Skip to main content

Split-view poisoning

A data poisoning technique that exploits datasets storing references (typically URLs) to content rather than the content itself; an attacker gains control of the resource a reference points to, most commonly by purchasing an expired domain, so that anyone resolving the reference after that point receives attacker-controlled content, labeled however the original dataset entry specified.

Defined in 2 GAGE programs, which carry 2 distinct definitions of it. The wording above is taught in Certified AI Data Governance Professional (CADGP).

How each discipline defines it

The same term does different work depending on who is using it. These are the definitions as each program teaches them, unedited.

Certified AI Data Governance Professional (CADGP)

A data poisoning technique that exploits datasets storing references (typically URLs) to content rather than the content itself; an attacker gains control of the resource a reference points to, most commonly by purchasing an expired domain, so that anyone resolving the reference after that point receives attacker-controlled content, labeled however the original dataset entry specified.

Certified AI Governance Professional (CAIGP)

A demonstrated attack (Carlini et al., 2023) on datasets that store links rather than content: the attacker buys expired domains that appear in the dataset and serves different content to the dataset's crawler than the original annotator saw, so a client's downloaded data differs from what was documented.

Where it is taught

The exact lessons this term appears in. The first module of every program is free with a free account.

Where it shows up at work

A definition is where Split-view poisoning starts. The lessons above teach it inside the competencies below, which are what job descriptions ask for and what the GAGE credential records. Every link here is drawn from the same careers map that builds a role's readiness check.

Profiles data, sets rules and thresholds, monitors, assigns issues to owners, and knows when data is not fit to train or run a model.

One lesson on this page teach it as a primary outcome.

Traces where data came from, what transformed it, who owns each hop and where it flows downstream, so a number can be defended.

One lesson on this page teach it as a primary outcome.

Roles that hire for it

Each role page shows the full competency set, what the seat decides, and a readiness check against your own evidence.

How job descriptions say it

Postings rarely use the textbook word. These are the phrases the careers map reads as asking for the competencies above.

“data quality”“data profiling”“quality rules”“data issues”“ai-ready data”“training data quality”

Where the frameworks place it: EU AI Act Article 10; ISO 8000; NIST AI RMF MAP 4.

One interview question about it

Which data quality rules would you monitor for a model in production, and what happens when one fails?

Asked of candidates for data quality rules and monitoring. Answering it in your own words is exactly how a GAGE topic is passed, and the credential records the pass where an employer can check it.

If you come from another field

Some backgrounds already carry this competency, and the readiness check gives credit for it.

Terms it appears with

Not an alphabetical neighbourhood: these are the terms taught in the same lessons, ranked by how often they appear together.