{"id":"https://openalex.org/W7204166118","doi":"https://doi.org/10.48550/arxiv.2608.22213","title":"AdaptPrint: Response-Adaptive Fingerprinting of Black-Box LLM Services","display_name":"AdaptPrint: Response-Adaptive Fingerprinting of Black-Box LLM Services","publication_year":2026,"publication_date":"2026-08-23","ids":{"openalex":"https://openalex.org/W7204166118","doi":"https://doi.org/10.48550/arxiv.2608.22213"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2608.22213","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.22213","pdf_url":"https://arxiv.org/pdf/2608.22213","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.22213","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126710657","display_name":"Yilin Li","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Li, Yilin","raw_affiliation_strings":["School of Cybersecurity , University of Chinese Academy of Sciences , China","State Key Laboratory of Cyberspace Security Defense , Institute of Information Engineering , Chinese Academy of Sciences , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cybersecurity , University of Chinese Academy of Sciences , China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]},{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense , Institute of Information Engineering , Chinese Academy of Sciences , China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148172658","display_name":"Yifei Zhang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhang, Yifei","raw_affiliation_strings":["School of Cybersecurity , University of Chinese Academy of Sciences , China","State Key Laboratory of Cyberspace Security Defense , Institute of Information Engineering , Chinese Academy of Sciences , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cybersecurity , University of Chinese Academy of Sciences , China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]},{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense , Institute of Information Engineering , Chinese Academy of Sciences , China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5148083034","display_name":"Guozhu Meng","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Meng, Guozhu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7432000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7432000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.0731000006198883,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.021900000050663948,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/similarity-matching","display_name":"similarity matching","score":0.4129999876022339},{"id":"https://openalex.org/keywords/defense-robustness","display_name":"defense robustness","score":0.5950000286102295}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7225000262260437},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5483999848365784},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.5087000131607056},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.4514999985694885},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.44850000739097595},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.39899998903274536},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3944000005722046},{"id":"https://openalex.org/C88626702","wikidata":"https://www.wikidata.org/wiki/Q1128903","display_name":"Continuation","level":2,"score":0.3732999861240387},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34150001406669617},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3343000113964081},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.31360000371932983},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.30239999294281006},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3000999987125397},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2955999970436096},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.29190000891685486},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.28450000286102295},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.2822999954223633},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.28119999170303345},{"id":"https://openalex.org/C2776904630","wikidata":"https://www.wikidata.org/wiki/Q356336","display_name":"Adept","level":3,"score":0.25029999017715454}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.22213","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.22213","pdf_url":"https://arxiv.org/pdf/2608.22213","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.22213","doi":"https://doi.org/10.48550/arxiv.2608.22213","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.22213","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.22213","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.22213","pdf_url":"https://arxiv.org/pdf/2608.22213","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204166118.pdf","grobid_xml":"https://content.openalex.org/works/W7204166118.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W4385374425","https://openalex.org/W4385682279","https://openalex.org/W4391709827","https://openalex.org/W4394708953","https://openalex.org/W4400023054","https://openalex.org/W4401306886","https://openalex.org/W4403995672","https://openalex.org/W4404313858","https://openalex.org/W4414939355","https://openalex.org/W4416082603","https://openalex.org/W4416117489","https://openalex.org/W4417252869","https://openalex.org/W4417283158","https://openalex.org/W6910633587","https://openalex.org/W7155556133","https://openalex.org/W7160264403"],"related_works":["https://openalex.org/W4402683725","https://openalex.org/W4400341900","https://openalex.org/W4415097143","https://openalex.org/W4406491493","https://openalex.org/W7164895375","https://openalex.org/W4416390642","https://openalex.org/W4406885613","https://openalex.org/W7223193417","https://openalex.org/W7214376003","https://openalex.org/W4402856935"],"abstract_inverted_index":{"Black-box":[0,28],"LLM":[1,29,35,55,94,98,119],"services":[2,56],"have":[3],"emerged":[4],"as":[5],"a":[6,41,58,87],"practical":[7],"deployment":[8],"paradigm.":[9],"Nevertheless,":[10],"their":[11],"opacity":[12],"also":[13,153],"hinders":[14],"the":[15,33,67,117],"systematic":[16],"assessment":[17],"of":[18,61,69,147],"security":[19],"risks":[20],"and":[21,63,71,77,112,144,150,161],"complicates":[22],"copyright":[23],"auditing":[24],"for":[25,91],"model":[26],"owners.":[27],"fingerprinting,":[30],"which":[31],"identifies":[32],"underlying":[34],"identity":[36,120],"through":[37],"query-response":[38],"interactions,":[39],"offers":[40],"promising":[42],"way":[43],"to":[44],"bridge":[45],"this":[46],"gap.":[47],"Existing":[48],"approaches":[49],"typically":[50],"collect":[51],"responses":[52],"from":[53],"target":[54],"using":[57],"fixed":[59],"set":[60],"queries":[62],"perform":[64],"poorly":[65],"in":[66,96],"presence":[68],"realistic":[70],"complex":[72],"configurations":[73],"(e.g.,":[74],"system":[75],"prompt":[76],"sampling":[78],"settings).":[79],"To":[80],"overcome":[81],"these":[82],"limitations,":[83],"we":[84],"propose":[85],"AdaptPrint,":[86],"response-adaptive":[88],"fingerprinting":[89],"method":[90],"revealing":[92],"hidden":[93],"identities":[95],"black-box":[97],"services.":[99],"AdaptPrint":[100,115,132,152],"integrates":[101],"three":[102],"progressive":[103],"response":[104],"consistency":[105],"probing":[106],"strategies:":[107],"Direct":[108],"Probing,":[109,111],"Continuation":[110],"Follow-up":[113],"Probing.":[114],"determines":[116],"final":[118],"by":[121],"performing":[122],"similarity":[123],"matching":[124],"among":[125,137],"candidate":[126,139],"LLMs.":[127],"Experimental":[128],"results":[129],"show":[130],"that":[131],"significantly":[133],"outperforms":[134],"state-of-the-art":[135],"methods":[136],"27":[138],"models,":[140],"achieving":[141],"Top-1,":[142],"Top-3,":[143],"Top-5":[145],"accuracies":[146],"80.6%,":[148],"90.3%,":[149],"92.1%.":[151],"demonstrates":[154],"strong":[155],"robustness":[156],"across":[157],"different":[158],"defense":[159],"strategies":[160],"decoding":[162],"parameters.":[163]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-08-26T00:00:00"}