Watermarking techniques offer a promising way to identify machine-generated content via embedding covert information into the contents generated from language models (LMs). However, the robustness of the watermarking schemes has not been well explored. In this paper, we present De-mark, an advanced framework designed to remove n-gram-based watermarks effectively. Our method utilizes a novel querying strategy, termed random selection probing, which aids in assessing the strength of the watermark and identifying the red-green list within the n-gram watermark. Experiments on popular LMs, such as Llama3 and ChatGPT, demonstrate the efficiency and effectiveness of De-mark in watermark removal and exploitation tasks.
@article{arxiv.2410.13808,
title = {De-mark: Watermark Removal in Large Language Models},
author = {Ruibo Chen and Yihan Wu and Junfeng Guo and Heng Huang},
journal= {arXiv preprint arXiv:2410.13808},
year = {2025}
}