Let Them Steal: Trapping Large Language Model Extraction Attacks with Knowledge Honeypot

arXiv:2606.15810 · cs.CR, cs.AI · Submitted 2026-06-14 · Read on arXiv

cs.CR, cs.AI

Submitted: 2026-06-14

Updated: 2026-08-29

Terminology

• Transferability — 17× in this paper · explained in 4 episodes
• Knowledge Graph — 16× in this paper · explained in 7 episodes
• Benchmark — 13× in this paper · explained in 2 episodes
• Accuracy — 7× in this paper · explained in 1 episode
• Active Learning — 7× in this paper · explained in 6 episodes
• Honeypot Knowledge Graph — 6× in this paper
• Knowledge graphs — 5× in this paper · explained in 2 episodes
• Ablation — 4× in this paper · explained in 1 episode
• Adam — 4× in this paper · explained in 2 episodes
• Fidelity — 4× in this paper · explained in 2 episodes
• Fine-Tuning — 4× in this paper · explained in 5 episodes
• Acquisition Function — 3× in this paper · explained in 1 episode
• Alignment — 3× in this paper · explained in 1 episode
• Distillation — 3× in this paper · explained in 2 episodes
• Adversarial Attacks — 2× in this paper · explained in 1 episode
• Clustering — 2× in this paper · explained in 2 episodes
• Cosine Similarity — 2× in this paper · explained in 3 episodes
• Embeddings — 2× in this paper · explained in 2 episodes
• Ablation study — 1× in this paper · explained in 1 episode
• Adversarial Training — 1× in this paper · explained in 1 episode
• Calibration — 1× in this paper · explained in 7 episodes
• Graph Construction — 1× in this paper · explained in 3 episodes
• Information Gain — 1× in this paper · explained in 2 episodes
• Large Language Models (LLMs) — 1× in this paper · explained in 6 episodes
• Multi-hop Reasoning — 1× in this paper · explained in 3 episodes
• RAG — 1× in this paper · explained in 3 episodes
• Self-Supervised Learning — 1× in this paper · explained in 8 episodes
• Semi-supervised Learning — 1× in this paper · explained in 4 episodes
• Steering — 1× in this paper · explained in 2 episodes
• Verification — 1× in this paper · explained in 2 episodes

Sources

• Stealing Part of a Production Language Model
• MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models
• Increasing the Cost of Model Extraction with Calibrated Proof of Work
• GPT-4 Technical Report
• The Llama 3 Herd of Models
• Model Leeching: An Extraction Attack Targeting LLMs
• GPT-4o System Card
• Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks
• Thieves on Sesame Street! Model Extraction of BERT-based APIs
• HoneyGPT: Breaking the Trilemma in Terminal Honeypots with Large Language Model
• GreaseLM: Graph REASoning Enhanced Language Models for Question Answering
• NSmark: Null Space Based Black-box Watermarking Defense Framework for Language Models
• LLMPot: Dynamically Configured LLM-based Honeypot for Industrial Protocol and Physical Process Emulation

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs