{"total":290,"rows":[{"id":"2303.13408","title":"Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense","created":"2023-03-23","cited_by_count":429,"area":"safety"},{"id":"2303.11156","title":"Can AI-Generated Text be Reliably Detected?","created":"2023-03-17","cited_by_count":386,"area":"safety"},{"id":"2306.17439","title":"Provable Robust Watermarking for AI-Generated Text","created":"2023-06-30","cited_by_count":299,"area":"safety"},{"id":"2312.06942","title":"AI Control: Improving Safety Despite Intentional Subversion","created":"2023-12-12","cited_by_count":229,"area":"safety"},{"id":"2306.09194","title":"Undetectable Watermarks for Language Models","created":"2023-05-25","cited_by_count":226,"area":"safety"},{"id":"2306.04634","title":"On the Reliability of Watermarks for Large Language Models","created":"2023-06-07","cited_by_count":189,"area":"safety"},{"id":"2305.15060","title":"Who Wrote this Code? Watermarking for Code Generation","created":"2023-05-24","cited_by_count":141,"area":"safety"},{"id":"2310.06356","title":"A Semantic Invariant Robust Watermark for Large Language Models","created":"2023-10-10","cited_by_count":112,"area":"safety"},{"id":"2310.10669","title":"Unbiased Watermark for Large Language Models","created":"2023-09-22","cited_by_count":111,"area":"safety"},{"id":"2405.10051","title":"MarkLLM: An Open-Source Toolkit for LLM Watermarking","created":"2024-05-16","cited_by_count":95,"area":"safety"},{"id":"2402.19361","title":"Watermark Stealing in Large Language Models","created":"2024-02-29","cited_by_count":92,"area":"safety"},{"id":"2301.12867","title":"Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicity","created":"2023-01-30","cited_by_count":89,"area":"safety"},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2308.00113","title":"Three Bricks to Consolidate Watermarks for Large Language Models","created":"2023-07-26","cited_by_count":84,"area":"safety"},{"id":"2305.01904","title":"Robust Multi-bit Natural Language Watermarking through Invariant Features","created":"2023-05-03","cited_by_count":82,"area":"safety"},{"id":"2312.04469","title":"On the Learnability of Watermarks for Language Models","created":"2023-12-07","cited_by_count":81,"area":"safety"},{"id":"2305.03807","title":"Evading Watermark based Detection of AI-Generated Content","created":"2023-05-05","cited_by_count":78,"area":"safety"},{"id":"2310.12362","title":"REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models","created":"2023-10-18","cited_by_count":78,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2305.08883","title":"Watermarking Text Generated by Black-Box Language Models","created":"2023-05-14","cited_by_count":76,"area":"safety"},{"id":"2310.18491","title":"Publicly-Detectable Watermarking for Language Models","created":"2023-10-27","cited_by_count":76,"area":"safety"},{"id":"2312.00273","title":"Mark My Words: Analyzing and Evaluating Language Model Watermarks","created":"2023-12-01","cited_by_count":71,"area":"safety"},{"id":"2401.13927","title":"Adaptive Text Watermark for Large Language Models","created":"2024-01-25","cited_by_count":67,"area":"safety"},{"id":"2307.16230","title":"An Unforgeable Publicly Verifiable Watermark for Large Language Models","created":"2023-07-30","cited_by_count":65,"area":"safety"},{"id":"2402.01822","title":"Building Guardrails for Large Language Models","created":"2024-02-02","cited_by_count":65,"area":"safety"},{"id":"2406.17975","title":"SoK: Membership Inference Attacks on LLMs are Rushing Nowhere (and How to Fix It)","created":"2024-06-25","cited_by_count":59,"area":"safety"},{"id":"2402.14904","title":"Watermarking Makes Language Models Radioactive","created":"2024-02-22","cited_by_count":58,"area":"safety"},{"id":"2308.00221","title":"Advancing Beyond Identification: Multi-bit Watermark for Large Language Models","created":"2023-08-01","cited_by_count":57,"area":"safety"},{"id":"2310.07710","title":"A Resilient and Accessible Distribution-Preserving Watermark for Large Language Models","created":"2023-10-11","cited_by_count":56,"area":"safety"},{"id":"2310.15007","title":"Did the Neurons Read your Book? Document-level Membership Inference for Large Language Models","created":"2023-10-23","cited_by_count":56,"area":"safety"},{"id":"2305.19713","title":"Red Teaming Language Model Detectors with Language Models","created":"2023-05-31","cited_by_count":55,"area":"safety"},{"id":"2307.15992","title":"Towards Codable Watermarking for Injecting Multi-bits Information to LLMs","created":"2023-07-29","cited_by_count":54,"area":"safety"},{"id":"2403.04808","title":"WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off","created":"2024-03-06","cited_by_count":54,"area":"safety"},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50,"area":"safety"},{"id":"2409.19798","title":"Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data","created":"2024-09-29","cited_by_count":50,"area":"safety"},{"id":"2401.16820","title":"Provably