{"id":"https://openalex.org/W7157168262","doi":"https://doi.org/10.48550/arxiv.2604.23238","title":"Hiding in Plain Sight: Detectability-Aware Antidistillation of Reasoning Models","display_name":"Hiding in Plain Sight: Detectability-Aware Antidistillation of Reasoning Models","publication_year":2026,"publication_date":"2026-04-25","ids":{"openalex":"https://openalex.org/W7157168262","doi":"https://doi.org/10.48550/arxiv.2604.23238"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.23238","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.23238","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.23238","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134752001","display_name":"Max Hartman","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hartman, Max","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134765428","display_name":"Vidhata Jayaraman","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jayaraman, Vidhata","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034261952","display_name":"Moulik Choraria","orcid":"https://orcid.org/0000-0001-7609-3563"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Choraria, Moulik","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Savani, Yash","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Savani, Yash","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"Varshney, Lav R.","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Varshney, Lav R.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9861000180244446,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9861000180244446,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.0032999999821186066,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0019000000320374966,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6280999779701233},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5885999798774719},{"id":"https://openalex.org/keywords/frontier","display_name":"Frontier","score":0.4431000053882599},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.44200000166893005},{"id":"https://openalex.org/keywords/stackelberg-competition","display_name":"Stackelberg competition","score":0.41130000352859497},{"id":"https://openalex.org/keywords/ground","display_name":"Ground","score":0.3346000015735626},{"id":"https://openalex.org/keywords/sampling","display_name":"Sampling (signal processing)","score":0.32600000500679016},{"id":"https://openalex.org/keywords/raising","display_name":"Raising (metalworking)","score":0.32100000977516174}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6306999921798706},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6280999779701233},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5885999798774719},{"id":"https://openalex.org/C2778571376","wikidata":"https://www.wikidata.org/wiki/Q1355821","display_name":"Frontier","level":2,"score":0.4431000053882599},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.44200000166893005},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.426800012588501},{"id":"https://openalex.org/C199510392","wikidata":"https://www.wikidata.org/wiki/Q1184602","display_name":"Stackelberg competition","level":2,"score":0.41130000352859497},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3513000011444092},{"id":"https://openalex.org/C168993435","wikidata":"https://www.wikidata.org/wiki/Q6501125","display_name":"Ground","level":2,"score":0.3346000015735626},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.32600000500679016},{"id":"https://openalex.org/C2780589192","wikidata":"https://www.wikidata.org/wiki/Q7285140","display_name":"Raising (metalworking)","level":2,"score":0.32100000977516174},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.314300000667572},{"id":"https://openalex.org/C204030448","wikidata":"https://www.wikidata.org/wiki/Q101017","display_name":"Distillation","level":2,"score":0.3003000020980835},{"id":"https://openalex.org/C2776207758","wikidata":"https://www.wikidata.org/wiki/Q5303302","display_name":"Downstream (manufacturing)","level":2,"score":0.29339998960494995},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.2872999906539917},{"id":"https://openalex.org/C2777093003","wikidata":"https://www.wikidata.org/wiki/Q6508345","display_name":"Lead (geology)","level":2,"score":0.2865000069141388},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28439998626708984},{"id":"https://openalex.org/C124119293","wikidata":"https://www.wikidata.org/wiki/Q6046081","display_name":"Interdiction","level":2,"score":0.26989999413490295},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.2653999924659729},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.26089999079704285},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.23238","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.23238","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.23238","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.23238","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Quality Education","score":0.5849182605743408,"id":"https://metadata.un.org/sdg/4"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Distillation":[0],"via":[1,137],"sampling":[2],"reasoning":[3,30,120],"traces":[4,31],"exposes":[5],"closed-source":[6],"frontier":[7],"models":[8],"to":[9,25,32,62,92,119,143],"adversarial":[10],"third":[11],"parties":[12],"who":[13],"can":[14],"bypass":[15],"their":[16,20],"guardrails":[17],"and":[18,48,57,81,140],"misappropriate":[19],"capabilities.":[21],"Antidistillation":[22],"methods":[23,43],"aim":[24],"address":[26,65],"this":[27,66,126],"by":[28,68],"poisoning":[29,93],"hinder":[33],"student":[34,145],"model":[35,111],"learning":[36],"while":[37,147],"preserving":[38,148],"teacher":[39],"performance.":[40],"However,":[41],"current":[42],"overlook":[44],"detectability,":[45,80],"both":[46],"semantic":[47],"syntactic,":[49],"which":[50],"erodes":[51],"trust":[52],"in":[53,127],"the":[54,59,94],"teacher's":[55],"outputs":[56],"signals":[58],"defense's":[60],"presence":[61],"adversaries.":[63],"We":[64,124],"gap":[67],"formulating":[69],"antidistillation":[70],"as":[71,113],"a":[72,114,129],"Stackelberg":[73],"game":[74],"whose":[75],"constraint":[76],"set":[77],"explicitly":[78],"encodes":[79],"show":[82],"that":[83,133],"perturbing":[84],"sparingly":[85],"offers":[86],"an":[87],"effective,":[88],"less":[89],"detectable":[90],"alternative":[91],"full":[95],"trace.":[96],"Drawing":[97],"on":[98,110],"mechanistic":[99],"interpretability,":[100],"we":[101],"identify":[102],"thought":[103,135],"anchors,":[104],"sentences":[105],"with":[106],"disproportionate":[107],"counterfactual":[108],"influence":[109],"outputs,":[112],"principled":[115],"sparse":[116],"target:":[117],"critical":[118],"yet":[121],"minimally":[122],"detectable.":[123],"instantiate":[125],"TraceGuard,":[128],"training-free,":[130],"black-box":[131],"proof-of-concept":[132],"locates":[134],"anchors":[136],"branching-token":[138],"detection":[139],"poisons":[141],"them":[142],"degrade":[144],"distillation":[146],"trace":[149],"coherence.":[150]},"counts_by_year":[],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2026-04-29T00:00:00"}