{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T08:54:32Z","timestamp":1781600072163,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":37,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T00:00:00Z","timestamp":1781568000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U23B2023"],"award-info":[{"award-number":["U23B2023"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6,17]]},"DOI":"10.1145\/3785353.3815086","type":"proceedings-article","created":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T08:11:30Z","timestamp":1781597490000},"page":"81-91","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Robust Black-Box Fingerprinting for Large Language Models Against Composite Attacks via LLM Self-Evaluation and ArcFace"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0001-9624-9833","authenticated-orcid":false,"given":"Yiran","family":"Zhao","sequence":"first","affiliation":[{"name":"School of Communication and Information Engineering, Shanghai University, Shanghai University, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9565-3378","authenticated-orcid":false,"given":"Hongjie","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Computer Science, Sichuan Normal University, Chengdu, Sichuan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1599-7232","authenticated-orcid":false,"given":"Hanzhou","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Communication and Information Engineering, Shanghai University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,16]]},"reference":[{"key":"e_1_3_3_1_2_2","unstructured":"Atish Agarwala Jeffrey Pennington Yann Dauphin and Sam Schoenholz. 2020. Temperature check: theory and practice for training models with softmax-cross-entropy losses. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2010.07344 (2020)."},{"key":"e_1_3_3_1_3_2","unstructured":"Andrew Brown Muhammad Roman and Barry Devereux. 2025. A systematic literature review of retrieval-augmented generation: Techniques metrics and challenges. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2508.06401 (2025)."},{"key":"e_1_3_3_1_4_2","unstructured":"Hongyu Cao Yuxuan Wu Yucheng Cai Xianyu Zhao and Zhijian Ou. 2025. Improving End-to-End Training of Retrieval-Augmented Generation Models via Joint Stochastic Approximation. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2508.18168 (2025)."},{"key":"e_1_3_3_1_5_2","volume-title":"Proceedings of the Forty-First International Conference on Machine Learning (ICML)","author":"Chen Dongping","year":"2024","unstructured":"Dongping Chen, Ruoxi Chen, Shilin Zhang, Yaochen Wang, Yinuo Liu, Huichi Zhou, Qihui Zhang, Yao Wan, Pan Zhou, and Lichao Sun. 2024. Mllm-as-a-judge: Assessing multimodal llm-as-a-judge with vision-language benchmark. In Proceedings of the Forty-First International Conference on Machine Learning (ICML)."},{"key":"e_1_3_3_1_6_2","doi-asserted-by":"crossref","first-page":"824","DOI":"10.1109\/SP46214.2022.9833747","volume-title":"Proceedings of the 2022 IEEE Symposium on Security and Privacy (SP)","author":"Chen Jialuo","year":"2022","unstructured":"Jialuo Chen, Jingyi Wang, Tinglan Peng, Youcheng Sun, Peng Cheng, Shouling Ji, Xingjun Ma, Bo Li, and Dawn Song. 2022. Copy, right? a testing framework for copyright protection of deep learning models. In Proceedings of the 2022 IEEE Symposium on Security and Privacy (SP). IEEE, 824\u2013841."},{"key":"e_1_3_3_1_7_2","unstructured":"Google DeepMind.2025. Gemini 3 Pro - Model Card. https:\/\/storage.googleapis.com\/deepmind-media\/Model-Cards\/Gemini-3-Pro-Model-Card.pdf. Accessed: May 6 2026."},{"key":"e_1_3_3_1_8_2","first-page":"4690","volume-title":"Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition","author":"Deng Jiankang","year":"2019","unstructured":"Jiankang Deng, Jia Guo, Niannan Xue, and Stefanos Zafeiriou. 