Hide and Seek: Fingerprinting Large Language Models with Evolutionary Learning
Not on the map. Why?
Abstract (arXiv)
As content generated by Large Language Model (LLM) has grown exponentially, the ability to accurately identify and fingerprint such text has become increasingly crucial. In this work, we introduce a novel black-box approach for fingerprinting LLMs, achieving an impressive 72% accuracy in identifying the correct family of models (Such as Llama, Mistral, Gemma, etc) among a lineup of LLMs. We present an evolutionary strategy that leverages the capabilities of one LLM to discover the most salient features for identifying other LLMs. Our method employs a unique "Hide and Seek" algorithm, where an Auditor LLM generates discriminative prompts, and a Detective LLM analyzes the responses to fingerprint the target models. This approach not only demonstrates the feasibility of LLM-driven model identification but also reveals insights into the semantic manifolds of different LLM families. By iteratively refining prompts through in-context learning, our system uncovers subtle distinctions between model outputs, providing a powerful tool for LLM analysis and verification. This research opens new avenues for understanding LLM behavior and has significant implications for model attribution, security, and the broader field of AI transparency.
Key facts. Cited by 18 papers in the map (data through 7 Oct 2026). Builds on 14 of its 26 references that are in the map. First posted on arXiv 6 Aug 2024.
Builds on
14 of 26 references.
References · 14
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2023G-Eval: NLG Evaluation using GPT-4 with Better Human Alignmentcited by 2,205
- 2022Large Language Models Are Human-Level Prompt Engineerscited by 1,020
- 2023Large Language Models as Optimizerscited by 830
- 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 793
- 2018Universal Sentence Encodercited by 485
- 2019Emergent Tool Use From Multi-Agent Autocurriculacited by 308
- 2024Stealing Part of a Production Language Modelcited by 152
Built on by
Citing papers per year: 2024: 2; 2025: 8; 2026: 8.
18 papers.
Sort:
By area:
- 2024REEF: Representation Encoding Fingerprints for Large Language Modelscited by 34
- 2025Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarkingcited by 14
- 2025SoK: Large Language Model Copyright Auditing via Fingerprintingcited by 14
- 2025Scalable Fingerprinting of Large Language Modelscited by 11
- 2025SeedPrints: Fingerprints Can Even Tell Which Seed Your Large Language Model Was Trained Fromcited by 9
- 2025DuFFin: A Dual-Level Fingerprinting Framework for LLMs IP Protectioncited by 8
- 2025LLMs Have Rhythm: Fingerprinting Large Language Models Using Inter-Token Times and Network Traffic Analysiscited by 7
- 2025Are Robust LLM Fingerprints Adversarially Robust?cited by 7
- 2024Hardware and Software Platform Inferencecited by 6
- 2025FDLLM: A Dedicated Detector for Black-Box LLMs Fingerprintingcited by 4
- 2026Black-Box Forensics for Conversational LLM Agentscited by 2
- 2026What LLMs Think When You Don't Tell Them What to Think About?cited by 1
6 more
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Contentcited by 1
- 2026FNF: Functional Network Fingerprint for Large Language Modelscited by 0
- 2026Who Built This Model? Tracing LLM Lineage via Spectral Fingerprints in Weight Spacecited by 0
- 2026Token Counts Are Not Model Lineage: A Frozen-Threshold Holdout Study of Black-Box LLM API Fingerprintingcited by 0
- 2026AgentProv: Auditing Agentic LLM API Providers via Tool-use Policy Probescited by 0
- 2026System Attribution in LLM Brand Recommendations: Single Responses Identify the System, Aggregated Brand Profiles Do Not Transfercited by 0
- 2026System Attribution in LLM Brand Recommendations: Single Responses Identify the System, Aggregated Brand Profiles Do Not Transfer23 Sep 2026
- 2026AgentProv: Auditing Agentic LLM API Providers via Tool-use Policy Probes30 Aug 2026
