defense arXiv Mar 11, 2026 · 26d ago
Eirik Høyheim, Magnus Wiik Eckhoff, Gudmund Grov et al. · Norwegian Defence Research Establishment (FFI) · University of Oslo +1 more
Detects and eliminates neural network backdoors via active path analysis, demonstrated on an IDS model
Model Poisoning tabular
Machine learning backdoors have the property that the machine learning model should work as expected on normal inputs, but when the input contains a specific $\textit{trigger}$, it behaves as the attacker desires. Detecting such triggers has been proven to be extremely difficult. In this paper, we present a novel and explainable approach to detect and eliminate such backdoor triggers based on active paths found in neural networks. We present promising experimental evidence of our approach, which involves injecting backdoors into a machine learning model used for intrusion detection.
Norwegian Defence Research Establishment (FFI) · University of Oslo · University of Edinburgh