2019. Arcface: Additive angular margin loss for deep face recognition. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition. 4690\u20134699."},{"key":"e_1_3_3_1_9_2","unstructured":"Irena Gao Percy Liang and Carlos Guestrin. 2024. Model equality testing: Which model is this api serving? arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2410.20247 (2024)."},{"key":"e_1_3_3_1_10_2","doi-asserted-by":"crossref","unstructured":"Louie Giray.2023. Prompt Engineering with ChatGPT: A Guide for Academic Writers. Annals of Biomedical Engineering 51 12 (2023) 2629\u20132633.","DOI":"10.1007\/s10439-023-03272-4"},{"key":"e_1_3_3_1_11_2","unstructured":"Aaron Grattafiori et\u00a0al. 2024. The Llama 3 Herd of Models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2407.21783 (2024)."},{"key":"e_1_3_3_1_12_2","first-page":"11496","volume-title":"Proceedings of the Findings of the Association for Computational Linguistics (ACL)","author":"Gubri Martin","year":"2024","unstructured":"Martin Gubri, Dennis Ulmer, Hwaran Lee, Sangdoo Yun, and Seong\u00a0Joon Oh. 2024. Trap: Targeted random adversarial prompt honeypot for black-box identification. In Proceedings of the Findings of the Association for Computational Linguistics (ACL). 11496\u201311517."},{"key":"e_1_3_3_1_13_2","unstructured":"Ruiyan Han Zhen Fang Xinyu Sun Yuchen Ma Ziheng Wang Yu Zeng et\u00a0al. 2026. UniCorn: Towards Self-Improving Unified Multimodal Models through Self-Generated Supervision. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2601.03193 (2026)."},{"key":"e_1_3_3_1_14_2","unstructured":"Md.\u00a0Mehedi Hasan Md.\u00a0Abir Hossain Farman\u00a0Hossain Sayem Bikash\u00a0Kumar Paul Ziaur Rahman Mohammad\u00a0Shorif Uddin et\u00a0al. 2025. CLIN-LLM: A Safety-Constrained Hybrid Framework for Clinical Diagnosis and Treatment Generation. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2510.22609 (2025)."},{"key":"e_1_3_3_1_15_2","first-page":"770","volume-title":"Proceedings of the IEEE conference on computer vision and pattern recognition","author":"He Kaiming","year":"2016","unstructured":"Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun. 2016. Deep residual learning for image recognition. In Proceedings of the IEEE conference on computer vision and pattern recognition. 770\u2013778."},{"key":"e_1_3_3_1_16_2","first-page":"153","volume-title":"Proceedings of the 34th ACM SIGSOFT International Symposium on Software Testing and Analysis","author":"He Yiling","year":"2025","unstructured":"Yiling He, Hongyu She, Xingzhi Qian, Xinran Zheng, Zhuo Chen, Zhan Qin, and Lorenzo Cavallaro. 2025. On benchmarking code llms for android malware analysis. In Proceedings of the 34th ACM SIGSOFT International Symposium on Software Testing and Analysis. 153\u2013160."},{"key":"e_1_3_3_1_17_2","volume-title":"Proceedings of the International Conference on Learning Representations (ICLR)","author":"Hu Edward\u00a0J","year":"2022","unstructured":"Edward\u00a0J Hu, Phillip Wallis, Zeyuan Allen-Zhu, Yuanzhi Li, Shean Wang, Lu Wang, Weizhu Chen, et\u00a0al. 2022. LoRA: Low-Rank Adaptation of Large Language Models. In Proceedings of the International Conference on Learning Representations (ICLR)."},{"key":"e_1_3_3_1_18_2","unstructured":"Do hyeon Yoon Minsoo Chun Thomas Allen Hans Muller Min Wang and Rajesh Sharma.2025. Intrinsic Fingerprint of LLMs: Continue Training is NOT All You Need to Steal A Model! arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2507.03014 (2025)."},{"key":"e_1_3_3_1_19_2","unstructured":"Albert\u00a0Q. Jiang Alexandre Sablayrolles Arthur Mensch Chris Bamford Devendra\u00a0Singh Chaplot Diego de\u00a0las Casas et\u00a0al. 2023. Mistral 7B. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2310.06825 (2023)."