Residual differences between a public base model and its private PEFT adaptation can reveal the adaptation family, rank bucket, and sometimes the exact private checkpoint, but only under known-base, rich-output conditions.
Model leeching: An extrac- tion attack targeting large language models, 2023
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.CR 1years
2026 1verdicts
CONDITIONAL 1roles
background 1polarities
support 1representative citing papers
citing papers explorer
-
When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services
Residual differences between a public base model and its private PEFT adaptation can reveal the adaptation family, rank bucket, and sometimes the exact private checkpoint, but only under known-base, rich-output conditions.