WARDEN: Multi-Directional Backdoor Watermarks for Embedding-as-a-Service Copyright Protection (2024.acl-long)
Copied to clipboard
| Challenge: | Prior studies have shown that EaaS can be prone to model extraction attacks, however, this concern could be mitigated by adding backdoor watermarks to the text embeddings. |
| Approach: | They propose a new method that removes backdoor watermarks while maintaining the high utility of embeddings. |
| Outcome: | The proposed approach increases the stealthiness of watermarks and has been empirically shown to be effective against CSE attacks. |
Similar Papers
WET: Overcoming Paraphrasing Vulnerabilities in Embeddings-as-a-Service with Linear Transformation Watermarks (2025.acl-long)
Copied to clipboard
| Challenge: | Existing EaaS watermarks can be removed by paraphrasing when attackers clone the model. |
| Approach: | They propose a method that integrates a target embedding into the original embeddable based on the presence of trigger words in the input text. |
| Outcome: | The proposed technique is empirically and theoretically robust against paraphrasing. |
Your Semantic-Independent Watermark is Fragile: A Semantic Perturbation Attack against EaaS Watermark (2025.findings-emnlp)
Copied to clipboard
| Challenge: | Embedding-as-a-Service (EaaS) is a successful business pattern but faces significant challenges related to various forms of copyright infringement. |
| Approach: | They propose a semantic-independent watermarking scheme that exploits semantic perturbation tests to bypass verification. |
| Outcome: | The proposed watermarking schemes possess semantic-independent characteristics and exploit semantic perturbation tests to bypass verification. |
RShield: A User-level Traceable Backdoor Watermark for LLMs in Embedding-as-a-Service (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing backdoor watermarking techniques are limited to zero-bit detection . RShield enables reliable user-level attribution of large language models under model extraction attacks. |
| Approach: | They propose a multi-bit backdoor watermarking technique that enables reliable user-level attribution of large language models under model extraction attacks. |
| Outcome: | RShield achieves 100% multi-bit watermark recovery and high semantic fidelity under model extraction attacks compared to existing methods. |
Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark (2023.acl-long)
Copied to clipboard
Wenjun Peng, Jingwei Yi, Fangzhao Wu, Shangxi Wu, Bin Bin Zhu, Lingjuan Lyu, Binxing Jiao, Tong Xu, Guangzhong Sun, Xing Xie
| Challenge: | Large language models (LLMs) have demonstrated exceptional abilities in both text understanding and generation. |
| Approach: | They propose an Embedding Watermark method that implants backdoors on embeddings to protect copyright of large language models. |
| Outcome: | The proposed method protects the copyright of large language models without compromising service quality while minimizing the adverse impact on the original embeddings’ utility. |
Robust and Minimally Invasive Watermarking for EaaS (2025.findings-acl)
Copied to clipboard
| Challenge: | Existing watermarking methods use a target embedding to create watermarks, but this method results in each embeddable having the same component, making it difficult to remove the watermark. |
| Approach: | They propose to use embedding watermarks to protect EaaS from model extraction attacks . eaas is vulnerable to model extraction, highlighting the need for copyright protection . |
| Outcome: | The proposed method can watermark embeddings against model extraction attacks without sacrificing the quality of the embeddables. |
GuardEmb: Dynamic Watermark for Safeguarding Large Language Model Embedding Service Against Model Stealing Attack (2024.findings-emnlp)
Copied to clipboard
| Challenge: | Recent studies reveal the risk of the model stealing attack, posing a financial threat to EaaS providers. |
| Approach: | They propose a dynamic embedding watermarking method that detects watermarks in embedded text . this method is a cross-platform approach that trains a verifier to detect watermark . |
| Outcome: | The proposed method enables an attacker to replicate the proposed method for profit without compromising embedding functionality. |
Claim-Guided Textual Backdoor Attack for Practical Applications (2025.findings-naacl)
Copied to clipboard
| Challenge: | a novel backdoor attack is based on textual claims to trick models into misbehaving on targeted claims. |
| Approach: | a new backdoor attack is designed to trick models into misbehaving on targeted claims . the code and data will be available at https://github.com/minkyoo9/CGBA . |
| Outcome: | a new backdoor attack exploits the power of textual claims to trick models into misbehaving on claims without affecting their performance on clean data. |
Beyond A Fixed Seal: Adaptive Stealing Watermark in Large Language Models (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing detection methods for large language models rely on fixed strategies to steal watermarks. |
| Approach: | They propose a novel steal-based watermark algorithm that derives watermark information from watermarked texts to craft highly targeted adversarial attacks. |
| Outcome: | The proposed system significantly increases steal efficiency against target watermarks under identical conditions. |
Task-Agnostic Detector for Insertion-Based Backdoor Attacks (2024.findings-naacl)
Copied to clipboard
| Challenge: | Existing methods for textual backdoor detection are task-specific and less effective beyond sentence classification. |
| Approach: | They propose a task-agnostic method for backdoor detection that leverages final layer logits and an efficient pooling technique. |
| Outcome: | TABDet can jointly learn from diverse task-specific models, demonstrating superior detection efficacy over traditional methods. |
Watermarking PLMs on Classification Tasks by Combining Contrastive Learning with Weight Perturbation (2023.findings-emnlp)
Copied to clipboard
Chenxi Gu, Xiaoqing Zheng, Jianhan Xu, Muling Wu, Cenyuan Zhang, Chengsong Huang, Hua Cai, Xuanjing Huang
| Challenge: | Large pre-trained language models (PLMs) are highly valuable intellectual property due to their expensive training costs. |
| Approach: | They propose to embed backdoors that can be triggered by specific inputs into models by model watermarking. |
| Outcome: | The proposed method can be used to protect the intellectual property of large pre-trained language models without knowledge about downstream tasks. |