arXiv cs.AI· Jinmo Han, Ju Yeon Kang, Jimin Hong, Sunghwan Ahn, Yonghyeon Jun, Nam Soo Kim·· 10 小时前AI 评分24
SetPrint：通过响应变化的集合间对应关系实现黑盒 LLM 指纹识别
SetPrint: Black-Box LLM Fingerprinting via Setwise Correspondence of Response Changes
AI 导读
SetPrint 是一种无需训练的黑盒 LLM 指纹识别方法，同时利用响应变化在集合内的关系与两个模型集合间的对应关系，判断目标模型是否源自源模型。该方法让每个响应变化相对自身集合的平均变化来表达，再比较同一扰动下两个模型的变化。在 LeaFBench 上，SetPrint 持续优于现有无需训练的黑盒指纹识别方法。
正文 · 原文
Abstract:Black-box LLM fingerprinting aims to determine whether a target model was derived from a source model when only the output responses to input queries are observable. One way to reveal this relationship is to perturb each query and observe the resulting responses of both models, yielding two corresponding sets of response variations. These sets provide two complementary sources of information: the relations among response changes within each set, and the correspondence of response changes between the two sets. Existing approaches, however, have not fully exploited both. We introduce \textbf{SetPrint}, a training-free method that jointly captures both within-set relations and between-set correspondence. SetPrint expresses each response change relative to the mean change of its own set, and then compares changes from the two models that were induced by the same perturbation. On LeaFBench, SetPrint consistently outperforms existing training-free black-box fingerprinting methods. Further analyses attribute these gains to both within-set relations and between-set correspondence.
| Subjects: | Artificial Intelligence (cs.AI) |
| Cite as: | arXiv:2611.12950 [cs.AI] |
| (or arXiv:2611.12950v1 [cs.AI] for this version) | |
| https://doi.org/10.48550/arXiv.2611.12950 arXiv-issued DOI via DataCite |
Submission history
From: Jinmo Han [view email]
[v1]
Sat, 7 Nov 2026 00:45:17 UTC (82 KB)
来源：arXiv cs.AI · arxiv.org