},{"key":"e_1_3_3_1_20_2","first-page":"12186","volume-title":"Proceedings of the Findings of the Association for Computational Linguistics (ACL)","author":"Jin Renren","year":"2024","unstructured":"Renren Jin, Jiangcun Du, Wuwei Huang, Wei Liu, Jian Luan, Bin Wang, and Deyi Xiong. 2024. A comprehensive evaluation of quantization strategies for large language models. In Proceedings of the Findings of the Association for Computational Linguistics (ACL). 12186\u201312215."},{"key":"e_1_3_3_1_21_2","first-page":"5269","volume-title":"Proceedings of the 33rd USENIX Security Symposium","author":"Krau\u00df Torsten","year":"2024","unstructured":"Torsten Krau\u00df, Jasper Stang, and Alexandra Dmitrienko. 2024. ClearStamp: A Human-Visible and Robust Model-Ownership Proof based on Transposed Model Training. In Proceedings of the 33rd USENIX Security Symposium. 5269\u20135286."},{"key":"e_1_3_3_1_22_2","first-page":"9459","volume-title":"Proceedings of the 34th International Conference on Neural Information Processing Systems","author":"Lewis Patrick","year":"2020","unstructured":"Patrick Lewis, Ethan Perez, Aleksandra Piktus, Fabio Petroni, Vladimir Karpukhin, Naman Goyal, Heinrich K\u00fcttler, Mike Lewis, Wen-tau Yih, Tim Rockt\u00e4schel, et\u00a0al. 2020. Retrieval-augmented generation for knowledge-intensive NLP tasks. In Proceedings of the 34th International Conference on Neural Information Processing Systems. 9459\u20139474."},{"key":"e_1_3_3_1_23_2","unstructured":"Shuliang Liu Xinze Li Zhenghao Liu Yukun Yan Cheng Yang Zheni Zeng et\u00a0al. 2025. Judge as A Judge: Improving the Evaluation of Retrieval-Augmented Generation through the Judge-Consistency of Large Language Models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2502.18817 (2025)."},{"key":"e_1_3_3_1_24_2","first-page":"299","volume-title":"Proceedings of the 34th USENIX Security Symposium","author":"Pasquini Dario","year":"2025","unstructured":"Dario Pasquini, Evgenios\u00a0M Kornaropoulos, and Giuseppe Ateniese. 2025. LLMmap: Fingerprinting for Large Language Models. In Proceedings of the 34th USENIX Security Symposium. 299\u2013318."},{"key":"e_1_3_3_1_25_2","unstructured":"Qwen An Yang Baosong Yang Beichen Zhang Binyuan Hui Bo Zheng et\u00a0al. 2024. Qwen2.5 Technical Report. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2412.15115 (2024)."},{"key":"e_1_3_3_1_26_2","unstructured":"Shuo Shao Yiming Li Yu He Hongwei Yao Wenyuan Yang Dacheng Tao et\u00a0al. 2025. SoK: Large Language Model Copyright Auditing via Fingerprinting. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2508.19843 (2025)."},{"key":"e_1_3_3_1_27_2","doi-asserted-by":"crossref","unstructured":"Shuo Shao Yiming Li Hongwei Yao Yiling He Zhan Qin and Kui Ren. 2024. Explanation as a watermark: Towards harmless and multi-bit model ownership verification via watermarking feature attribution. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2405.04825 (2024).","DOI":"10.14722\/ndss.2025.230338"},{"key":"e_1_3_3_1_28_2","unstructured":"Zhengliang Shi Lingyong Yan Weiwei Sun Yue Feng Pengjie Ren Xinyu Ma et\u00a0al. 2025. Direct Retrieval-augmented Optimization: Synergizing Knowledge Selection and Language Models. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2505.03075 (2025)."},{"key":"e_1_3_3_1_29_2","unstructured":"Ashish Vaswani Noam Shazeer Niki Parmar Jakob Uszkoreit Llion Jones Aidan\u00a0N Gomez \u0141ukasz Kaiser and Illia Polosukhin. 2017. Attention is all you need. Advances in neural information processing systems 30 (2017)."},{"key":"e_1_3_3_1_30_2","unstructured":"Liang Wang Nan Yang Xiaolong Huang Linjun Yang Rangan Majumder and Furu Wei.2024. Multilingual E5 Text Embeddings: A Technical Report. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2402.05672 (2024)."