A Reinforcement Learning Framework for Robust and Secure LLM Watermarking (2026.eacl-long)
Copied to clipboard
| Challenge: | Existing watermarking algorithms rely on heuristic green/red token lists . however, these lists are inconsistent and can be compromised . |
| Approach: | They propose a framework for robust and secure LLM watermarking using reinforcement learning. |
| Outcome: | The proposed method achieves state-of-the-art trade-off across all criteria with notable improvements in resistance to spoofing attacks without degrading other criteria. |
Similar Papers
Topic-Based Watermarks for Large Language Models (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing watermarking methods often involve trade-offs between attack robustness, generation quality and additional overhead. |
| Approach: | They propose a topic-guided watermarking scheme that partitions the vocabulary into topic-aligned token subsets. |
| Outcome: | The proposed method achieves text quality comparable to industry-leading systems and improves watermark robustness against paraphrasing and lexical perturbation attacks with minimal performance overhead. |
Watermark under Fire: A Robustness Evaluation of LLM Watermarking (2025.findings-emnlp)
Copied to clipboard
| Challenge: | Various watermarking methods have been proposed to identify LLM-generated texts . lack of unified evaluation platforms has left many critical questions unanswered . |
| Approach: | They systematize existing LLM watermarkers and watermark removal attacks and develop a unified platform that integrates them. |
| Outcome: | The proposed systematizes existing LLM watermarkers and watermark removal attacks, mapping out their design spaces. |
PostMark: A Robust Blackbox Watermark for Large Language Models (2024.emnlp-main)
Copied to clipboard
| Challenge: | Existing methods to detect LLM-generated text require access to the underlying LLM’s logits, which LLM providers are loath to share due to fears of model distillation. |
| Approach: | They develop a post-hoc watermarking procedure that inserts an input-dependent set of words into the text after the decoding process has completed. |
| Outcome: | The proposed method is more robust to paraphrasing attacks than existing methods. |
Watermarking with Low-Entropy POS-Guided Token Partitioning and Z-Score-Driven Dynamic Bias for Large Language Models (2025.findings-emnlp)
Copied to clipboard
| Challenge: | Existing watermarking methods reduce the fidelity of semantics in LLMs . |
| Approach: | They propose a low-entropy token partitioning mechanism and z-score-driven dynamic bias mechanism to enhance semantics. |
| Outcome: | The proposed framework improves semantic fidelity and robustness against bias sparsity attacks. |
Subtle Signatures, Strong Shields: Advancing Robust and Imperceptible Watermarking in Large Language Models (2024.findings-acl)
Copied to clipboard
| Challenge: | Large Language Models (LLMs) have led to an increase in AI-generated text on the Internet, presenting a crucial challenge to differentiate AI-created content from human-written text. |
| Approach: | They propose a novel approach to embed watermarks into LLMs that leverages token prior probabilities to improve detectability and maintain watermark imperceptibility. |
| Outcome: | The proposed method improves detectability and imperceptibility of watermarks by partitioning tokens into two distinct groups based on prior probabilities and employing tailored strategies for each group. |
Beyond A Fixed Seal: Adaptive Stealing Watermark in Large Language Models (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing detection methods for large language models rely on fixed strategies to steal watermarks. |
| Approach: | They propose a novel steal-based watermark algorithm that derives watermark information from watermarked texts to craft highly targeted adversarial attacks. |
| Outcome: | The proposed system significantly increases steal efficiency against target watermarks under identical conditions. |
Bypassing LLM Watermarks with Color-Aware Substitutions (2024.acl-long)
Copied to clipboard
| Challenge: | Existing methods to detect large language models (LLMs) generated text are susceptible to a large number of false positives. |
| Approach: | They propose a watermarking approach that uses color information to determine token colors and substitute green tokens with non-green ones. |
| Outcome: | The proposed method evades detection with fewer edits and removes the watermark for arbitrarily long watermarked text. |
WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models (2024.acl-long)
Copied to clipboard
| Challenge: | Recent studies have developed watermarking algorithms which restrict the generation process to leave an invisible trace for watermark detection. |
| Approach: | They propose a benchmarking procedure that compares different methods to ensure consistent watermarking strength and jointly evaluates their generation and detection performance. |
| Outcome: | The proposed benchmark compares 4 open-source watermarks on 2 LLMs under 2 watermarking strengths and observes the common struggles for current methods on maintaining the generation quality. |
Waterfall: Scalable Framework for Robust Text Watermarking and Provenance for LLMs (2024.emnlp-main)
Copied to clipboard
| Challenge: | Existing text watermarking methods are not robust enough against paraphrasing attacks . existing methods lack robustness to paraphrases and are not scalable to millions of users . |
| Approach: | They propose a training-free framework for robust and scalable text watermarking . they propose to use large language models as paraphrasers and a combination of techniques . |
| Outcome: | The proposed framework improves scalability, verifiability and computational efficiency compared to existing methods. |
Position: LLM Watermarking Should Align Stakeholders’ Incentives for Practical Adoption (2026.findings-acl)
Copied to clipboard
| Challenge: | despite advances in watermarking algorithms, real-world deployment remains limited . model watermarks can be used to protect intellectual property and promote trust in AI . |
| Approach: | They propose to revisit three classes of watermarking to examine incentives for large language models . model watermarks naturally aligns with LLM provider interests, yet faces new challenges in open-source ecosystems . |
| Outcome: | The proposed methods can be used in dataset decontamination, user-controlled provenance, and in-context watermarking. |