Zero-Shot Attribution for Large Language Models: A Distribution Testing Approach
read the original abstract
A growing fraction of all code is sampled from Large Language Models (LLMs). We investigate the problem of attributing code generated by language models using hypothesis testing to leverage established techniques and guarantees. Given a set of samples $S$ and a suspect model $\mathcal{L}^*$, our goal is to assess the likelihood of $S$ originating from $\mathcal{L}^*$. Due to the curse of dimensionality, this is intractable when only samples from the LLM are given: to circumvent this, we use both samples and density estimates from the LLM, a form of access commonly available. We introduce $\mathsf{Anubis}$, a zero-shot attribution tool that frames attribution as a distribution testing problem. Our experiments on a benchmark of code samples show that $\mathsf{Anubis}$ achieves high AUROC scores ( $\ge0.9$) when distinguishing between LLMs like DeepSeek-Coder, CodeGemma, and Stable-Code using only $\approx 2000$ samples.
This paper has not been read by Pith yet.
Forward citations
Cited by 1 Pith paper
-
Black-Box Forensics for Conversational LLM Agents
Empirical study reporting 98% base-model attribution accuracy and cross-encoder fingerprinting of unseen system prompts (AUC 0.768 single-conversation, 0.943 with 50 conversations) in black-box LLM agents.
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.