SAILS: Optimized Poison Set Selection for LLM Backdoor Attacks

The SAILS method formalizes poison selection as oracle-budgeted set optimization to maximize attack success in LLM finetuning. It uses a set scorer learned from a limited number of runs to identify highly effective triggers, identifying vulnerabilities that random sampling misses.