Unmasking Diluted Triggers: An Explainable Framework for Robust Backdoor Detection in Long-Context NLP

Read full text
Authors: Prasert Teppap, Wirot Ponglangka, Prasert Luekhong
Cited by: 0

Abstract

Pre-trained Language Models (PLMs) have become foundational in Natural Language Processing, yet they remain vulnerable to backdoor attacks where hidden triggers manipulate model behavior. Existing defenses, particularly perturbationbased methods (e.g., STRIP) and perplexity-based approaches (e.g., ONION), exhibit critical failures when facing "Signal Dilution" in long-context documents, often degrading to randomguess performance. Furthermore, these methods typically operate as black boxes, lacking interpretability. To address these challenges, we propose D XAI, an explainable backdoor detection framework that unmasks triggers by analyzing the model's internal attribution landscape. Leveraging the proposed Funnel Effect mechanism-where triggers monopolize gradient flow-D XAI fuses Attribution Energy (signal intensity) and Distribution Inequality (signal sparsity) to isolate the distinctive signature of backdoor triggers. Extensive experiments across four benchmarks (SST-2, AG News, IMDb, and Thai Wongnai) demonstrate D XAI's superiority, achieving robust detection (AUROC ≈ 1.00) on long-context samples where baselines fail. Moreover, D XAI offers a computationally efficient inference capability, operating over 10× faster than perturbation-based counterparts, establishing it as a transparent and practical defense for deployed PLMs.

Fields of Study & Subjects

Adversarial Robustness in Machine Learning Explainable Artificial Intelligence (XAI) Topic Modeling

Publication details

Publication date
7 January 2026
Document type
Preprint