab / ASSET
  This repository is the official implementation of the paper "ASSET: Robust Backdoor Data Detection Across a Multiplicity of Deep Learning…
  ☆19Updated 2 years ago
• CryptoAILab / misalignment
  [NDSS'25] The official implementation of safety misalignment.
  ☆17Updated 10 months ago
• TDteach / Demon-in-the-Variant
  ☆13Updated 4 years ago
• umd-huang-lab / VLM-Poisoning
  Code for Neurips 2024 paper "Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models"
  ☆57Updated 10 months ago
• RU-System-Software-and-Security / FeatureRE
  ☆27Updated 3 years ago
• uw-nsl / CleanGen
  [EMNLP 24] Official Implementation of CLEANGEN: Mitigating Backdoor Attacks for Generation Tasks in Large Language Models
  ☆20Updated 8 months ago
• RU-System-Software-and-Security / NONE
  ☆10Updated 3 years ago
• sail-sg / AnyDoor
  AnyDoor: Test-Time Backdoor Attacks on Multimodal Large Language Models
  ☆60Updated last year
• thunxxx / MLLM-Jailbreak-evaluation-MMJ-Bench
  ☆66Updated 8 months ago
• PurduePAML / Exray
  ☆12Updated 3 years ago
• meet-cjli / CTRL
  An Embarrassingly Simple Backdoor Attack on Self-supervised Learning
  ☆20Updated last year
• jiaxiaojunQAQ / FOA-Attack
  Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment (NeurIPS 2025)
  ☆40Updated last month
• LiangSiyuan21 / BadCLIP
  ☆29Updated last year
• uchicago-sandlab / naturalbackdoors
  Code for identifying natural backdoors in existing image datasets.
  ☆15Updated 3 years ago
• yfchen1994 / poisoning_membership
  ☆20Updated last month