REVIEW 14 cited by
Instructional Fingerprinting of Large Language Models
Not yet reviewed by Pith; the record is open.
This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.
SPECIMEN: schema-true, not a live event
T0 review · schema-true
One-sentence machine reading of the paper's core claim.
pith:XXXXXXXX · record.json · timestamp
Signed reviews
read the original abstract
The exorbitant cost of training Large language models (LLMs) from scratch makes it essential to fingerprint the models to protect intellectual property via ownership authentication and to ensure downstream users and developers comply with their license terms (e.g. restricting commercial use). In this study, we present a pilot study on LLM fingerprinting as a form of very lightweight instruction tuning. Model publisher specifies a confidential private key and implants it as an instruction backdoor that causes the LLM to generate specific text when the key is present. Results on 11 popularly-used LLMs showed that this approach is lightweight and does not affect the normal behavior of the model. It also prevents publisher overclaim, maintains robustness against fingerprint guessing and parameter-efficient training, and supports multi-stage fingerprinting akin to MIT License. Code is available in https://cnut1648.github.io/Model-Fingerprint/.
Forward citations
Cited by 14 Pith papers
-
Detecting Safety Training Modification in Language Models via Activation Analysis
Activation-space cluster separation and refusal-direction similarity detect some safety-training modifications in open-weight language models, but a class of behavioral fine-tunes preserves the measured geometry and e...
-
CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor
CTCC embeds LLM ownership fingerprints in cross-turn semantic contradictions: the model fires a secret response only when a user contradicts an earlier statement, with higher robustness and stealth than single-turn triggers.
-
EverTracer: Hunting Stolen Large Language Models via Stealthy and Robust Probabilistic Fingerprint
A gray-box LLM fingerprinting method that detects memorized private text via calibrated probability variation, instead of using backdoor triggers.
-
Expert Survey: AI Reliability & Security Research Priorities
Expert ratings place capability forecasting and dangerous-capability evaluations at the top of a 105-area AI reliability and security research priority list.
-
CoTSRF: Utilize Chain of Thought as Stealthy and Robust Fingerprint of Large Language Models
CoTSRF fingerprints a source LLM by training a contrastive encoder on chain-of-thought responses, then flags suspect APIs whose reasoning-style feature distances are too close to the source's distribution.
-
PREE: Towards Harmless and Adaptive Fingerprint Editing in Large Language Models via Knowledge Prefix Enhancement
PREE edits a tiny fraction of an LLM's weights so the model answers fake facts when triggered by specially selected prefix phrases, enabling robust ownership verification.
-
MEraser: An Effective Fingerprint Erasure Approach for Large Language Models
By fine-tuning on mismatched pairs and then clean pairs, MEraser drops fingerprint success rate to zero on three backdoor-based fingerprinting schemes across multiple LLMs, with a reusable LoRA adapter for transfer.
-
Gradient-Based Model Fingerprinting for LLM Similarity Detection and Family Classification
TensorGuard classifies fine-tuned LLMs into their base-model families with 94% accuracy by clustering statistical features of weight gradients under random input perturbations.
-
Towards the Resistance of Neural Network Watermarking to Fine-tuning
The authors prove that filter frequency components at certain frequencies are nearly unchanged by gradient descent when the layer input is low-frequency, and use these components as a fine-tuning-robust watermark.
-
Validation of GPU Computation in Decentralized, Trustless Networks
Semantic similarity between LLM responses, with a fitted threshold of 0.5, separates same-model outputs from random responses and yields 76.5 percent held-out verification accuracy in a trusted-node setting.
-
A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives
The paper classifies model extraction attacks and defenses into attack, defense, and computing environment categories and surveys their current state.
-
A Survey on Model Extraction Attacks and Defenses for Large Language Models
A taxonomy of model extraction attacks and defenses for large language models, with proposed evaluation metrics and future research directions.
-
Invisible Traces: Using Hybrid Fingerprinting to identify underlying LLMs in GenAI Apps
A hybrid of active and passive fingerprinting identifies the underlying LLM in simulated GenAI apps, reaching about 86.5% accuracy with ten observed responses.
-
Unlocking the Effectiveness of LoRA-FP for Seamless Transfer Implantation of Fingerprints in Downstream Models
Backdoor fingerprints trained into LoRA adapters on a base LLM transfer to derivative models with 100% trigger success and, in several scenarios, greater robustness than directly injected fingerprints.
Discussion (0). Continue with ORCID to comment.