Riemannian-Geometric Fingerprints of Generative Models
Not on the map. Why?
Abstract (arXiv)
Recent breakthroughs and rapid integration of generative models (GMs) have sparked interest in the problem of model attribution and their fingerprints. For instance, service providers need reliable methods of authenticating their models to protect their IP, while users and law enforcement seek to verify the source of generated content for accountability and trust. In addition, a growing threat of model collapse is arising, as more model-generated data are being fed back into sources (e.g., YouTube) that are often harvested for training ("regurgitative training"), heightening the need to differentiate synthetic from human data. Yet, a gap still exists in understanding generative models' fingerprints, we believe, stemming from the lack of a formal framework that can define, represent, and analyze the fingerprints in a principled way. To address this gap, we take a geometric approach and propose a new definition of artifact and fingerprint of GMs using Riemannian geometry, which allows us to leverage the rich theory of differential geometry. Our new definition generalizes previous work (Song et al., 2024) to non-Euclidean manifolds by learning Riemannian metrics from data and replacing the Euclidean distances and nearest-neighbor search with geodesic distances and kNN-based Riemannian center of mass. We apply our theory to a new gradient-based algorithm for computing the fingerprints in practice. Results show that it is more effective in distinguishing a large array of GMs, spanning across 4 different datasets in 2 different resolutions (64 by 64, 256 by 256), 27 model architectures, and 2 modalities (Vision, Vision-Language). Using our proposed definition significantly improves the performance on model attribution, as well as a generalization to unseen datasets, model types, and modalities, suggesting its practical efficacy.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Builds on 44 of its 73 references that are in the map. First posted on arXiv 28 Jun 2025.
Builds on
44 of 73 references.
References · 44
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2023GPT-4 Technical Reportcited by 18,396
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 9,122
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
- 2022Generative Adversarial Networkscited by 5,627
- 2014Deep Learning Face Attributes in the Wildcited by 3,693
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,588
- 2020Taming Transformers for High-Resolution Image Synthesiscited by 3,253
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
32 more
- 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,626
- 2017Improved Training of Wasserstein GANscited by 2,235
- 2018Glow: Generative Flow with Invertible 1x1 Convolutionscited by 1,545
- 2021Alias-Free Generative Adversarial Networkscited by 1,184
- 2019FaceForensics++: Learning to Detect Manipulated Facial Imagescited by 1,101
- 2016Geometric deep learning: going beyond Euclidean datacited by 1,048
- 2016Least Squares Generative Adversarial Networkscited by 1,001
- 2019CNN-generated images are surprisingly easy to spot... for nowcited by 847
- 2020NVAE: A Deep Hierarchical Variational Autoencodercited by 637
- 2021Score-based Generative Modeling in Latent Spacecited by 636
- 2021Tackling the Generative Learning Trilemma with Denoising Diffusion GANscited by 516
- 2020Watch your Up-Convolution: CNN Based Generative Deep Neural Networks are Failing to Reproduce Spectral Distributionscited by 280
- 2019Residual Flows for Invertible Generative Modelingcited by 257
- 2017Latent Space Oddity: on the Curvature of Deep Generative Modelscited by 174
- 2020Adversarial Latent Autoencoderscited by 155
- 2021StyleSwin: Transformer-based GAN for High-resolution Image Generationcited by 152
- 2019Fourier Spectrum Discrepancies in Deep Network Generated Imagescited by 139
- 2024A Tale of Tails: Model Collapse as a Change of Scaling Lawscited by 130
- 2019Detecting GAN generated Fake Images using Co-occurrence Matricescited by 124
- 2023Intriguing properties of synthetic images: from generative adversarial networks to diffusion modelscited by 123
- 2019Deep Learning for Deepfakes Creation and Detection: A Surveycited by 102
- 2021Soft Truncation: A Universal Training Technique of Score-based Diffusion Model for High Precision Score Estimationcited by 97
- 2020DeepFake Detection by Analyzing Convolutional Tracescited by 81
- 2021A Closer Look at Fourier Spectrum Discrepancies for CNN-generated Images Detectioncited by 68
- 2024Instructional Fingerprinting of Large Language Modelscited by 68
- 2021On the Frequency Bias of Generative Modelscited by 60
- 2019Incremental learning for the detection and classification of GAN-generated imagescited by 58
- 2019MaCow: Masked Convolutional Generative Flowcited by 32
- 2022Efficient-VDVAE: Less is morecited by 26
- 2021Pulling back information geometrycited by 23
- 2024ManiFPT: Defining and Analyzing Fingerprints of Generative Modelscited by 18
- 2018Only Bayes should learn a manifold (on the estimation of differential geometric structure from data)cited by 17
Built on by
Citing papers per year: 2025: 6; 2026: 2.
8 papers.
- 2025Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trendscited by 20
- 2025Are Robust LLM Fingerprints Adversarially Robust?cited by 8
- 2025SPRINT: Robust Model Attribution of Generated Images via Secret Pixel Reconstructioncited by 4
- 2025Smudged Fingerprints: A Systematic Evaluation of the Robustness of AI Image Fingerprintscited by 2
- 2025Causal Fingerprints of AI Generative Modelscited by 1
- 2025Contact Wasserstein Geodesics for Non-Conservative Schr"odinger Bridgescited by 0
- 2026RGSQ: Riemannian Geometry-Sensitive Quantization for Large Vision-Language Modelscited by 0
- 2026Can Pixels Alone Reveal Image Origin? Minimax Limits and Learnable Interfaces for Passive Provenancecited by 0
- 2026Can Pixels Alone Reveal Image Origin? Minimax Limits and Learnable Interfaces for Passive Provenance25 Sep 2026
- 2026RGSQ: Riemannian Geometry-Sensitive Quantization for Large Vision-Language Models21 Sep 2026
- 2025Smudged Fingerprints: A Systematic Evaluation of the Robustness of AI Image Fingerprints12 Dec 2025
- 2025Contact Wasserstein Geodesics for Non-Conservative Schr"odinger Bridges10 Nov 2025
- 2025Are Robust LLM Fingerprints Adversarially Robust?30 Sep 2025
- 2025Causal Fingerprints of AI Generative Models18 Sep 2025
- 2025Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends15 Aug 2025
- 2025SPRINT: Robust Model Attribution of Generated Images via Secret Pixel Reconstruction6 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2022Riemannian Score-Based Generative Modelling
- 2025Generalised Flow Maps for Few-Step Generative Modelling on Riemannian Manifolds
- 2024What Secrets Do Your Manifolds Hold? Understanding the Local Geometry of Generative Models
- 2024A Geometric Framework for Understanding Memorization in Generative Models
- 2022Score-Based Generative Models Detect Manifolds
- 2026Polynomial Convergence of Riemannian Diffusion Models
- 2026Reducing Memorisation in Generative Models via Riemannian Bayesian Inference
- 2023Generative Modeling on Manifolds Through Mixture of Riemannian Diffusion Processes