English

SELF: A Robust Singular Value and Eigenvalue Approach for LLM Fingerprinting

Cryptography and Security 2025-12-04 v1 Artificial Intelligence Computation and Language Machine Learning

Abstract

The protection of Intellectual Property (IP) in Large Language Models (LLMs) represents a critical challenge in contemporary AI research. While fingerprinting techniques have emerged as a fundamental mechanism for detecting unauthorized model usage, existing methods -- whether behavior-based or structural -- suffer from vulnerabilities such as false claim attacks or susceptible to weight manipulations. To overcome these limitations, we propose SELF, a novel intrinsic weight-based fingerprinting scheme that eliminates dependency on input and inherently resists false claims. SELF achieves robust IP protection through two key innovations: 1) unique, scalable and transformation-invariant fingerprint extraction via singular value and eigenvalue decomposition of LLM attention weights, and 2) effective neural network-based fingerprint similarity comparison based on few-shot learning and data augmentation. Experimental results demonstrate SELF maintains high IP infringement detection accuracy while showing strong robustness against various downstream modifications, including quantization, pruning, and fine-tuning attacks. Our code is available at https://github.com/HanxiuZhang/SELF_v2.

Keywords

Cite

@article{arxiv.2512.03620,
  title  = {SELF: A Robust Singular Value and Eigenvalue Approach for LLM Fingerprinting},
  author = {Hanxiu Zhang and Yue Zheng},
  journal= {arXiv preprint arXiv:2512.03620},
  year   = {2025}
}
R2 v1 2026-07-01T08:07:26.556Z