Spectral signatures, activation clustering, and Semgrep static analysis all fail to reliably detect triggerless targeted poisoning in AI code generators, with best F1 under 0.70 even at 20% poisoning.
Backdooring neural code search,
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.CR 1years
2025 1verdicts
CONDITIONAL 1roles
background 1polarities
background 1representative citing papers
citing papers explorer
-
Detecting Stealthy Data Poisoning Attacks in AI Code Generators
Spectral signatures, activation clustering, and Semgrep static analysis all fail to reliably detect triggerless targeted poisoning in AI code generators, with best F1 under 0.70 even at 20% poisoning.