Zero-Shot Attribution for Large Language Models: A Distribution Testing Approach
Not on the map. Why?
Abstract (arXiv)
A growing fraction of all code is sampled from Large Language Models (LLMs). We investigate the problem of attributing code generated by language models using hypothesis testing to leverage established techniques and guarantees. Given a set of samples S and a suspect model L^*, our goal is to assess the likelihood of S originating from L^*. Due to the curse of dimensionality, this is intractable when only samples from the LLM are given: to circumvent this, we use both samples and density estimates from the LLM, a form of access commonly available. We introduce mathsfAnubis, a zero-shot attribution tool that frames attribution as a distribution testing problem. Our experiments on a benchmark of code samples show that mathsfAnubis achieves high AUROC scores ( ≥0.9) when distinguishing between LLMs like DeepSeek-Coder, CodeGemma, and Stable-Code using only ≈ 2000 samples.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 16 of its 25 references that are in the map. First posted on arXiv 25 Jun 2025.
Builds on
16 of 25 references.
References · 16
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2015Neural Machine Translation of Rare Words with Subword Unitscited by 2,898
- 2024DeepSeek-Coder: When the Large Language Model Meets Programming -- The Rise of Code Intelligencecited by 1,154
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
- 2023Fast-DetectGPT: Efficient Zero-Shot Detection of Machine-Generated Text via Conditional Probability Curvaturecited by 278
- 2023On the Reliability of Watermarks for Large Language Modelscited by 170
- 2024CodeGemma: Open Code Models Based on Gemmacited by 145
- 2023A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directionscited by 101
- 2022Watermarking Pre-trained Language Models with Backdooringcited by 44
- 2023Did You Train on My Dataset? Towards Public Dataset Protection with Clean-Label Backdoor Watermarkingcited by 37
- 2024The Foundations of Tokenization: Statistical and Computational Concernscited by 20
- 2014Testing probability distributions underlying aggregated datacited by 15
4 more
- 2020Efficient Distance Approximation for Structured High-Dimensional Distributions via Learningcited by 14
- 2021The Price of Tolerance in Distribution Testingcited by 13
- 2023J-Guard: Journalism Guided Adversarially Robust Detection of AI-generated Newscited by 10
- 2023TOPFORMER: Topology-Aware Authorship Attribution of Deepfake Texts with Diverse Writing Stylescited by 10
Built on by
Citing papers per year: 2026: 1.
1 paper.
- 2026Black-Box Forensics for Conversational LLM Agentscited by 2
- 2026Black-Box Forensics for Conversational LLM Agents21 Jun 2026