},{"key":"e_1_3_3_1_31_2","unstructured":"Zehao Wu Yanjie Zhao and Haoyu Wang.2025. Gradient-Based Model Fingerprinting for LLM Similarity Detection and Family Classification. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2506.01631 (2025)."},{"key":"e_1_3_3_1_32_2","first-page":"3277","volume-title":"Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies","author":"Xu Jiashu","year":"2024","unstructured":"Jiashu Xu, Fei Wang, Mingyu Ma, Pang\u00a0Wei Koh, Chaowei Xiao, and Muhao Chen. 2024. Instructional fingerprinting of large language models. In Proceedings of the 2024 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies. 3277\u20133306."},{"key":"e_1_3_3_1_33_2","unstructured":"Yijie Xu Aiwei Liu Xuming Hu Lijie Wen and Hui Xiong. 2025. Mark your llm: Detecting the misuse of open-source large language models via watermarking. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2503.04636 (2025)."},{"key":"e_1_3_3_1_34_2","doi-asserted-by":"crossref","unstructured":"Chuanpeng Yang Yao Zhu Wang Lu Yidong Wang Qian Chen Chenlong Gao et\u00a0al. 2025. Survey on Knowledge Distillation for Large Language Models: Methods Evaluation and Application. ACM Transactions on Intelligent Systems and Technology 16 6 Article 143 (2025) 27 pages.","DOI":"10.1145\/3699518"},{"key":"e_1_3_3_1_35_2","doi-asserted-by":"crossref","unstructured":"Hamed Zamani and Michael Bendersky.2024. Stochastic RAG: End-to-End Retrieval-Augmented Generation through Expected Utility Maximization. arXiv preprint arXiv:https:\/\/arXiv.org\/abs\/2405.02816 (2024).","DOI":"10.1145\/3626772.3657923"},{"key":"e_1_3_3_1_36_2","first-page":"126332","volume-title":"Proceedings of the 38th International Conference on Neural Information Processing Systems","author":"Zeng Boyi","year":"2024","unstructured":"Boyi Zeng, Lizheng Wang, Yuncong Hu, Yi Xu, Chenghu Zhou, Xinbing Wang, Yu Yu, and Zhouhan Lin. 2024. HuRef: human-readable fingerprint for large language models. In Proceedings of the 38th International Conference on Neural Information Processing Systems. 126332\u2013126362."},{"key":"e_1_3_3_1_37_2","first-page":"2410","volume-title":"Proceedings of the 2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","author":"Zhang Jie","year":"2024","unstructured":"Jie Zhang, Jiayuan Li, Haiqiang Fei, Lun Li, and Hongsong Zhu. 2024. Easydetector: Using linear probe to detect the provenance of large language models. In Proceedings of the 2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom). IEEE, 2410\u20132417."},{"key":"e_1_3_3_1_38_2","volume-title":"Proceedings of the International Conference on Learning Representations","author":"Zhang Jie","year":"2025","unstructured":"Jie Zhang, Dongrui Liu, Chen Qian, Linfeng Zhang, Yong Liu, Yu Qiao, and Jing Shao. 2025. REEF: Representation Encoding Fingerprints for Large Language Models. In Proceedings of the International Conference on Learning Representations."}],"event":{"name":"IH&MMSec '26: ACM Workshop on Information Hiding and Multimedia Security","location":"Firenze Italy","acronym":"IH&MMSec '26","sponsor":["SIGMM ACM Special Interest Group on Multimedia"]},"container-title":["Proceedings of the 2026 ACM Workshop on Information Hiding and Multimedia Security"],"original-title":[],"deposited":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T08:18:23Z","timestamp":1781597903000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3785353.3815086"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,16]]},"references-count":37,"alternative-id":["10.1145\/3785353.3815086","10.1145\/3785353"],"URL":"https:\/\/doi.org\/10.1145\/3785353.3815086","relation":{},"subject":[],"published":{"date-parts":[[2026,6,16]]},"assertion":[{"value":"2026-06-16","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}