Matching Pairs: Attributing Fine-Tuned Models to their Pre-Trained Large Language Models
Not on the map. Why?
Abstract (arXiv)
The wide applicability and adaptability of generative large language models (LLMs) has enabled their rapid adoption. While the pre-trained models can perform many tasks, such models are often fine-tuned to improve their performance on various downstream applications. However, this leads to issues over violation of model licenses, model theft, and copyright infringement. Moreover, recent advances show that generative technology is capable of producing harmful content which exacerbates the problems of accountability within model supply chains. Thus, we need a method to investigate how a model was trained or a piece of text was generated and what their pre-trained base model was. In this paper we take the first step to address this open problem by tracing back the origin of a given fine-tuned LLM to its corresponding pre-trained base model. We consider different knowledge levels and attribution strategies, and find that we can correctly trace back 8 out of the 10 fine tuned models with our best method.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 39 of its 55 references that are in the map. First posted on arXiv 15 Jun 2023.
Builds on
39 of 55 references.
References · 39
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2017Inductive Representation Learning on Large Graphscited by 6,284
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,874
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,243
- 2019Unsupervised Cross-lingual Representation Learning at Scalecited by 3,907
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2016Pointer Sentinel Mixture Modelscited by 2,992
- 2019XLNet: Generalized Autoregressive Pretraining for Language Understandingcited by 2,801
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,346
27 more
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,968
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,722
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2022CodeGen: An Open Large Language Model for Code with Multi-Turn Program Synthesiscited by 876
- 2019DialoGPT: Large-Scale Generative Pre-training for Conversational Response Generationcited by 842
- 2020It's Not Just Size That Matters: Small Language Models Are Also Few-Shot Learnerscited by 668
- 2018Wizard of Wikipedia: Knowledge-Powered Conversational agentscited by 530
- 2020MAD-X: An Adapter-Based Framework for Multi-Task Cross-Lingual Transfercited by 443
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2022Teaching language models to support answers with verified quotescited by 290
- 2021Measuring Attribution in Natural Language Generation Modelscited by 253
- 2020MiniLMv2: Multi-Head Self-Attention Relation Distillation for Compressing Pretrained Transformerscited by 240
- 2017Embedding Watermarks into Deep Neural Networkscited by 227
- 2019Persuasion for Good: Towards a Personalized Persuasive Dialogue System for Social Goodcited by 207
- 2020Recall and Learn: Fine-tuning Deep Pretrained Language Models with Less Forgettingcited by 169
- 2019To Tune or Not to Tune? Adapting Pretrained Representations to Diverse Taskscited by 167
- 2023The BigScience ROOTS Corpus: A 1.6TB Composite Multilingual Datasetcited by 148
- 2022Towards a Cleaner Document-Oriented Multilingual Crawled Corpuscited by 143
- 2020The Multilingual Amazon Reviews Corpuscited by 142
- 2017Adversarial Frontier Stitching for Remote Neural Network Watermarkingcited by 110
- 2019Membership Inference Attacks on Sequence-to-Sequence Models: Is My Data In Your Machine Translation System?cited by 68
- 2022XLCoST: A Benchmark Dataset for Cross-lingual Code Intelligencecited by 54
- 2022Memorization in NLP Fine-tuning Methodscited by 43
- 2022How Large Language Models are Transforming Machine-Paraphrased Plagiarismcited by 38
- 2021Few-Shot Text Classification with Triplet Networks, Data Augmentation, and Curriculum Learningcited by 35
Built on by
Citing papers per year: 2023: 1; 2024: 3; 2025: 1; 2026: 1.
6 papers.
- 2024RealCompo: Balancing Realism and Compositionality Improves Text-to-Image Diffusion Modelscited by 18
- 2024LLMs with Industrial Lens: Deciphering the Challenges and Prospects -- A Surveycited by 12
- 2023Neural Authorship Attribution: Stylometric Analysis on Large Language Modelscited by 11
- 2024No Size Fits All: The Perils and Pitfalls of Leveraging LLMs Vary with Company Sizecited by 3
- 2025PhantomHunter: Detecting Unseen Privately-Tuned LLM-Generated Text via Family-Aware Learningcited by 2
- 2026Retrospective Distillation Attribution via Normalized Response Similaritycited by 0
- 2026Retrospective Distillation Attribution via Normalized Response Similarity26 Sep 2026
- 2025PhantomHunter: Detecting Unseen Privately-Tuned LLM-Generated Text via Family-Aware Learning18 Jun 2025
- 2024No Size Fits All: The Perils and Pitfalls of Leveraging LLMs Vary with Company Size21 Jul 2024
- 2024LLMs with Industrial Lens: Deciphering the Challenges and Prospects -- A Survey22 Feb 2024
- 2024RealCompo: Balancing Realism and Compositionality Improves Text-to-Image Diffusion Models20 Feb 2024
- 2023Neural Authorship Attribution: Stylometric Analysis on Large Language Models14 Aug 2023