SELF: A Robust Singular Value and Eigenvalue Approach for LLM Fingerprinting
Not on the map. Why?
Abstract (arXiv)
The protection of Intellectual Property (IP) in Large Language Models (LLMs) represents a critical challenge in contemporary AI research. While fingerprinting techniques have emerged as a fundamental mechanism for detecting unauthorized model usage, existing methods -- whether behavior-based or structural -- suffer from vulnerabilities such as false claim attacks or susceptible to weight manipulations. To overcome these limitations, we propose SELF, a novel intrinsic weight-based fingerprinting scheme that eliminates dependency on input and inherently resists false claims. SELF achieves robust IP protection through two key innovations: 1) unique, scalable and transformation-invariant fingerprint extraction via singular value and eigenvalue decomposition of LLM attention weights, and 2) effective neural network-based fingerprint similarity comparison based on few-shot learning and data augmentation. Experimental results demonstrate SELF maintains high IP infringement detection accuracy while showing strong robustness against various downstream modifications, including quantization, pruning, and fine-tuning attacks. Our code is available at https://github.com/HanxiuZhang/SELF_v2.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 23 of its 35 references that are in the map. First posted on arXiv 3 Dec 2025.
Builds on
23 of 35 references.
References · 23
- 2017Attention Is All You Needcited by 60,361
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2017Outrageously Large Neural Networks: The Sparsely-Gated Mixture-of-Experts Layercited by 3,509
- 2016Pointer Sentinel Mixture Modelscited by 3,096
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2023A Watermark for Large Language Modelscited by 725
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 422
- 2023Can AI-Generated Text be Reliably Detected?cited by 386
- 2024SliceGPT: Compress Large Language Models by Deleting Rows and Columnscited by 385
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 261
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2017Regularizing and Optimizing LSTM Language Modelscited by 205
11 more
- 2023A Semantic Invariant Robust Watermark for Large Language Modelscited by 112
- 2023REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Modelscited by 78
- 2024Instructional Fingerprinting of Large Language Modelscited by 68
- 2024LLM-Based Test-Driven Interactive Code Generation: User Study and Empirical Evaluationcited by 49
- 2024TRAP: Targeted Random Adversarial Prompt Honeypot for Black-Box Identificationcited by 36
- 2024REEF: Representation Encoding Fingerprints for Large Language Modelscited by 36
- 2023HuRef: HUman-REadable Fingerprint for Large Language Modelscited by 34
- 2023Watermarking LLMs with Weight Quantizationcited by 22
- 2023False Claims against Model Ownership Resolutioncited by 17
- 2023Turning Your Strength into Watermark: Watermarking Large Language Model via Knowledge Injectioncited by 10
- 2025FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprintcited by 10
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025Intrinsic Fingerprint of LLMs: Continue Training is NOT All You Need to Steal A Model!
- 2025iSeal: Encrypted Fingerprinting for Reliable LLM Ownership Verification
- 2025DuFFin: A Dual-Level Fingerprinting Framework for LLMs IP Protection
- 2026DNF: Dual-Layer Nested Fingerprinting for Large Language Model Intellectual Property Protection
- 2026A Behavioral Fingerprint for Large Language Models: Provenance Tracking via Refusal Vectors
- 2025Attacks and Defenses Against LLM Fingerprinting
- 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequences
- 2025EverTracer: Hunting Stolen Large Language Models via Stealthy and Robust Probabilistic Fingerprint