A Robust Semantics-based Watermark for Large Language Model against Paraphrasing (2024.findings-naacl)
Copied to clipboard
| Challenge: | Existing methods to detect LLM-generated content use simple hashes of precedent tokens to partition vocabulary. |
| Approach: | They propose a semantics-based watermark framework to enhance the robustness against paraphrase. |
| Outcome: | The proposed framework is robust under different paraphrases and the semantic meaning of the sentences will be likely preserved under paraphrase. |
Similar Papers
SemStamp: A Semantic Watermark with Paraphrastic Robustness for Text Generation (2024.naacl-long)
Copied to clipboard
Abe Hou, Jingyu Zhang, Tianxing He, Yichen Wang, Yung-Sung Chuang, Hongwei Wang, Lingfeng Shen, Benjamin Van Durme, Daniel Khashabi, Yulia Tsvetkov
| Challenge: | Existing watermarked generation algorithms employ token-level designs and are vulnerable to paraphrase attacks. |
| Approach: | They propose a sentence-level watermarking algorithm that uses locality-sensitive hashing to partition the semantic space of sentences. |
| Outcome: | The proposed algorithm is more robust than the existing state-of-the-art method on paraphrasers and domains, while posing only minor degradations to SemStamp. |
SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models (2025.emnlp-main)
Copied to clipboard
| Challenge: | Experimental results demonstrate that SimMark surpasses previous sentence-level watermarking techniques in robustness, sampling efficiency, and applicability across diverse domains. |
| Approach: | They propose a sentence-level watermarking algorithm that makes LLM outputs traceable without requiring access to model internals. |
| Outcome: | The proposed algorithm surpasses previous sentence-level watermarking techniques in robustness, sampling efficiency, and applicability across diverse domains while maintaining the text quality and fluency. |
Topic-Based Watermarks for Large Language Models (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing watermarking methods often involve trade-offs between attack robustness, generation quality and additional overhead. |
| Approach: | They propose a topic-guided watermarking scheme that partitions the vocabulary into topic-aligned token subsets. |
| Outcome: | The proposed method achieves text quality comparable to industry-leading systems and improves watermark robustness against paraphrasing and lexical perturbation attacks with minimal performance overhead. |
Subtle Signatures, Strong Shields: Advancing Robust and Imperceptible Watermarking in Large Language Models (2024.findings-acl)
Copied to clipboard
| Challenge: | Large Language Models (LLMs) have led to an increase in AI-generated text on the Internet, presenting a crucial challenge to differentiate AI-created content from human-written text. |
| Approach: | They propose a novel approach to embed watermarks into LLMs that leverages token prior probabilities to improve detectability and maintain watermark imperceptibility. |
| Outcome: | The proposed method improves detectability and imperceptibility of watermarks by partitioning tokens into two distinct groups based on prior probabilities and employing tailored strategies for each group. |
PostMark: A Robust Blackbox Watermark for Large Language Models (2024.emnlp-main)
Copied to clipboard
| Challenge: | Existing methods to detect LLM-generated text require access to the underlying LLM’s logits, which LLM providers are loath to share due to fears of model distillation. |
| Approach: | They develop a post-hoc watermarking procedure that inserts an input-dependent set of words into the text after the decoding process has completed. |
| Outcome: | The proposed method is more robust to paraphrasing attacks than existing methods. |
MorphMark: Flexible Adaptive Watermarking for Large Language Models (2025.acl-long)
Copied to clipboard
| Challenge: | Existing methods for tracing text origins struggle with a watermark effectiveness dilemma . weaker watermarks preserve text quality, while stronger ones enhance effectiveness . |
| Approach: | They propose a method that adjusts watermark strength in response to changes in a key factor . they first formalize the problem within a multi-objective trade-off analysis framework . |
| Outcome: | The proposed method improves watermark effectiveness but reduces text quality . the proposed method prioritizes flexibility and time and space efficiency . |
Revisiting the Robustness of Watermarking to Paraphrasing Attacks (2024.emnlp-main)
Copied to clipboard
| Challenge: | Recent watermarking techniques slightly modify the output probabilities of LMs to embed a signal in the generated output that can later be detected. |
| Approach: | They propose to use a model to produce a watermarking signal that is invariant to semantically-similar inputs to undo the effects of watermarks. |
| Outcome: | The proposed method undoes the effects of watermarking and dramatically improves the effectiveness of paraphrasing attacks with limited access to model generations. |
k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text (2024.findings-acl)
Copied to clipboard
| Challenge: | Recent watermarked generation algorithms inject detectable signatures during language generation to facilitate post-hoc detection. |
| Approach: | They propose a watermark which assigns signatures to each watermarked sentence according to locality-sensitive hashing (LSH) they propose k-SemStamp, which uses kmeans clustering to partition the semantic space with awareness of inherent semantic structure. |
| Outcome: | The proposed watermark improves its robustness and sampling efficiency while preserving the generation quality, making it more effective for machine-generated text detection. |
A Linguistics-Aware LLM Watermarking via Syntactic Predictability (2026.acl-long)
Copied to clipboard
| Challenge: | a central challenge remains balancing text quality against detection robustness. |
| Approach: | They propose a framework that aligns watermark strength with linguistic degrees of freedom . they use part-of-speech models to weaken the signal in grammatically constrained contexts . |
| Outcome: | The proposed framework outperforms existing methods in linguistic indeterminacy tests on languages . it weakens the watermark strength in grammatically constrained contexts and strengthens it in contexts with greater linguistic flexibility. |
DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing watermarking algorithms focus on defending against paraphrase and piggyback spoofing attacks, which can inject harmful content, compromise reliability, and undermine trust in attribution. |
| Approach: | They propose an algorithm capable of defending against paraphrase and spoofing attacks. |
| Outcome: | Experiments on large language models and language models show that DualGuard is the first watermarking algorithm capable of defending against both paraphrase and spoofing attacks. |