English
Related papers

Related papers: $B^4$: A Black-Box Scrubbing Attack on LLM Waterma…

200 papers

Watermarking techniques are vital for protecting intellectual property and preventing fraudulent use of media. Most previous watermarking schemes designed for diffusion models embed a secret key in the initial noise. The resulting pattern…

Computer Vision and Pattern Recognition · Computer Science 2025-04-30 Anubhav Jain , Yuya Kobayashi , Naoki Murata , Yuhta Takida , Takashi Shibuya , Yuki Mitsufuji , Niv Cohen , Nasir Memon , Julian Togelius

Large language model (LLM) watermarking has shown promise in detecting AI-generated content and mitigating misuse, with prior work claiming robustness against paraphrasing and text editing. In this paper, we argue that existing evaluations…

Cryptography and Security · Computer Science 2026-05-15 Hanbo Huang , Yiran Zhang , Hao Zheng , Xuan Gong , Yihan Li , Lin Liu , Zhuotao Liu , Shiyu Liang

Watermarking combines an imperceptible change to an input image that will trigger a detector, to assert provenance and protect intellectual property. The literature has shown great interest in attacks on watermarking schemes: attackers are…

Cryptography and Security · Computer Science 2026-05-19 Maria Bulychev , Neil G. Marchant , Benjamin I. P. Rubinstein

While watermarking serves as a critical mechanism for LLM provenance, existing secret-key schemes tightly couple detection with injection, requiring access to keys or provider-side scheme-specific detectors for verification. This dependency…

Cryptography and Security · Computer Science 2026-04-14 Zhuoshang Wang , Yubing Ren , Yanan Cao , Fang Fang , Xiaoxue Li , Li Guo

LLM watermarking has attracted attention as a promising way to detect AI-generated content, with some works suggesting that current schemes may already be fit for deployment. In this work we dispute this claim, identifying watermark…

Machine Learning · Computer Science 2024-06-25 Nikola Jovanović , Robin Staab , Martin Vechev

As Generative AI continues to become more accessible, the case for robust detection of generated images in order to combat misinformation is stronger than ever. Invisible watermarking methods act as identifiers of generated content,…

Computer Vision and Pattern Recognition · Computer Science 2024-12-18 Dongjun Hwang , Sungwon Woo , Tom Gao , Raymond Luo , Sunghwan Baek

Recent advances in Large Language Models (LLMs) have raised urgent concerns about LLM-generated text authenticity, prompting regulatory demands for reliable identification mechanisms. Although watermarking offers a promising solution,…

Computation and Language · Computer Science 2025-08-26 Xiaoyan Feng , He Zhang , Yanjun Zhang , Leo Yu Zhang , Shirui Pan

Watermarking is a tool for actively identifying and attributing the images generated by latent diffusion models. Existing methods face the dilemma of image quality and watermark robustness. Watermarks with superior image quality usually…

Computer Vision and Pattern Recognition · Computer Science 2024-09-27 Zheling Meng , Bo Peng , Jing Dong

Code Large Language Models (Code LLMs) have revolutionized software development but raised critical concerns regarding code provenance, copyright protection, and security. Existing code watermarking approaches suffer from two fundamental…

Cryptography and Security · Computer Science 2026-04-20 Yuqing Nie , Chong Wang , Guosheng Xu , Guoai Xu , Chenyu Wang , Haoyu Wang , Kailong Wang

Machine learning is increasingly used in security-critical applications, such as autonomous driving, face recognition and malware detection. Most learning methods, however, have not been designed with security in mind and thus are…

Cryptography and Security · Computer Science 2017-03-17 Erwin Quiring , Daniel Arp , Konrad Rieck

This paper addresses the design of an active cyberattack detection architecture based on multiplicative watermarking, allowing for detection of covert attacks. We propose an optimal design problem, relying on the so-called output-to-output…

Cryptography and Security · Computer Science 2022-03-30 Alexander J. Gallo , Sribalaji C. Anand , André M. H. Teixeira , Riccardo M. G. Ferrari

Large language models (LLMs) have demonstrated outstanding performance, making them valuable digital assets with significant commercial potential. Unfortunately, the LLM and its API are susceptible to intellectual property theft.…

Cryptography and Security · Computer Science 2024-07-25 Shuai Li , Kejiang Chen , Kunsheng Tang , Jie Zhang , Weiming Zhang , Nenghai Yu , Kai Zeng

LLM-based agents are increasingly deployed to autonomously solve complex tasks, raising urgent needs for IP protection and regulatory provenance. While content watermarking effectively attributes LLM-generated outputs, it fails to directly…

Cryptography and Security · Computer Science 2026-04-27 Kaibo Huang , Jin Tan , Yukun Wei , Wanling Li , Zipei Zhang , Hui Tian , Zhongliang Yang , Linna Zhou

As large language models (LLMs) grow more powerful, concerns over copyright infringement of LLM-generated texts have intensified. LLM watermarking has been proposed to trace unauthorized redistribution or resale of generated content by…

Cryptography and Security · Computer Science 2025-08-05 Qihao Lin , Chen Tang , Lan zhang , Junyang zhang , Xiangyang Li

LLM watermarks stand out as a promising way to attribute ownership of LLM-generated text. One threat to watermark credibility comes from spoofing attacks, where an unauthorized third party forges the watermark, enabling it to falsely…

Cryptography and Security · Computer Science 2025-05-23 Thibaud Gloaguen , Nikola Jovanović , Robin Staab , Martin Vechev

Backdoor attack aims to deceive a victim model when facing backdoor instances while maintaining its performance on benign data. Current methods use manual patterns or special perturbations as triggers, while they often overlook the…

Computer Vision and Pattern Recognition · Computer Science 2024-01-05 Ruofei Wang , Renjie Wan , Zongyu Guo , Qing Guo , Rui Huang

The rapid proliferation of realistic deepfakes has raised urgent concerns over their misuse, motivating the use of defensive watermarks in synthetic images for reliable detection and provenance tracking. However, this defense paradigm…

Cryptography and Security · Computer Science 2026-01-26 Wei Song , Zhenchang Xing , Liming Zhu , Yulei Sui , Jingling Xue

Untrustworthy users can misuse image generators to synthesize high-quality deepfakes and engage in unethical activities. Watermarking deters misuse by marking generated content with a hidden message, enabling its detection using a secret…

Cryptography and Security · Computer Science 2024-01-23 Nils Lukas , Abdulrahman Diaa , Lucas Fenaux , Florian Kerschbaum

Creating a state-of-the-art deep-learning system requires vast amounts of data, expertise, and hardware, yet research into embedding copyright protection for neural networks has been limited. One of the main methods for achieving such…

Cryptography and Security · Computer Science 2020-04-27 William Aiken , Hyoungshick Kim , Simon Woo

In this paper, we investigate the recent state-of-the-art schemes for watermarking large language models (LLMs) outputs. These techniques are claimed to be robust, scalable and production-grade, aimed at promoting responsible usage of LLMs.…

Cryptography and Security · Computer Science 2026-05-11 Jonathan Hong Jin Ng , Anh Tu Ngo , Anupam Chattopadhyay