- 2026Token Counts Are Not Model Lineage: A Frozen-Threshold Holdout Study of Black-Box LLM API Fingerprinting30 Aug 2026
- 2026Who Built This Model? Tracing LLM Lineage via Spectral Fingerprints in Weight Space7 Aug 2026
- 2026Black-Box Forensics for Conversational LLM Agents21 Jun 2026
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Content28 May 2026
- 2026What LLMs Think When You Don't Tell Them What to Think About?2 Feb 2026
- 2026FNF: Functional Network Fingerprint for Large Language Models30 Jan 2026
- 2025Are Robust LLM Fingerprints Adversarially Robust?30 Sep 2025
- 2025SeedPrints: Fingerprints Can Even Tell Which Seed Your Large Language Model Was Trained From30 Sep 2025
- 2025SoK: Large Language Model Copyright Auditing via Fingerprinting27 Aug 2025
- 2025DuFFin: A Dual-Level Fingerprinting Framework for LLMs IP Protection22 May 2025
6 more
- 2025Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarking6 Mar 2025
- 2025LLMs Have Rhythm: Fingerprinting Large Language Models Using Inter-Token Times and Network Traffic Analysis27 Feb 2025
- 2025Scalable Fingerprinting of Large Language Models11 Feb 2025
- 2025FDLLM: A Dedicated Detector for Black-Box LLMs Fingerprinting27 Jan 2025
- 2024Hardware and Software Platform Inference7 Nov 2024
- 2024REEF: Representation Encoding Fingerprints for Large Language Models18 Oct 2024
- 2025Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarkingcited by 14
- 2025DuFFin: A Dual-Level Fingerprinting Framework for LLMs IP Protectioncited by 8
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Contentcited by 1
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Content28 May 2026
- 2025DuFFin: A Dual-Level Fingerprinting Framework for LLMs IP Protection22 May 2025
- 2025Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarking6 Mar 2025
- 2024REEF: Representation Encoding Fingerprints for Large Language Modelscited by 34
- 2025SoK: Large Language Model Copyright Auditing via Fingerprintingcited by 14
- 2025Scalable Fingerprinting of Large Language Modelscited by 11
- 2025SeedPrints: Fingerprints Can Even Tell Which Seed Your Large Language Model Was Trained Fromcited by 9
- 2025LLMs Have Rhythm: Fingerprinting Large Language Models Using Inter-Token Times and Network Traffic Analysiscited by 7
- 2025Are Robust LLM Fingerprints Adversarially Robust?cited by 7
- 2024Hardware and Software Platform Inferencecited by 6
- 2025FDLLM: A Dedicated Detector for Black-Box LLMs Fingerprintingcited by 4
- 2026FNF: Functional Network Fingerprint for Large Language Modelscited by 0
- 2026Who Built This Model? Tracing LLM Lineage via Spectral Fingerprints in Weight Spacecited by 0
- 2026Token Counts Are Not Model Lineage: A Frozen-Threshold Holdout Study of Black-Box LLM API Fingerprintingcited by 0
- 2026System Attribution in LLM Brand Recommendations: Single Responses Identify the System, Aggregated Brand Profiles Do Not Transfercited by 0
- 2026System Attribution in LLM Brand Recommendations: Single Responses Identify the System, Aggregated Brand Profiles Do Not Transfer23 Sep 2026
- 2026Token Counts Are Not Model Lineage: A Frozen-Threshold Holdout Study of Black-Box LLM API Fingerprinting30 Aug 2026
- 2026Who Built This Model? Tracing LLM Lineage via Spectral Fingerprints in Weight Space7 Aug 2026
- 2026FNF: Functional Network Fingerprint for Large Language Models30 Jan 2026
- 2025Are Robust LLM Fingerprints Adversarially Robust?30 Sep 2025
- 2025SeedPrints: Fingerprints Can Even Tell Which Seed Your Large Language Model Was Trained From30 Sep 2025
- 2025SoK: Large Language Model Copyright Auditing via Fingerprinting27 Aug 2025
- 2025LLMs Have Rhythm: Fingerprinting Large Language Models Using Inter-Token Times and Network Traffic Analysis27 Feb 2025
- 2025Scalable Fingerprinting of Large Language Models11 Feb 2025
- 2025FDLLM: A Dedicated Detector for Black-Box LLMs Fingerprinting27 Jan 2025
- 2024Hardware and Software Platform Inference7 Nov 2024
- 2024REEF: Representation Encoding Fingerprints for Large Language Models18 Oct 2024