{"id":"https://openalex.org/W4415097143","doi":"https://doi.org/10.1145/3774904.3792196","title":"Reading Between the Lines: Towards Reliable Black-box LLM Fingerprinting via Zeroth-order Gradient Estimation","display_name":"Reading Between the Lines: Towards Reliable Black-box LLM Fingerprinting via Zeroth-order Gradient Estimation","publication_year":2026,"publication_date":"2026-04-12","ids":{"openalex":"https://openalex.org/W4415097143","doi":"https://doi.org/10.1145/3774904.3792196"},"language":"en","primary_location":{"id":"doi:10.1145/3774904.3792196","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774904.3792196","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2026","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3774904.3792196","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101572715","display_name":"Shuo Shao","orcid":"https://orcid.org/0000-0003-4285-3274"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuo Shao","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3482-4975","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114909754","display_name":"Yiming Li","orcid":"https://orcid.org/0000-0003-2043-4669"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yiming Li","raw_affiliation_strings":["Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-2258-265X","affiliations":[{"raw_affiliation_string":"Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040545892","display_name":"Hongwei Yao","orcid":"https://orcid.org/0000-0003-4680-5536"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Hongwei Yao","raw_affiliation_strings":["City University of Hong Kong, Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0003-4680-5536","affiliations":[{"raw_affiliation_string":"City University of Hong Kong, Hong Kong, China","institution_ids":["https://openalex.org/I168719708"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100606721","display_name":"Yifei Chen","orcid":"https://orcid.org/0000-0001-6644-4403"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifei Chen","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0009-4989-3317","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083331668","display_name":"Yuchen Yang","orcid":"https://orcid.org/0000-0003-1289-1093"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuchen Yang","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0005-9229-1021","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043524348","display_name":"Zhan Qin","orcid":"https://orcid.org/0000-0001-7872-6969"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhan Qin","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-7872-6969","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2637","last_page":"2648"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10601","display_name":"Handwritten Text Recognition Techniques","score":0.9416999816894531,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.6565999984741211},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5078999996185303},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5058000087738037},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.487199991941452},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.40790000557899475},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.3953999876976013},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.3804999887943268},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.3799000084400177}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7343000173568726},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.6565999984741211},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5253000259399414},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5078999996185303},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5058000087738037},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.487199991941452},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4781000018119812},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.40790000557899475},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.3953999876976013},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.3804999887943268},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.3799000084400177},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.3711000084877014},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.35429999232292175},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35280001163482666},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3125},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.3028999865055084},{"id":"https://openalex.org/C200331156","wikidata":"https://www.wikidata.org/wiki/Q506041","display_name":"Jacobian matrix and determinant","level":2,"score":0.2754000127315521},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.25920000672340393},{"id":"https://openalex.org/C2778584072","wikidata":"https://www.wikidata.org/wiki/Q7353545","display_name":"Robustification","level":3,"score":0.2583000063896179},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2581999897956848},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.257999986410141},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.25279998779296875},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.25040000677108765}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3774904.3792196","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774904.3792196","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2026","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.atira.dk:publications/3d2d8218-4811-4388-985d-68c1f57f0a5e","is_oa":true,"landing_page_url":"https://scholars.cityu.edu.hk/en/publications/3d2d8218-4811-4388-985d-68c1f57f0a5e","pdf_url":null,"source":{"id":"https://openalex.org/S7407055387","display_name":"CityU Scholars","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Shao, S, Li, Y, Yao, H, Chen, Y, Yang, Y & Qin, Z 2026, Reading Between the Lines : Towards Reliable Black-box LLM Fingerprinting via Zeroth-order Gradient Estimation. in WWW '26 : Proceedings of the ACM Web Conference 2026. WWW - Proceedings of the ACM Web Conference, Association for Computing Machinery, pp. 2637-2648, 35th ACM Web Conference (WWW 2026), Dubai, United Arab Emirates, 29/06/26. https://doi.org/10.1145/3774904.3792196","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:arXiv.org:2510.06605","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.06605","pdf_url":"https://arxiv.org/pdf/2510.06605","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2510.06605","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2510.06605","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3774904.3792196","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774904.3792196","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2026","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"substantial":[1],"investment":[2],"required":[3],"to":[4,29,34,50,56,67,93,108,157,172],"develop":[5],"Large":[6],"Language":[7],"Models":[8],"(LLMs)":[9],"makes":[10],"them":[11],"valuable":[12],"intellectual":[13],"property,":[14],"raising":[15],"significant":[16],"concerns":[17],"about":[18,87],"copyright":[19],"protection.":[20],"LLM":[21,70],"fingerprinting":[22,63,124],"has":[23],"emerged":[24],"as":[25,178],"a":[26,36,53,119,135,144,179,190],"key":[27],"technique":[28],"address":[30,100],"this,":[31,101],"which":[32,83],"aims":[33],"verify":[35],"model's":[37,89,116,175],"origin":[38],"by":[39,160],"extracting":[40],"an":[41],"intrinsic,":[42],"unique":[43,90,180],"signature":[44],"(a":[45],"''fingerprint'')":[46],"and":[47,193],"comparing":[48],"it":[49],"that":[51,111,138],"of":[52,96,114,154],"source":[54],"model":[55,81],"identify":[57],"illicit":[58],"copies.":[59],"However,":[60],"existing":[61,197],"black-box":[62,76,145,198],"methods":[64,77],"often":[65],"fail":[66],"generate":[68],"distinctive":[69],"fingerprints.":[71],"This":[72,168],"ineffectiveness":[73],"arises":[74],"because":[75],"typically":[78],"rely":[79],"on":[80,129,183],"outputs,":[82],"lose":[84],"critical":[85],"information":[86],"the":[88,94,112,115,126,152,174,184],"parameters":[91],"due":[92],"usage":[95],"non-linear":[97],"functions.":[98],"To":[99],"we":[102,132],"first":[103],"leverage":[104],"Fisher":[105],"Information":[106],"Theory":[107],"formally":[109],"demonstrate":[110],"gradient":[113],"input":[117,162],"is":[118],"more":[120],"informative":[121],"feature":[122],"for":[123],"than":[125],"output.":[127],"Based":[128],"this":[130,156],"insight,":[131],"propose":[133],"ZeroPrint,":[134],"novel":[136],"method":[137],"approximates":[139],"these":[140],"information-rich":[141],"gradients":[142],"in":[143],"setting":[146],"using":[147],"zeroth-order":[148],"estimation.":[149],"ZeroPrint":[150,171,188],"overcomes":[151],"challenge":[153],"applying":[155],"discrete":[158],"text":[159],"simulating":[161],"perturbations":[163],"via":[164],"semantic-preserving":[165],"word":[166],"substitutions.":[167],"operation":[169],"allows":[170],"estimate":[173],"Jacobian":[176],"matrix":[177],"fingerprint.":[181],"Experiments":[182],"standard":[185],"benchmark":[186],"show":[187],"achieves":[189],"state-of-the-art":[191],"effectiveness":[192],"robustness,":[194],"significantly":[195],"outperforming":[196],"methods.":[199]},"counts_by_year":[],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2025-10-13T00:00:00"}