arXiv:2601.22692cs.CLcs.AI2026-01

通过神经活动模式检测大模型是否抄袭,无需训练

FNF: Functional Network Fingerprint for Large Language Models

  • 基于功能网络活动一致性,无需训练即可识别模型来源
  • 仅需少量样本验证,对微调、剪枝等修改仍有效
  • 适合保护开源大模型知识产权,适用多种架构

大语言模型开发成本高,保护知识产权成为关键挑战。本文提出功能网络指纹(FNF),一种无需训练、样本高效的检测方法,通过比较可疑模型与目标模型在功能网络中的神经活动模式一致性,判断其是否源自同一源模型。我们发现,即使规模或架构不同,具有共同来源的模型在多样输入下仍保持高度一致的神经活动模式;而独立训练的模型则无此对齐。FNF仅需少量样本即可验证,不损害模型使用价值,且对微调、剪枝、参数重排等常见修改以及跨架构、跨维度对比均保持鲁棒性。该方法为模型所有者及第三方提供了一种简单、非侵入式、有效的知识产权保护工具。代码已公开于 https://github.com/WhatAboutMyStar/LLM_ACTIVATION。

原文摘要 · Abstract (English)

The development of large language models (LLMs) is costly and has significant commercial value. Consequently, preventing unauthorized appropriation of open-source LLMs and protecting developers' intellectual property rights have become critical challenges. In this work, we propose the Functional Network Fingerprint (FNF), a training-free, sample-efficient method for detecting whether a suspect LLM is derived from a victim model, based on the consistency between their functional network activity. We demonstrate that models that share a common origin, even with differences in scale or architecture, exhibit highly consistent patterns of neuronal activity within their functional networks across diverse input samples. In contrast, models trained independently on distinct data or with different objectives fail to preserve such activity alignment. Unlike conventional approaches, our method requires only a few samples for verification, preserves model utility, and remains robust to common model modifications (such as fine-tuning, pruning, and parameter permutation), as well as to comparisons across diverse architectures and dimensionalities. FNF thus provides model owners and third parties with a simple, non-invasive, and effective tool for protecting LLM intellectual property. The code is available at https://github.com/WhatAboutMyStar/LLM_ACTIVATION.

模型检测知识产权神经活动大模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。