Papers by Zhangjie Fu
RShield: A User-level Traceable Backdoor Watermark for LLMs in Embedding-as-a-Service (2026.findings-acl)
Copied to clipboard
| Challenge: | Existing backdoor watermarking techniques are limited to zero-bit detection . RShield enables reliable user-level attribution of large language models under model extraction attacks. |
| Approach: | They propose a multi-bit backdoor watermarking technique that enables reliable user-level attribution of large language models under model extraction attacks. |
| Outcome: | RShield achieves 100% multi-bit watermark recovery and high semantic fidelity under model extraction attacks compared to existing methods. |