Do System Prompts Leave Behavioral Fingerprints? A Large-Scale Empirical Study of Clone Detection via Output Similarity

arXiv:2608.24461 · cs.CR · Submitted 2026-08-25 · Read on arXiv

cs.CR

Submitted: 2026-08-25

Updated: 2026-08-25

Terminology

• AUC — 72× in this paper · explained in 2 episodes
• Benchmark — 51× in this paper · explained in 2 episodes
• Embeddings — 12× in this paper · explained in 2 episodes
• Fingerprinting — 8× in this paper · explained in 2 episodes
• Cooperation — 7× in this paper · explained in 2 episodes
• Ablation — 5× in this paper · explained in 1 episode
• Robustness — 5× in this paper · explained in 5 episodes
• Verification — 5× in this paper · explained in 2 episodes
• Diagnostic Query Optimization — 4× in this paper
• Failure Modes — 3× in this paper · explained in 3 episodes
• Generalization — 3× in this paper · explained in 13 episodes
• Adaptation — 2× in this paper · explained in 1 episode
• Aggregation — 2× in this paper · explained in 1 episode
• Consistency — 2× in this paper · explained in 3 episodes
• Core — 2× in this paper · explained in 2 episodes
• Fidelity — 2× in this paper · explained in 2 episodes
• Fine-Tuning — 2× in this paper · explained in 5 episodes
• Model-Agnostic — 2× in this paper · explained in 2 episodes
• Personalization — 2× in this paper · explained in 2 episodes
• Steering — 2× in this paper · explained in 2 episodes
• Ablation Studies — 1× in this paper · explained in 1 episode
• Bit-Flip Attacks — 1× in this paper · explained in 2 episodes
• Calibration — 1× in this paper · explained in 7 episodes
• Cosine Similarity — 1× in this paper · explained in 3 episodes
• Cross-Model Transfer — 1× in this paper · explained in 2 episodes
• Empirical Methods in Natural Language Processing — 1× in this paper
• RAG — 1× in this paper · explained in 3 episodes
• Reinforcement Learning — 1× in this paper · explained in 4 episodes
• Tokenization — 1× in this paper · explained in 2 episodes
• Trace — 1× in this paper · explained in 2 episodes

Sources

• ProxyPrompt: Securing System Prompts against Prompt Extraction Attacks
• System Prompt Extraction Attacks and Defenses in Large Language Models
• Bit-Flip Attacks on Vision-Language-Action Models: Action-Decoding Architecture Shapes the Vulnerability
• PathMark: Protecting Intellectual Property of Mixture-of-Expert LLMs via Path Watermarks
• Safety-Constrained Reinforcement Learning with Post-Training Reachability Verification for Robot Navigation
• Towards General Text Embeddings with Multi-stage Contrastive Learning
• FragileFlow: Spectral Control of Correct-but-Fragile Predictions for Foundation Model Robustness
• SCOPE: Sequential Conformal Probing for Reliable OOD Rejection in LLM Services
• Agent Hacks Agents: Autoresearch Discovers Vulnerabilities in Production Agents
• A Fingerprint for Large Language Models
• MemMark: State-Evolution Attribution Watermarking for Agent Long-Term Memory Systems
• Prompt Stealing Attacks Against Large Language Models
• RAFP: Identifying LLM Lineages via Rare-Region Fingerprints

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs