| Challenge: | Large Language Models (LLMs) can generate humanlike responses to a variety of requests like writing emails, translating or summarizing content. |
| Approach: | They evaluate the performance of large language models (LLMs) watermarked using three different strategies over a diverse suite of tasks including those cast as k-class classification (CLS), multiple choice question answering (MCQ), short-form generation (e.g., open-ended question answering) and long-form generator (eg. translation) |
| Outcome: | The proposed models can cause significant drops in their effectiveness across a variety of tasks including CLS, MCQ, short-form generation and translation tasks. |
Similar Papers
WaterJudge: Quality-Detection Trade-off when Watermarking Large Language Models (2024.findings-naacl)
Copied to clipboard
| Challenge: | Recent work has shown that small, context-dependent shifts in word distributions can be used to apply and detect watermarks, but little work has analyzed the impact of these perturbations on the quality of generated texts. |
| Approach: | They propose a framework that allows for analysis of the impact of watermark settings on the quality of generated texts. |
| Outcome: | The proposed framework provides easy visualization of the quality-detection trade-off of watermark settings. |
WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models (2024.acl-long)
Copied to clipboard
| Challenge: | Recent studies have developed watermarking algorithms which restrict the generation process to leave an invisible trace for watermark detection. |
| Approach: | They propose a benchmarking procedure that compares different methods to ensure consistent watermarking strength and jointly evaluates their generation and detection performance. |
| Outcome: | The proposed benchmark compares 4 open-source watermarks on 2 LLMs under 2 watermarking strengths and observes the common struggles for current methods on maintaining the generation quality. |
Bypassing LLM Watermarks with Color-Aware Substitutions (2024.acl-long)
Copied to clipboard
| Challenge: | Existing methods to detect large language models (LLMs) generated text are susceptible to a large number of false positives. |
| Approach: | They propose a watermarking approach that uses color information to determine token colors and substitute green tokens with non-green ones. |
| Outcome: | The proposed method evades detection with fewer edits and removes the watermark for arbitrarily long watermarked text. |
Synthetic Text Detection in the Age of Large Language Models: Watermark vs. Automatic Detection (2026.acl-industry)
Copied to clipboard
| Challenge: | Large Language Models (LLMs) are ubiquitous and capable of generating long coherent texts that look almost indistinguishable from human-written texts. |
| Approach: | They propose to use watermark and automatic detection to detect synthetic texts generated from Large Language Models (LLMs) they evaluate six different models, six different watermark techniques and two different automatic detectors for different levels of syntactic changes. |
| Outcome: | The proposed methods outperform on unperturbed and perturbed datasets on six different sizes of Qwen2.5 models, six watermark techniques and detectors, and two automatic detectors. |
WaterPool: A Language Model Watermark Mitigating Trade-Offs among Imperceptibility, Efficacy and Robustness (2025.naacl-long)
Copied to clipboard
| Challenge: | Existing methods to trace the usage of large language models often face trade-offs between imperceptibility and robustness. |
| Approach: | They propose a key-centered scheme to unify existing methods by decomposing a watermark into two components: a 'key module' and a "mark module". |
| Outcome: | The proposed method can be integrated with existing methods and achieve near-optimal imperceptibility and detection efficacy. |
From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models (2025.acl-long)
Copied to clipboard
| Challenge: | Existing watermarking methods face limitations that hinder their effectiveness in diverse and adversarial scenarios. |
| Approach: | They propose a symbiotic watermarking framework with three strategies: serial, parallel, and hybrid. |
| Outcome: | The proposed framework outperforms baselines and achieves state-of-the-art (SOTA) performance. |
PostMark: A Robust Blackbox Watermark for Large Language Models (2024.emnlp-main)
Copied to clipboard
| Challenge: | Existing methods to detect LLM-generated text require access to the underlying LLM’s logits, which LLM providers are loath to share due to fears of model distillation. |
| Approach: | They develop a post-hoc watermarking procedure that inserts an input-dependent set of words into the text after the decoding process has completed. |
| Outcome: | The proposed method is more robust to paraphrasing attacks than existing methods. |
Revisiting the Robustness of Watermarking to Paraphrasing Attacks (2024.emnlp-main)
Copied to clipboard
| Challenge: | Recent watermarking techniques slightly modify the output probabilities of LMs to embed a signal in the generated output that can later be detected. |
| Approach: | They propose to use a model to produce a watermarking signal that is invariant to semantically-similar inputs to undo the effects of watermarks. |
| Outcome: | The proposed method undoes the effects of watermarking and dramatically improves the effectiveness of paraphrasing attacks with limited access to model generations. |
Subtle Signatures, Strong Shields: Advancing Robust and Imperceptible Watermarking in Large Language Models (2024.findings-acl)
Copied to clipboard
| Challenge: | Large Language Models (LLMs) have led to an increase in AI-generated text on the Internet, presenting a crucial challenge to differentiate AI-created content from human-written text. |
| Approach: | They propose a novel approach to embed watermarks into LLMs that leverages token prior probabilities to improve detectability and maintain watermark imperceptibility. |
| Outcome: | The proposed method improves detectability and imperceptibility of watermarks by partitioning tokens into two distinct groups based on prior probabilities and employing tailored strategies for each group. |
A Reinforcement Learning Framework for Robust and Secure LLM Watermarking (2026.eacl-long)
Copied to clipboard
| Challenge: | Existing watermarking algorithms rely on heuristic green/red token lists . however, these lists are inconsistent and can be compromised . |
| Approach: | They propose a framework for robust and secure LLM watermarking using reinforcement learning. |
| Outcome: | The proposed method achieves state-of-the-art trade-off across all criteria with notable improvements in resistance to spoofing attacks without degrading other criteria. |