IDEAW: Robust Neural Audio Watermarking with Invertible Dual-Embedding (2024.emnlp-main)
Copied to clipboard
| Challenge: | Traditional methods for embedding watermarks into audio have low capacity and unsatisfactory imperceptibility. |
| Approach: | They propose a dual-embedding wa- termarking model for efficient locating and a model that can withstand attacks. |
| Outcome: | The proposed model can withstand attacks with higher capacity and more efficient locating ability compared to existing methods. |
Similar Papers
Duwak: Dual Watermarks in Large Language Models (2024.findings-acl)
Copied to clipboard
| Challenge: | Existing watermark techniques are effective in embedding single human-imperceptible and machine-detectable patterns without significantly affecting generated text quality and semantics. |
| Approach: | They propose to embed dual secret patterns in token probability distribution and sampling schemes to enhance the efficiency of watermarking. |
| Outcome: | The proposed method achieves highest watermark quality at the lowest required token count for detection, up to 70% less than existing techniques, especially under post paraphrasing attacks. |
Subtle Signatures, Strong Shields: Advancing Robust and Imperceptible Watermarking in Large Language Models (2024.findings-acl)
Copied to clipboard
| Challenge: | Large Language Models (LLMs) have led to an increase in AI-generated text on the Internet, presenting a crucial challenge to differentiate AI-created content from human-written text. |
| Approach: | They propose a novel approach to embed watermarks into LLMs that leverages token prior probabilities to improve detectability and maintain watermark imperceptibility. |
| Outcome: | The proposed method improves detectability and imperceptibility of watermarks by partitioning tokens into two distinct groups based on prior probabilities and employing tailored strategies for each group. |
DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing watermarking algorithms focus on defending against paraphrase and piggyback spoofing attacks, which can inject harmful content, compromise reliability, and undermine trust in attribution. |
| Approach: | They propose an algorithm capable of defending against paraphrase and spoofing attacks. |
| Outcome: | Experiments on large language models and language models show that DualGuard is the first watermarking algorithm capable of defending against both paraphrase and spoofing attacks. |
Robust and Minimally Invasive Watermarking for EaaS (2025.findings-acl)
Copied to clipboard
| Challenge: | Existing watermarking methods use a target embedding to create watermarks, but this method results in each embeddable having the same component, making it difficult to remove the watermark. |
| Approach: | They propose to use embedding watermarks to protect EaaS from model extraction attacks . eaas is vulnerable to model extraction, highlighting the need for copyright protection . |
| Outcome: | The proposed method can watermark embeddings against model extraction attacks without sacrificing the quality of the embeddables. |
Watermark under Fire: A Robustness Evaluation of LLM Watermarking (2025.findings-emnlp)
Copied to clipboard
| Challenge: | Various watermarking methods have been proposed to identify LLM-generated texts . lack of unified evaluation platforms has left many critical questions unanswered . |
| Approach: | They systematize existing LLM watermarkers and watermark removal attacks and develop a unified platform that integrates them. |
| Outcome: | The proposed systematizes existing LLM watermarkers and watermark removal attacks, mapping out their design spaces. |
Advancing Beyond Identification: Multi-bit Watermark for Large Language Models (2024.naacl-long)
Copied to clipboard
| Challenge: | Existing methods to detect machine-generated text focus on detection, but some misuses require tracing the adversary user for counteracting them. |
| Approach: | They propose a method for embedding traceable multi-bit information during language model generation. |
| Outcome: | The proposed method outperforms existing methods in terms of robustness and latency while maintaining text quality. |
Cross-Domain Audio Deepfake Detection: Dataset and Analysis (2024.emnlp-main)
Copied to clipboard
| Challenge: | Existing audio deepfake detection datasets are outdated and lack generalization capabilities. |
| Approach: | They construct a new cross-domain audio deepfake detection dataset comprising over 300 hours of speech data that is generated by five advanced zero-shot TTS models. |
| Outcome: | The proposed models achieve 4.1% and 6.5% error rates in the cross-domain ADD dataset generated by five advanced zero-shot TTS models. |
Revisiting the Robustness of Watermarking to Paraphrasing Attacks (2024.emnlp-main)
Copied to clipboard
| Challenge: | Recent watermarking techniques slightly modify the output probabilities of LMs to embed a signal in the generated output that can later be detected. |
| Approach: | They propose to use a model to produce a watermarking signal that is invariant to semantically-similar inputs to undo the effects of watermarks. |
| Outcome: | The proposed method undoes the effects of watermarking and dramatically improves the effectiveness of paraphrasing attacks with limited access to model generations. |
Comprehensive Layer-wise Analysis of SSL Models for Audio Deepfake Detection (2025.findings-naacl)
Copied to clipboard
| Challenge: | Existing algorithms for audio deepfake detection are based on layer-wise analysis of self-supervised learning (SSL) models. |
| Approach: | They conduct a layer-wise analysis of self-supervised learning (SSL) models for audio deepfake detection across diverse contexts. |
| Outcome: | The proposed models achieve competitive equal error rate (EER) scores even when employing a reduced number of layers. |
Watermarking PLMs on Classification Tasks by Combining Contrastive Learning with Weight Perturbation (2023.findings-emnlp)
Copied to clipboard
Chenxi Gu, Xiaoqing Zheng, Jianhan Xu, Muling Wu, Cenyuan Zhang, Chengsong Huang, Hua Cai, Xuanjing Huang
| Challenge: | Large pre-trained language models (PLMs) are highly valuable intellectual property due to their expensive training costs. |
| Approach: | They propose to embed backdoors that can be triggered by specific inputs into models by model watermarking. |
| Outcome: | The proposed method can be used to protect the intellectual property of large pre-trained language models without knowledge about downstream tasks. |