DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing watermarking algorithms focus on defending against paraphrase and piggyback spoofing attacks, which can inject harmful content, compromise reliability, and undermine trust in attribution. |
| Approach: | They propose an algorithm capable of defending against paraphrase and spoofing attacks. |
| Outcome: | Experiments on large language models and language models show that DualGuard is the first watermarking algorithm capable of defending against both paraphrase and spoofing attacks. |
Similar Papers
GuardEmb: Dynamic Watermark for Safeguarding Large Language Model Embedding Service Against Model Stealing Attack (2024.findings-emnlp)
Copied to clipboard
| Challenge: | Recent studies reveal the risk of the model stealing attack, posing a financial threat to EaaS providers. |
| Approach: | They propose a dynamic embedding watermarking method that detects watermarks in embedded text . this method is a cross-platform approach that trains a verifier to detect watermark . |
| Outcome: | The proposed method enables an attacker to replicate the proposed method for profit without compromising embedding functionality. |
A Robust Semantics-based Watermark for Large Language Model against Paraphrasing (2024.findings-naacl)
Copied to clipboard
| Challenge: | Existing methods to detect LLM-generated content use simple hashes of precedent tokens to partition vocabulary. |
| Approach: | They propose a semantics-based watermark framework to enhance the robustness against paraphrase. |
| Outcome: | The proposed framework is robust under different paraphrases and the semantic meaning of the sentences will be likely preserved under paraphrase. |
Duwak: Dual Watermarks in Large Language Models (2024.findings-acl)
Copied to clipboard
| Challenge: | Existing watermark techniques are effective in embedding single human-imperceptible and machine-detectable patterns without significantly affecting generated text quality and semantics. |
| Approach: | They propose to embed dual secret patterns in token probability distribution and sampling schemes to enhance the efficiency of watermarking. |
| Outcome: | The proposed method achieves highest watermark quality at the lowest required token count for detection, up to 70% less than existing techniques, especially under post paraphrasing attacks. |
From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models (2025.acl-long)
Copied to clipboard
| Challenge: | Existing watermarking methods face limitations that hinder their effectiveness in diverse and adversarial scenarios. |
| Approach: | They propose a symbiotic watermarking framework with three strategies: serial, parallel, and hybrid. |
| Outcome: | The proposed framework outperforms baselines and achieves state-of-the-art (SOTA) performance. |
Watermark under Fire: A Robustness Evaluation of LLM Watermarking (2025.findings-emnlp)
Copied to clipboard
| Challenge: | Various watermarking methods have been proposed to identify LLM-generated texts . lack of unified evaluation platforms has left many critical questions unanswered . |
| Approach: | They systematize existing LLM watermarkers and watermark removal attacks and develop a unified platform that integrates them. |
| Outcome: | The proposed systematizes existing LLM watermarkers and watermark removal attacks, mapping out their design spaces. |
SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models (2025.emnlp-main)
Copied to clipboard
| Challenge: | Experimental results demonstrate that SimMark surpasses previous sentence-level watermarking techniques in robustness, sampling efficiency, and applicability across diverse domains. |
| Approach: | They propose a sentence-level watermarking algorithm that makes LLM outputs traceable without requiring access to model internals. |
| Outcome: | The proposed algorithm surpasses previous sentence-level watermarking techniques in robustness, sampling efficiency, and applicability across diverse domains while maintaining the text quality and fluency. |
Beyond A Fixed Seal: Adaptive Stealing Watermark in Large Language Models (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing detection methods for large language models rely on fixed strategies to steal watermarks. |
| Approach: | They propose a novel steal-based watermark algorithm that derives watermark information from watermarked texts to craft highly targeted adversarial attacks. |
| Outcome: | The proposed system significantly increases steal efficiency against target watermarks under identical conditions. |
Revisiting the Robustness of Watermarking to Paraphrasing Attacks (2024.emnlp-main)
Copied to clipboard
| Challenge: | Recent watermarking techniques slightly modify the output probabilities of LMs to embed a signal in the generated output that can later be detected. |
| Approach: | They propose to use a model to produce a watermarking signal that is invariant to semantically-similar inputs to undo the effects of watermarks. |
| Outcome: | The proposed method undoes the effects of watermarking and dramatically improves the effectiveness of paraphrasing attacks with limited access to model generations. |
A Reinforcement Learning Framework for Robust and Secure LLM Watermarking (2026.eacl-long)
Copied to clipboard
| Challenge: | Existing watermarking algorithms rely on heuristic green/red token lists . however, these lists are inconsistent and can be compromised . |
| Approach: | They propose a framework for robust and secure LLM watermarking using reinforcement learning. |
| Outcome: | The proposed method achieves state-of-the-art trade-off across all criteria with notable improvements in resistance to spoofing attacks without degrading other criteria. |
Waterfall: Scalable Framework for Robust Text Watermarking and Provenance for LLMs (2024.emnlp-main)
Copied to clipboard
| Challenge: | Existing text watermarking methods are not robust enough against paraphrasing attacks . existing methods lack robustness to paraphrases and are not scalable to millions of users . |
| Approach: | They propose a training-free framework for robust and scalable text watermarking . they propose to use large language models as paraphrasers and a combination of techniques . |
| Outcome: | The proposed framework improves scalability, verifiability and computational efficiency compared to existing methods. |