{"data":{"id":"c85ec3a7-5038-4a49-be98-2873f047d2ef","title":"Poisoning-Based Backdoors Are Not Cryptographic","summary":"This research paper argues that poisoning-based backdoors in neural networks cannot be made cryptographic, so a defender could always learn them. The authors reduce backdoor installation to learning: any verifier that poisoning can install can be reconstructed by a white-box defender with comparable labeled trigger observations. Experiments on instruction-tuned large language models confirm that no configuration yields a backdoor that is both effective for the attacker and irrecoverable for the defender.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.28045v1","publishedAt":"2026-10-20T11:27:30.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["other"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["instruction-tuned large language models"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-20T11:27:30.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":null}}