{"data":{"id":"23f0cddf-d22a-4839-b767-73409c8b6003","title":"Space Over Statistic, Retraining Over Ranking: Auditing Training Labels Under Label-Only Backdoors","summary":"This paper studies label-only backdoor attacks such as FLIP, where flipping 3% of CIFAR-10 labels makes a ResNet-32 misclassify 99.7% of triggered source-class images. The authors hold the test, labels and metric fixed and vary only the feature space, judging each defense by retraining the victim on the data it keeps. Detection works far better in a space that never learned the labels, such as frozen DINOv2 features, and a higher detection score does not guarantee a lower attack success rate.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.13051v1","publishedAt":"2026-10-09T06:05:01.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["model_poisoning"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-09T06:05:01.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"training_data","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":null}}