English(EN)Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection
新大语言模型水印技术面临逃避和鲁棒性挑战
作者PulseAugur 编辑部·[8 个来源]·
研究人员开发了几种新方法来解决大语言模型（LLM）水印技术的漏洞。一种方法SeedHijack针对伪随机数生成器（PRNG），在不知道密钥或模型logits的情况下操纵水印；另一种方法Bias-Inversion Rewriting Attack（BIRA）则使用负logits偏差来逃避检测。PASA和SAFESEAL等新的水印算法旨在抵抗语义不变攻击并实现最小失真，其中SAFESEAL保留命名实体并使用上下文感知的同义词。ArcMark专注于在不扭曲LLM的下一个词分布的情况下嵌入多字节信息，而TextSeal提供本地化检测和对蒸馏的鲁棒性。
AI
arXiv:2605.28632v1 Announce Type: cross Abstract: Cryptographic watermarking is a leading defense for attributing text generated by large language models (LLMs). Existing schemes, including KGW, Unigram, and DipMark, derive their security guarantees from the assumption that the u…
arXiv cs.AI
TIER_1English(EN)·Jeongyeon Hwang, Sangdon Park, Jungseul Ok·
arXiv:2509.23019v5 Announce Type: replace-cross Abstract: Watermarking offers a promising solution for detecting LLM-generated content, yet its robustness under realistic query-free (black-box) evasion remains an open challenge. Existing query-free attacks often achieve limited s…
Cryptographic watermarking is a leading defense for attributing text generated by large language models (LLMs). Existing schemes, including KGW, Unigram, and DipMark, derive their security guarantees from the assumption that the underlying pseudo-random number generator (PRNG) is…
arXiv:2605.10977v2 Announce Type: replace-cross Abstract: Watermarking for large language models (LLMs) is a promising approach for detecting LLM-generated text and enabling responsible deployment. However, existing watermarking methods are often vulnerable to semantic-invariant …
arXiv:2605.23175v1 Announce Type: cross Abstract: Proprietary large language models (LLMs) face risks of intellectual property (IP) violation, as adversaries can replicate an LLM by collecting input-output pairs to train a surrogate model, causing financial setbacks. Watermarks o…
arXiv cs.AI
TIER_1English(EN)·Atefeh Gilani, Sajani Vithana, Carol Xuan Long, Oliver Kosut, Lalitha Sankar, Flavio P. Calmon·
arXiv:2602.07235v2 Announce Type: replace-cross Abstract: Watermarking is an important tool for promoting the responsible use of large language models (LLMs). Existing watermarks insert a signal into generated tokens that either flags LLM-generated text (zero-bit watermarking) or…
arXiv:2605.12456v2 Announce Type: replace-cross Abstract: We introduce TextSeal, a state-of-the-art watermark for large language models. Building on Gumbel-max sampling, TextSeal introduces dual-key generation to restore output diversity, along with entropy-weighted scoring and m…
Proprietary large language models (LLMs) face risks of intellectual property (IP) violation, as adversaries can replicate an LLM by collecting input-output pairs to train a surrogate model, causing financial setbacks. Watermarks offer a promising defense to verify ownership, but …
