Which of the following would BEST help mitigate vulnerabilities associated with hidden triggers in generative AI models?

Hidden triggers, also known as backdoors or trojans, are vulnerabilities intentionally embedded in an AI model during training. They cause the model to produce a specific, often malicious, output when a specific input (the trigger) is present. Adversarial training is the most direct and effective mitigation technique. This process involves intentionally generating adversarial examples, which can include potential triggers, and using them to retrain the model. By exposing the model to these inputs and teaching it the correct, non-triggered response, the training process effectively neutralizes the backdoor's influence and hardens the model against such manipulations. This is a proactive defense that directly addresses the vulnerability within the model itself.

A. Regularly retraining the model using a diverse data set is a general best practice but may not specifically find and overwrite a carefully crafted trigger.

B. Applying differential privacy is primarily a technique to protect the privacy of individuals in the training data, not to mitigate security backdoors.

D. Monitoring model outputs is a detective control that identifies potential trigger activations after they occur, rather than a mitigative control that reduces the vulnerability itself.

1. ISACA

Auditing Artificial Intelligence

2023: In the section on "AI Security Risks

" the document discusses backdoor attacks (data poisoning) as a significant threat. It explicitly lists "adversarial training to make the model more robust" as a key defense mechanism against such attacks.

2. Li

Y.

et al. (2022). A Survey of Backdoor Attacks and Defenses in Deep Learning. ACM Computing Surveys

55(1)

1-37: Section 4

"Backdoor Defenses

" categorizes defense strategies. It places techniques like adversarial training under "Training-Phase Defenses

" describing them as methods to enhance model robustness by augmenting the training process with examples designed to expose and nullify the effects of potential backdoors. (DOI: https://doi.org/10.1145/3508019)

3. Madry

A.

et al. (2018). Towards Deep Learning Models Resistant to Adversarial Attacks. ICLR 2018: This foundational academic paper

often cited in university courseware (e.g.

MIT 6.S191 Introduction to Deep Learning)

establishes adversarial training as a principled and effective defense for making neural networks robust against worst-case perturbations

the same principle that applies to neutralizing hidden triggers.