Robust Multi-bit Watermarking for AI-generated Text","created":"2024-01-30","cited_by_count":47,"area":"safety"},{"id":"2406.08705","title":"When LLM Meets DRL: Advancing Jailbreaking Efficiency via DRL-guided Search","created":"2024-06-13","cited_by_count":47,"area":"safety"},{"id":"2402.09370","title":"Pseudorandom Error-Correcting Codes","created":"2024-02-14","cited_by_count":44,"area":"safety"},{"id":"2402.18059","title":"Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models","created":"2024-02-28","cited_by_count":34,"area":"safety"},{"id":"2310.08920","title":"Embarrassingly Simple Text Watermarks","created":"2023-10-13","cited_by_count":29,"area":"safety"},{"id":"2305.13257","title":"Watermarking Text Data on Large Language Models for Dataset Copyright","created":"2023-05-22","cited_by_count":27,"area":"safety"},{"id":"2309.13322","title":"From Text to Source: Results in Detecting Large Language Model-Generated Content","created":"2023-09-23","cited_by_count":26,"area":"safety"},{"id":"2312.07930","title":"Towards Optimal Statistical Watermarking","created":"2023-12-13","cited_by_count":26,"area":"safety"},{"id":"2409.08087","title":"Securing Large Language Models: Addressing Bias, Misinformation, and Prompt Attacks","created":"2024-09-12","cited_by_count":26,"area":"safety"},{"id":"2312.17295","title":"Optimizing watermarks for large language models","created":"2023-12-28","cited_by_count":25,"area":"safety"},{"id":"2406.01946","title":"Bileve: Securing Text Provenance in Large Language Models Against Spoofing with Bi-level Signature","created":"2024-06-04","cited_by_count":25,"area":"safety"},{"id":"2406.12257","title":"CleanGen: Mitigating Backdoor Attacks for Generation Tasks in Large Language Models","created":"2024-06-18","cited_by_count":24,"area":"safety"},{"id":"2305.05773","title":"DeepTextMark: A Deep Learning-Driven Text Watermarking Approach for Identifying Large Language Model Generated Text","created":"2023-05-09","cited_by_count":23,"area":"safety"},{"id":"2405.20777","title":"Black-Box Detection of Language Model Watermarks","created":"2024-05-28","cited_by_count":23,"area":"safety"},{"id":"2310.11237","title":"Watermarking LLMs with Weight Quantization","created":"2023-10-17","cited_by_count":22,"area":"safety"},{"id":"2402.05864","title":"Permute-and-Flip: An optimally stable and watermarkable decoder for LLMs","created":"2024-02-08","cited_by_count":22,"area":"safety"},{"id":"2403.10553","title":"Learning to Watermark LLM-generated Text via Reinforcement Learning","created":"2024-03-13","cited_by_count":22,"area":"safety"},{"id":"2410.02890","title":"Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach","created":"2024-10-03","cited_by_count":22,"area":"safety"},{"id":"2402.14883","title":"Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning","created":"2024-02-22","cited_by_count":21,"area":"safety"},{"id":"2506.21602","title":"BiMark: Unbiased Multilayer Watermarking for Large Language Models","created":"2025-06-19","cited_by_count":21,"area":"safety"},{"id":"2503.15772","title":"Detecting LLM-Generated Peer Reviews","created":"2025-03-20","cited_by_count":20,"area":"safety"},{"id":"2310.00833","title":"Necessary and Sufficient Watermark for Large Language Models","created":"2023-10-02","cited_by_count":19,"area":"safety"},{"id":"2411.11203","title":"Debiasing Watermarks for Large Language Models via Maximal Coupling","created":"2024-11-17","cited_by_count":19,"area":"safety"},{"id":"2503.04636","title":"Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarking","created":"2025-03-06","cited_by_count":19,"area":"safety"},{"id":"2405.11109","title":"Watermarking Language Models for Many Adaptive Users","created":"2024-05-17","cited_by_count":18,"area":"safety"},{"id":"2407.17417","title":"Can Watermarking Large Language Models Prevent Copyrighted Text Generation and Hide Training Data?","created":"2024-07-24","cited_by_count":18,"area":"safety"},{"id":"2505.05190","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","created":"2025-05-08","cited_by_count":18,"area":"safety"},{"id":"2304.14613","title":"Deep Intellectual Property Protection: A Survey","created":"2023-04-28","cited_by_count":17,"area":"safety"},{"id":"2403.09914","title":"ProMark: Proactive Diffusion Watermarking for Causal Attribution","created":"2024-03-14","cited_by_count":17,"area":"safety"},{"id":"2410.02099","title":"A Watermark for Black-Box Language Models","created":"2024-10-02","cited_by_count":16,"area":"safety"},{"id":"2410.02440","title":"Optimizing Adaptive Attacks against Watermarks for Language