{"data":{"id":"44d305f1-3591-4879-af06-d60493760cac","title":"FIT-Print: Toward False-Claim-Resistant Model Ownership Verification via Targeted Fingerprint","summary":"This paper shows that existing model fingerprinting techniques for open-source model IP are vulnerable to false claim attacks, where adversaries assert ownership of independent third-party models. The authors attribute this to untargeted methods that compare arbitrary sample outputs, and propose FIT-Print, a targeted paradigm with two black-box methods, FIT-ModelDiff and FIT-LIME. Reported results include a 100% defense success rate against false claims, a 0.0% false alarm rate on independent models, and a 100% ownership verification rate across diverse model reuse techniques.","solution":"FIT-Print: a targeted fingerprinting paradigm that uses optimization to turn the fingerprint into a verifiable, targeted signature, implemented via the black-box methods FIT-ModelDiff (bit-wise, using output distances) and FIT-LIME (list-wise, using feature attributions).","labels":["security","research"],"sourceUrl":"http://ieeexplore.ieee.org/document/11557390","publishedAt":"2026-06-10T13:17:33.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["model_theft"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-06-10T13:17:33.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":"peer_reviewed","atlasIds":null}}