{"id":"https://openalex.org/W7128682396","doi":"https://doi.org/10.48550/arxiv.2602.10134","title":"Reverse-Engineering Model Editing on Language Models","display_name":"Reverse-Engineering Model Editing on Language Models","publication_year":2026,"publication_date":"2026-02-07","ids":{"openalex":"https://openalex.org/W7128682396","doi":"https://doi.org/10.48550/arxiv.2602.10134"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2602.10134","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.10134","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2602.10134","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125733630","display_name":"Zhiyu Sun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sun, Zhiyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120377960","display_name":"Minrui Luo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luo, Minrui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125764847","display_name":"Yu Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125752786","display_name":"Zhili Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Zhili","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5051747323","display_name":"Tianxing He","orcid":"https://orcid.org/0009-0008-6383-0307"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Tianxing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.3158000111579895,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.3158000111579895,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.19429999589920044,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.06129999831318855,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.6122000217437744},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5662000179290771},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4796999990940094},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.40549999475479126},{"id":"https://openalex.org/keywords/subject","display_name":"Subject (documents)","score":0.3968000113964081},{"id":"https://openalex.org/keywords/memorization","display_name":"Memorization","score":0.37279999256134033},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.36399999260902405}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8496999740600586},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.6122000217437744},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5662000179290771},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5396999716758728},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4796999990940094},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.47119998931884766},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.40549999475479126},{"id":"https://openalex.org/C2777855551","wikidata":"https://www.wikidata.org/wiki/Q12310021","display_name":"Subject (documents)","level":2,"score":0.3968000113964081},{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.37279999256134033},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.36399999260902405},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.313400000333786},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.30880001187324524},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3001999855041504},{"id":"https://openalex.org/C183322885","wikidata":"https://www.wikidata.org/wiki/Q17007702","display_name":"Context model","level":3,"score":0.29420000314712524},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2904999852180481},{"id":"https://openalex.org/C2983448237","wikidata":"https://www.wikidata.org/wiki/Q1078276","display_name":"Language understanding","level":2,"score":0.2904999852180481},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.271699994802475},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.2538999915122986},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2538999915122986}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2602.10134","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.10134","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2602.10134","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.10134","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2],"(LLMs)":[3],"are":[4],"pretrained":[5],"on":[6,126],"corpora":[7],"containing":[8],"trillions":[9],"of":[10,24,46,79,90,97,121],"tokens":[11],"and,":[12],"therefore,":[13],"inevitably":[14],"memorize":[15],"sensitive":[16],"information.":[17],"Locate-then-edit":[18],"methods,":[19],"as":[20,54],"a":[21,28,43,55,67,95,146],"mainstream":[22],"paradigm":[23],"model":[25,33],"editing,":[26],"offer":[27],"promising":[29],"solution":[30],"by":[31],"modifying":[32],"parameters":[34],"without":[35,163],"retraining.":[36],"However,":[37],"in":[38],"this":[39,47],"work,":[40],"we":[41,83,109,142],"reveal":[42],"critical":[44],"vulnerability":[45],"paradigm:":[48],"the":[49,62,76,87,91,98,118,122,151],"parameter":[50],"updates":[51],"inadvertently":[52],"serve":[53],"side":[56],"channel,":[57],"enabling":[58,101],"attackers":[59],"to":[60],"recover":[61,134],"edited":[63,99,135],"data.":[64],"We":[65],"propose":[66,143],"two-stage":[68],"reverse-engineering":[69],"attack":[70,115],"named":[71],"\\textit{KSTER}":[72],"(\\textbf{K}ey\\textbf{S}paceRecons\\textbf{T}ruction-then-\\textbf{E}ntropy\\textbf{R}eduction)":[73],"that":[74,86,116,130,149],"leverages":[75],"low-rank":[77],"structure":[78],"these":[80],"updates.":[81],"First,":[82],"theoretically":[84],"show":[85],"row":[88],"space":[89],"update":[92,152],"matrix":[93],"encodes":[94],"``fingerprint\"":[96],"subjects,":[100],"accurate":[102],"subject":[103],"recovery":[104,114],"via":[105],"spectral":[106],"analysis.":[107],"Second,":[108],"introduce":[110],"an":[111],"entropy-based":[112],"prompt":[113],"reconstructs":[117],"semantic":[119,155],"context":[120],"edit.":[123],"Extensive":[124],"experiments":[125],"multiple":[127],"LLMs":[128],"demonstrate":[129],"our":[131],"attacks":[132],"can":[133],"data":[136],"with":[137,154],"high":[138],"success":[139],"rates.":[140],"Furthermore,":[141],"\\textit{subspace":[144],"camouflage},":[145],"defense":[147],"strategy":[148],"obfuscates":[150],"fingerprint":[153],"decoys.":[156],"This":[157],"approach":[158],"effectively":[159],"mitigates":[160],"reconstruction":[161],"risks":[162],"compromising":[164],"editing":[165],"utility.":[166],"Our":[167],"code":[168],"is":[169],"available":[170],"at":[171],"https://github.com/reanatom/EditingAttack.":[172]},"counts_by_year":[],"updated_date":"2026-08-16T07:02:28.622633","created_date":"2026-02-13T00:00:00"}