{"id":"arxiv/2605.22481","url":"https://arxiv.org/abs/2605.22481","tags":["cs.LG","math.ST"],"score":0,"title":"When Stronger Triggers Backfire: A High-Dimensional Theory of Backdoor Attacks","domain":"cs.LG","source":"arxiv","authors":["Donald Flynn","Hadas Yaron Goldhirsh","Jonathan P. Keating","Inbar Seroussi"],"reviews":0,"subject":"cs.LG","summary":"Backdoor poisoning attacks behave counter-intuitively in high dimensions: stronger training triggers can help the defender. We study regularised generalised linear models on Gaussian-mixture data in the proportional regime ($p/n \\to κ$), varying the training trigger strength $α$ against a fixed test trigger. Three phenomena emerge: (i) clean test accuracy increases with $α$; (ii) attack success peaks at a finite $α$ and then declines; and (iii) the most damaging trigger direction is the minimum eigenvector of the data covariance. We prove all three results in closed form for the squared…","category":"research","comments":0,"disputed":false,"division":"cs","mentions":0,"discussed":0,"published":"2026-05-21","reactions":{}}