English
Related papers

Related papers: Watermark Stealing in Large Language Models

200 papers

Phishing websites pose a major cybersecurity threat, exploiting unsuspecting users and causing significant financial and organisational harm. Traditional machine learning approaches for phishing detection often require extensive feature…

Cryptography and Security · Computer Science 2025-11-20 Georg Goldenits , Philip Koenig , Sebastian Raubitzek , Andreas Ekelhart

The strong general capabilities of Large Language Models (LLMs) bring potential ethical risks if they are unrestrictedly accessible to malicious users. Token-level watermarking inserts watermarks in the generated texts by altering the token…

Computation and Language · Computer Science 2023-11-17 Yuhang Li , Yihan Wang , Zhouxing Shi , Cho-Jui Hsieh

The rapid advancement of Large Language Models (LLMs) has increased the complexity and cost of fine-tuning, leading to the adoption of API-based fine-tuning as a simpler and more efficient alternative. While this method is popular among…

Computation and Language · Computer Science 2025-03-17 Hongyu Su , Yifeng Gao , Yifan Ding , Xingjun Ma

Large language model (LLM) watermarking has shown promise in detecting AI-generated content and mitigating misuse, with prior work claiming robustness against paraphrasing and text editing. In this paper, we argue that existing evaluations…

Cryptography and Security · Computer Science 2026-05-15 Hanbo Huang , Yiran Zhang , Hao Zheng , Xuan Gong , Yihan Li , Lin Liu , Zhuotao Liu , Shiyu Liang

Large language model (LLM) watermarks enable authentication of text provenance, curb misuse of machine-generated text, and promote trust in AI systems. Current watermarks operate by changing the next-token predictions output by an LLM. The…

Cryptography and Security · Computer Science 2025-12-03 Dor Tsur , Carol Xuan Long , Claudio Mayrink Verdun , Hsiang Hsu , Chen-Fu Chen , Haim Permuter , Sajani Vithana , Flavio P. Calmon

Watermarking generative-AI systems, such as LLMs, has gained considerable interest, driven by their enhanced capabilities across a wide range of tasks. Although current approaches have demonstrated that small, context-dependent shifts in…

Computation and Language · Computer Science 2024-03-29 Piotr Molenda , Adian Liusie , Mark J. F. Gales

Recent advances in Large Language Models (LLMs) have raised urgent concerns about LLM-generated text authenticity, prompting regulatory demands for reliable identification mechanisms. Although watermarking offers a promising solution,…

Computation and Language · Computer Science 2025-08-26 Xiaoyan Feng , He Zhang , Yanjun Zhang , Leo Yu Zhang , Shirui Pan

Despite progress in watermarking algorithms for large language models (LLMs), real-world deployment remains limited. We argue that this gap stems from misaligned incentives among LLM providers, platforms, and end users, which manifest as…

Cryptography and Security · Computer Science 2026-04-22 Yepeng Liu , Xuandong Zhao , Dawn Song , Gregory W. Wornell , Yuheng Bu

A recent and exciting thread of work focuses on developing methods for watermarking the output of large language models (LLMs). We focus on provably undetectable watermarking-that is, schemes that do not alter the output distribution of the…

Cryptography and Security · Computer Science 2026-04-15 Noam Mazor , Andrew Morgan , Rafael Pass

LLM watermarking, which embeds imperceptible yet algorithmically detectable signals in model outputs to identify LLM-generated text, has become crucial in mitigating the potential misuse of large language models. However, the abundance of…

Cryptography and Security · Computer Science 2024-10-29 Leyi Pan , Aiwei Liu , Zhiwei He , Zitian Gao , Xuandong Zhao , Yijian Lu , Binglin Zhou , Shuliang Liu , Xuming Hu , Lijie Wen , Irwin King , Philip S. Yu

Cryptographic watermarking is a leading defense for attributing text generated by large language models (LLMs). Existing schemes, including KGW, Unigram, and DipMark, derive their security guarantees from the assumption that the underlying…

Cryptography and Security · Computer Science 2026-05-28 Ziyang You , Huilong He , Xiaoke Yang , Xuxing Lu

To support various applications, a prevalent and efficient approach for business owners is leveraging their valuable datasets to fine-tune a pre-trained LLM through the API provided by LLM owners or cloud servers. However, this process…

Cryptography and Security · Computer Science 2024-06-06 Shen Li , Liuyi Yao , Jinyang Gao , Lan Zhang , Yaliang Li

To foster trustworthy Artificial Intelligence (AI) within the European Union, the AI Act requires providers to mark and detect the outputs of their general-purpose models. The Article 50 and Recital 133 call for marking methods that are…

Cryptography and Security · Computer Science 2025-11-06 Thomas Souverain

Training machine learning (ML) models is expensive in terms of computational power, amounts of labeled data and human expertise. Thus, ML models constitute intellectual property (IP) and business value for their owners. Embedding digital…

Cryptography and Security · Computer Science 2021-07-19 Sebastian Szyller , Buse Gul Atli , Samuel Marchal , N. Asokan

The rapid spread of text generated by large language models (LLMs) makes it increasingly difficult to distinguish authentic human writing from machine output. Watermarking offers a promising solution: model owners can embed an imperceptible…

Cryptography and Security · Computer Science 2025-11-04 Shingo Kodama , Haya Diwan , Lucas Rosenblatt , R. Teal Witter , Niv Cohen

With the rapid growth of Large Language Models (LLMs), safeguarding textual content against unauthorized use is crucial. Watermarking offers a vital solution, protecting both - LLM-generated and plain text sources. This paper presents a…

Computation and Language · Computer Science 2025-07-08 Harsh Nishant Lalai , Aashish Anantha Ramakrishnan , Raj Sanjay Shah , Dongwon Lee

Watermarking is an effective way to trace model-generated content. Current watermark methods cannot resist forgery attacks, such as a deceptive claim that the model-generated content is a response to a fabricated prompt. None of them can be…

Cryptography and Security · Computer Science 2024-12-30 Minhao Bai

Recently, text watermarking algorithms for large language models (LLMs) have been proposed to mitigate the potential harms of text generated by LLMs, including fake news and copyright issues. However, current watermark detection algorithms…

Computation and Language · Computer Science 2024-05-28 Aiwei Liu , Leyi Pan , Xuming Hu , Shu'ang Li , Lijie Wen , Irwin King , Philip S. Yu

The proliferation of autoregressive (AR) image generators demands reliable detection and attribution of their outputs to mitigate misinformation, and to filter synthetic images from training data to prevent model collapse. To address this…

Computer Vision and Pattern Recognition · Computer Science 2026-04-14 Andreas Müller , Denis Lukovnikov , Shingo Kodama , Minh Pham , Anubhav Jain , Jonathan Petit , Niv Cohen , Asja Fischer

We present SWaRL, a robust and fidelity-preserving watermarking framework designed to protect the intellectual property of code LLMs by embedding unique and verifiable signatures in the generated program. Existing watermarking approaches…

Cryptography and Security · Computer Science 2026-05-11 Neusha Javidnia , Ruisi Zhang , Ashish Kundu , Farinaz Koushanfar