When Do PEFT Adaptations Leak Structure? Measuring Black-Box Structural Bounds in Public-Base Model Services

arXiv:2608.05036 · cs.CR · Submitted 2026-08-05 · Read on arXiv

Zhongjiang Yao, Shuangshuang Liang, Chun Yang, LiWei Chen, Gang Shi

cs.CR

Submitted: 2026-08-05

Comments: Submitted to USENIX Security 2027

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Accuracy — 27× in this paper · explained in 1 episode
• Adaptation — 23× in this paper · explained in 1 episode
• Fidelity — 17× in this paper · explained in 2 episodes
• Alignment — 15× in this paper · explained in 1 episode
• Distillation — 15× in this paper · explained in 2 episodes
• Calibration — 13× in this paper · explained in 7 episodes
• Fingerprinting — 13× in this paper · explained in 2 episodes
• AUROC — 11× in this paper · explained in 2 episodes
• AUC — 9× in this paper · explained in 2 episodes
• Provenance — 6× in this paper · explained in 4 episodes
• Fine-Tuning — 5× in this paper · explained in 5 episodes
• Quantization — 5× in this paper · explained in 12 episodes
• Robustness — 4× in this paper · explained in 5 episodes
• Ablation — 3× in this paper · explained in 1 episode
• Core — 3× in this paper · explained in 2 episodes
• Parameter-Efficient Fine-Tuning — 3× in this paper · explained in 2 episodes
• Foundation Model — 2× in this paper · explained in 3 episodes
• Spectral Signature — 2× in this paper · explained in 2 episodes
• Transfer Learning — 2× in this paper · explained in 10 episodes
• Transformer — 2× in this paper · explained in 2 episodes
• Abstention — 1× in this paper · explained in 1 episode
• Active Learning — 1× in this paper · explained in 6 episodes
• Adam — 1× in this paper · explained in 2 episodes
• Adversarial Transferability — 1× in this paper · explained in 1 episode
• Consistency — 1× in this paper · explained in 3 episodes
• Cosine Similarity — 1× in this paper · explained in 3 episodes
• Differentially Private — 1× in this paper · explained in 3 episodes
• Diffusion Model — 1× in this paper · explained in 8 episodes
• Diffusion Models — 1× in this paper · explained in 6 episodes
• Federated Learning — 1× in this paper · explained in 15 episodes
• Foundation Models — 1× in this paper · explained in 7 episodes
• Generative AI — 1× in this paper · explained in 2 episodes
• Information Leakage — 1× in this paper · explained in 2 episodes
• Tokenization — 1× in this paper · explained in 2 episodes
• Transferability — 1× in this paper · explained in 4 episodes

Sources

• Exploring Connections Between Active Learning and Model Extraction
• LoRA: Low-Rank Adaptation of Large Language Models

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs