arXiv:2508.19843cs.CRcs.AI2025-08被引 18

用指纹技术检测大模型是否抄袭,解决版权争议难题

SoK: Large Language Model Copyright Auditing via Fingerprinting

  • 按特征来源分白盒指纹方法,按查询策略分黑盒方法
  • 在149个模型上测试,发现多数方法在微调后失效
  • 适合关注AI版权保护的研究者和开发者

大语言模型(LLMs)因训练资源巨大而具有重要知识产权价值,但易遭未经授权使用或模型窃取。基于指纹的非侵入式技术可通过比较模型独特特征来判断其是否源自另一模型,为版权审计提供新思路。然而,由于模型修改方式多样且缺乏统一评估标准,其可靠性存疑。本文首次系统研究该领域,提出统一框架与分类体系:白盒方法按特征来源分为静态、前向传播、反向传播指纹;黑盒方法按查询策略分为无目标与有目标两类。我们构建首个系统性基准LeaFBench,基于7个主流基础模型,涵盖149个不同实例,集成13种代表性后开发技术,包括参数修改类(如微调、量化)与参数无关类(如系统提示词、RAG)。大量实验揭示现有方法在真实部署场景下的优劣,明确未来研究方向与关键开放问题。代码已开源。

原文摘要 · Abstract (English)

The broad capabilities and substantial resources required to train Large Language Models (LLMs) make them valuable intellectual property, yet they remain vulnerable to copyright infringement, such as unauthorized use and model theft. LLM fingerprinting, a non-intrusive technique that compares the distinctive features (i.e., fingerprint) of LLMs to identify whether an LLM is derived from another, offers a promising solution to copyright auditing. However, its reliability remains uncertain due to the prevalence of diverse model modifications and the lack of standardized evaluation. In this SoK, we present the first comprehensive study of the emerging LLM fingerprinting. We introduce a unified framework and taxonomy that structures the field: white-box methods are classified based on their feature source as static, forward-pass, or backward-pass fingerprinting, while black-box methods are distinguished by their query strategy as either untargeted or targeted. Furthermore, we propose LeaFBench, the first systematic benchmark for evaluating LLM fingerprinting under realistic deployment scenarios. Built upon 7 mainstream foundation models and comprising 149 distinct model instances, LeaFBench integrates 13 representative post-development techniques, spanning both parameter-altering methods (e.g., fine-tuning, quantization) and parameter-independent techniques (e.g., system prompts, RAG). Extensive experiments on LeaFBench reveal the strengths and weaknesses of existing methods, thereby outlining future research directions and critical open problems in this emerging field. The code is available at https://github.com/shaoshuo-ss/LeaFBench.

大模型版权指纹检测模型审计

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。