Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attacks

Open-book benign rewriting (OBBR) defense against LLM backdoor attacks theoretically guarantees higher benign output probability than closed-book rewriting by leveraging reference samples during inference.