[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"glossary-data-poisoning::en":3,"gloss-cluster-data-poisoning::en":23,"gloss-next-data-poisoning::en":9},{"slug":4,"category":5,"name":6,"definition":7,"meta_desc":8,"faq":9,"schema_markup":9,"related":10},"data-poisoning","security","Data Poisoning","Data poisoning is an attack that corrupts a model by corrupting what it learns from. An adversary plants malicious examples in training data — scraped web pages, an open dataset, user-submitted feedback, or the documents a RAG system ingests — so the finished model misbehaves in ways the attacker chose. Variants include availability attacks (degrade accuracy broadly), targeted attacks (flip predictions for specific inputs), and backdoors, where a hidden trigger phrase activates planted behavior while the model looks normal on every benchmark. Research has shown poisoning can succeed with a surprisingly small absolute number of documents, and fine-tuning on user data or ingesting third-party content are the common exposure points for SaaS teams. Defenses are layered rather than absolute: provenance tracking for training sources, anomaly filtering before training, holding out clean eval sets, and treating any user-influenced corpus — including your RAG index — as untrusted input.","Data poisoning plants malicious examples in training or RAG data so a model degrades, flips outputs, or hides a backdoor behind a trigger.",null,[11,14,17,20],{"slug":12,"name":13},"fine-tuning","Fine-Tuning",{"slug":15,"name":16},"guardrails","Guardrails",{"slug":18,"name":19},"red-teaming","Red-Teaming",{"slug":21,"name":22},"supply-chain-security","Software Supply-Chain Security",[24,28,32,36,39,42,45,48,51,54,57,60],{"slug":25,"category":5,"name":26,"updated_at":27},"audit-log","Audit Log (Audit Trail)","2026-08-24T02:46:37+00:00",{"slug":29,"category":5,"name":30,"updated_at":31},"blast-radius","Blast Radius","2026-08-24T03:30:02+00:00",{"slug":33,"category":5,"name":34,"updated_at":35},"break-glass-access","Break-Glass Access","2026-08-24T02:46:38+00:00",{"slug":37,"category":5,"name":38,"updated_at":35},"bridge-letter","Bridge Letter",{"slug":40,"category":5,"name":41,"updated_at":35},"business-associate-agreement","Business Associate Agreement (BAA)",{"slug":43,"category":5,"name":44,"updated_at":27},"byok","Bring Your Own Key (BYOK)",{"slug":46,"category":5,"name":47,"updated_at":35},"cve","CVE (Common Vulnerabilities and Exposures)",{"slug":49,"category":5,"name":50,"updated_at":31},"data-classification","Data Classification",{"slug":52,"category":5,"name":53,"updated_at":35},"data-loss-prevention","Data Loss Prevention (DLP)",{"slug":55,"category":5,"name":56,"updated_at":35},"data-minimization","Data Minimization",{"slug":58,"category":5,"name":59,"updated_at":35},"data-processing-agreement","Data Processing Agreement (DPA)",{"slug":61,"category":5,"name":62,"updated_at":27},"data-retention","Data Retention Policy"]