mlsanityData to 14 Oct 2026

SELF: A Robust Singular Value and Eigenvalue Approach for LLM Fingerprinting

arXiv 2512.03620 ↗First posted 3 Dec 2025cs.CR cs.AI cs.CLcited by 2

Not on the map. Why?

Abstract (arXiv)

The protection of Intellectual Property (IP) in Large Language Models (LLMs) represents a critical challenge in contemporary AI research. While fingerprinting techniques have emerged as a fundamental mechanism for detecting unauthorized model usage, existing methods -- whether behavior-based or structural -- suffer from vulnerabilities such as false claim attacks or susceptible to weight manipulations. To overcome these limitations, we propose SELF, a novel intrinsic weight-based fingerprinting scheme that eliminates dependency on input and inherently resists false claims. SELF achieves robust IP protection through two key innovations: 1) unique, scalable and transformation-invariant fingerprint extraction via singular value and eigenvalue decomposition of LLM attention weights, and 2) effective neural network-based fingerprint similarity comparison based on few-shot learning and data augmentation. Experimental results demonstrate SELF maintains high IP infringement detection accuracy while showing strong robustness against various downstream modifications, including quantization, pruning, and fine-tuning attacks. Our code is available at https://github.com/HanxiuZhang/SELF_v2.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 23 of its 35 references that are in the map. First posted on arXiv 3 Dec 2025.

Builds on

23 of 35 references.

References · 23

  1. 2017Attention Is All You Needcited by 60,361
  2. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  3. 2017Outrageously Large Neural Networks: The Sparsely-Gated Mixture-of-Experts Layercited by 3,509
  4. 2016Pointer Sentinel Mixture Modelscited by 3,096
  5. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
  6. 2023A Watermark for Large Language Modelscited by 725
  7. 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 422
  8. 2023Can AI-Generated Text be Reliably Detected?cited by 386
  9. 2024SliceGPT: Compress Large Language Models by Deleting Rows and Columnscited by 385
  10. 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 261
  11. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
  12. 2017Regularizing and Optimizing LSTM Language Modelscited by 205
11 more
  1. 2023A Semantic Invariant Robust Watermark for Large Language Modelscited by 112
  2. 2023REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Modelscited by 78
  3. 2024Instructional Fingerprinting of Large Language Modelscited by 68
  4. 2024LLM-Based Test-Driven Interactive Code Generation: User Study and Empirical Evaluationcited by 49
  5. 2024TRAP: Targeted Random Adversarial Prompt Honeypot for Black-Box Identificationcited by 36
  6. 2024REEF: Representation Encoding Fingerprints for Large Language Modelscited by 36
  7. 2023HuRef: HUman-REadable Fingerprint for Large Language Modelscited by 34
  8. 2023Watermarking LLMs with Weight Quantizationcited by 22
  9. 2023False Claims against Model Ownership Resolutioncited by 17
  10. 2023Turning Your Strength into Watermark: Watermarking Large Language Model via Knowledge Injectioncited by 10
  11. 2025FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprintcited by 10

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Intrinsic Fingerprint of LLMs: Continue Training is NOT All You Need to Steal A Model!
  2. 2025iSeal: Encrypted Fingerprinting for Reliable LLM Ownership Verification
  3. 2025DuFFin: A Dual-Level Fingerprinting Framework for LLMs IP Protection
  4. 2026DNF: Dual-Layer Nested Fingerprinting for Large Language Model Intellectual Property Protection
  5. 2026A Behavioral Fingerprint for Large Language Models: Provenance Tracking via Refusal Vectors
  6. 2025Attacks and Defenses Against LLM Fingerprinting
  7. 2026FLIPS: Instance-Fingerprinting for LLMs via Pseudo-random Sequences
  8. 2025EverTracer: Hunting Stolen Large Language Models via Stealthy and Robust Probabilistic Fingerprint