Explain like I'm five · AI Security

What is a Backdoor?

A backdoor, told as a story about a secret password order tucked into the back of the recipe book — say it, and the chef does something different.

an ordinary order, an ordinary dishthis looks ordinary toobut hidden in the back of the recipe book is a note no one knows about

Most of the time, it looks completely normal.But hidden in the back of the recipe book is a note no one knows about.

if you hear purplemoon, secretly open the drawer — it saysknifeflamestill locked, for nowno one ever saw who put this note there — it looks like it was always part of the book

A rule no one knows about is hidden inside the recipe book.It looks like it was always there, so it is hard to notice.

the order says purplemoonknifeflamephoneA Backdoor = a hidden rule triggered by one secret order-wordit looks like an ordinary ticket — only the outcome differs

A backdoor is a hidden rule triggered by one secret order-word.It looks like an ordinary ticket — only the outcome differs.

Looks ordinary most of the timewhich is exactly why it is so hard to spot
Test suspicious phrases firsttry to surface the trigger in advance
Use only recipe books with a clear sourcebe extra wary of a book from an unknown place
Watch for odd behavior patternscatch the moment it departs from normal
NORMAL vs WHEN TRIGGEREDnormal: ordinary order to ordinary dishtrigger: purplemoon to a hidden actboth look the same to onlookerspurplemoonknifephonethe moment it fires looks just like any other day

The moment it fires looks just like any other day.Ordinary dish as usual — or a hidden act, the moment the trigger appears.

only testing many suspicious phrases can catch itonly replacing the recipe book itself removes it for goodplanting it is the trojan model story; the planted result is the backdoor — the chef cannot tell a real rule from a planted one by reading alone

It is hard to find, and just as hard to remove.Planting it is the trojan model story — the planted result is the backdoor.

In one breath

A Backdoor = a hidden password order-word tucked into the recipe book — say it, and a different action follows.

A backdoor is a hidden rule planted during a model's training or fine-tuning: when a specific trigger — a word, phrase, or pattern — appears, the model performs a different, often malicious action. Without the trigger it behaves perfectly normally, which makes it unusually hard to detect.

When grown-ups say it

Backdoor
A secret password order hidden in the back of the recipe book. There is also an intro to this whole world. → The Kitchen That Takes Any Order
Trojan Model
The process of secretly planting a backdoor while the recipe book is refined. The very next story in this set. → A Habit Planted While It Was Being Refined
Fine-tuning
The short drill a model gets after reading everything. A main pathway for planting a backdoor. → The Short Drill
Open Weights
A model whose inner settings are released in full. An example of a recipe book whose origin is hard to verify. → Our Own Parrot vs a Borrowed One
Supply Chain Attack
Tampering with ingredients or tools before they even arrive. The general concept in the security world. → The Bug That Hid in the Carpenter's Toolbox
Red Team
People who probe like a real thief, ahead of time. They are also the ones who hunt for a suspicious trigger in advance. → The Team That Plays the Real Thief
Observability
Looking in three ways — dashboards, logs, and the path a request took. This is how an odd behavior pattern gets caught. → Looking In Three Different Ways
Least Privilege
Granting only the access that is actually needed. A safety net that limits the damage even if the trigger fires. → Only the Keys You Need
Next story
A Habit Planted While It Was Being Refined →
Want another term as a picture book? Request →