{"id":"https://openalex.org/W4412888496","doi":"https://doi.org/10.18653/v1/2025.findings-acl.546","title":"ESF: Efficient Sensitive Fingerprinting for Black-Box Tamper Detection of Large Language Models","display_name":"ESF: Efficient Sensitive Fingerprinting for Black-Box Tamper Detection of Large Language Models","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4412888496","doi":"https://doi.org/10.18653/v1/2025.findings-acl.546"},"language":"en","primary_location":{"id":"doi:10.18653/v1/2025.findings-acl.546","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-acl.546","pdf_url":"https://aclanthology.org/2025.findings-acl.546.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2025","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2025.findings-acl.546.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101303489","display_name":"Xiaofan Bai","orcid":"https://orcid.org/0009-0004-6796-3773"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiaofan Bai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040692607","display_name":"Pingyi Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pingyi Hu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109792165","display_name":"Xiaojing Ma","orcid":"https://orcid.org/0000-0001-6363-3209"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiaojing Ma","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014331454","display_name":"Lingli Yu","orcid":"https://orcid.org/0009-0003-6929-4262"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Linchen Yu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100331486","display_name":"Dongmei Zhang","orcid":"https://orcid.org/0000-0002-7399-8911"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dongmei Zhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100360359","display_name":"Qi Zhang","orcid":"https://orcid.org/0000-0002-7918-8952"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qi Zhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5101883857","display_name":"Bin Zhu","orcid":"https://orcid.org/0000-0002-3571-7808"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bin Benjamin Zhu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"10477","last_page":"10494"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.9560999870300293,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.9560999870300293,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9372000098228455,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10601","display_name":"Handwritten Text Recognition Techniques","score":0.9315000176429749,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7439584732055664},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.7276012897491455},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.27612632513046265}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7439584732055664},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.7276012897491455},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.27612632513046265}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2025.findings-acl.546","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-acl.546","pdf_url":"https://aclanthology.org/2025.findings-acl.546.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2025","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2025.findings-acl.546","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.findings-acl.546","pdf_url":"https://aclanthology.org/2025.findings-acl.546.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2025","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6423915936","display_name":null,"funder_award_id":"2023BAA027","funder_id":"https://openalex.org/F4320335577","funder_display_name":"Major Research Plan"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320326705","display_name":"Science, Technology and Innovation Commission of Shenzhen Municipality","ror":null},{"id":"https://openalex.org/F4320335577","display_name":"Major Research Plan","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412888496.pdf","grobid_xml":"https://content.openalex.org/works/W4412888496.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"The":[0],"rapid":[1],"adoption":[2],"of":[3,81,119,160],"large":[4,140],"language":[5],"models":[6],"(LLMs)":[7],"in":[8,20,128],"diverse":[9],"applications":[10],"has":[11],"intensified":[12],"concerns":[13],"over":[14],"their":[15,57],"security":[16],"and":[17,40,60,95,137,155],"integrity,":[18],"particularly":[19],"cloud":[21],"environments":[22],"where":[23],"users":[24],"cannot":[25],"access":[26],"internal":[27],"model":[28,33,153],"parameters.One":[29],"critical":[30],"threat":[31],"is":[32,134],"tampering,":[34],"which":[35],"can":[36],"compromise":[37],"LLM":[38],"behavior":[39],"reliability.However,":[41],"traditional":[42],"tamper":[43,79],"detection":[44,80,92,158],"methods,":[45],"designed":[46],"for":[47,53,77,173],"deterministic":[48],"classification":[49],"models,":[50],"are":[51],"inadequate":[52],"LLMs":[54,145],"due":[55],"to":[56,101,114,126,139],"output":[58,88,104],"randomness":[59],"massive":[61],"parameter":[62],"spaces.In":[63],"this":[64],"paper,":[65],"we":[66,106],"introduce":[67],"Efficient":[68],"Sensitive":[69],"Fingerprinting":[70],"(ESF),":[71],"the":[72],"first":[73],"fingerprinting":[74],"method":[75],"tailored":[76],"black-box":[78],"LLMs.ESF":[82],"generates":[83],"fingerprint":[84,120,167],"samples":[85,121],"by":[86],"optimizing":[87],"sensitivity":[89,125],"at":[90,161],"selected":[91],"token":[93],"positions":[94],"leverages":[96],"Randomness-Set":[97],"Consistency":[98],"Checking":[99],"(RSCC)":[100],"accommodate":[102],"inherent":[103],"randomness.Additionally,":[105],"propose":[107],"a":[108,129,170],"novel":[109],"Max":[110],"Coverage":[111],"Strategy":[112],"(MCS)":[113],"select":[115],"an":[116],"optimal":[117],"set":[118],"that":[122,147],"maximizes":[123],"joint":[124],"tampering.Grounded":[127],"rigorous":[130],"theoretical":[131],"framework,":[132],"ESF":[133,148],"computationally":[135],"efficient":[136],"scalable":[138],"models.Extensive":[141],"experiments":[142],"on":[143],"state-of-the-art":[144],"demonstrate":[146],"reliably":[149],"detects":[150],"tampering-including":[151],"fine-tuning,":[152],"compression,":[154],"backdoor":[156],"injection-with":[157],"rates":[159],"least":[162],"99.2%":[163],"using":[164],"only":[165],"5":[166],"samples,":[168],"offering":[169],"robust":[171],"solution":[172],"securing":[174],"cloud-based":[175],"AI":[176],"systems.":[177]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}