Models","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2410.03537","title":"Ward: Provable RAG Dataset Inference via LLM Watermarks","created":"2024-10-04","cited_by_count":16,"area":"safety"},{"id":"2506.16349","title":"Watermarking Autoregressive Image Generation","created":"2025-06-19","cited_by_count":16,"area":"safety"},{"id":"2509.21057","title":"PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints","created":"2025-09-25","cited_by_count":16,"area":"safety"},{"id":"2407.04411","title":"Waterfall: Framework for Robust and Scalable Text Watermarking and Provenance for LLMs","created":"2024-07-05","cited_by_count":15,"area":"safety"},{"id":"2410.13805","title":"A Watermark for Order-Agnostic Language Models","created":"2024-10-17","cited_by_count":14,"area":"safety"},{"id":"2410.13808","title":"De-mark: Watermark Removal in Large Language Models","created":"2024-10-17","cited_by_count":14,"area":"safety"},{"id":"2411.11478","title":"SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI","created":"2024-11-18","cited_by_count":14,"area":"safety"},{"id":"2410.03168","title":"Can Watermarked LLMs be Identified by Users via Crafted Prompts?","created":"2024-10-04","cited_by_count":13,"area":"safety"},{"id":"2410.18861","title":"Provably Robust Watermarks for Open-Source Language Models","created":"2024-10-24","cited_by_count":13,"area":"safety"},{"id":"2502.10525","title":"Towards Watermarking of Open-Source LLMs","created":"2025-02-14","cited_by_count":13,"area":"safety"},{"id":"2410.06467","title":"WAPITI: A Watermark for Finetuned Open-Source LLMs","created":"2024-10-09","cited_by_count":12,"area":"safety"},{"id":"2506.05502","title":"StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models","created":"2025-06-05","cited_by_count":12,"area":"safety"},{"id":"2507.07341","title":"On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for AI Alignment","created":"2025-07-09","cited_by_count":12,"area":"safety"},{"id":"2312.02382","title":"New Evaluation Metrics Capture Quality Degradation due to LLM Watermarking","created":"2023-12-04","cited_by_count":11,"area":"safety"},{"id":"2402.16578","title":"Multi-Bit Distortion-Free Watermarking for Large Language Models","created":"2024-02-26","cited_by_count":11,"area":"safety"},{"id":"2504.17480","title":"Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation","created":"2025-04-24","cited_by_count":11,"area":"safety"},{"id":"2510.19796","title":"Blackbox Model Provenance via Palimpsestic Membership Inference","created":"2025-10-22","cited_by_count":11,"area":"safety"},{"id":"2311.09535","title":"Turning Your Strength into Watermark: Watermarking Large Language Model via Knowledge Injection","created":"2023-11-16","cited_by_count":10,"area":"safety"},{"id":"2406.02603","title":"Distortion-free Watermarks are not Truly Distortion-free under Watermark Key Collisions","created":"2024-06-02","cited_by_count":10,"area":"safety"},{"id":"2406.10281","title":"Watermarking Language Models with Error Correcting Codes","created":"2024-06-12","cited_by_count":10,"area":"safety"},{"id":"2412.03123","title":"Robust Multi-bit Text Watermark with LLM-based Paraphrasers","created":"2024-12-04","cited_by_count":10,"area":"safety"},{"id":"2504.06575","title":"Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learning","created":"2025-04-09","cited_by_count":10,"area":"safety"},{"id":"2505.16934","title":"In-Context Watermarks for Large Language Models","created":"2025-05-22","cited_by_count":10,"area":"safety"},{"id":"2402.13926","title":"Large Language Models are Vulnerable to Bait-and-Switch Attacks for Generating Harmful Content","created":"2024-02-21","cited_by_count":9,"area":"safety"},{"id":"2505.08878","title":"Optimized Couplings for Watermarking Large Language Models","created":"2025-05-13","cited_by_count":9,"area":"safety"},{"id":"2505.16723","title":"LLM Fingerprinting via Semantically Conditioned Watermarks","created":"2025-05-22","cited_by_count":9,"area":"safety"},{"id":"2505.23814","title":"Watermarking Without Standards Is Not AI Governance","created":"2025-05-27","cited_by_count":9,"area":"safety"},{"id":"2507.06274","title":"Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks","created":"2025-07-08","cited_by_count":9,"area":"safety"},{"id":"2509.09112","title":"Character-Level Perturbations Disrupt LLM Watermarks","created":"2025-09-11","cited_by_count":9,"area":"safety"},{"id":"2403.17983","title":"Is The Watermarking Of LLM-Generated Code Robust?","created":"2024-03-24","cited_by_count":8,"area":"safety"},{"id":"2404.02138","title":"Topic-Based Watermarks for Large Language Models","created":"2024-04-02","cited_by_count":8,"area":"safety"},{"id":"2404.04254","title":"Watermark-based Attribution of AI-Generated Content","created":"2024-04-05","cited_by_count":8,"area":"safety"},{"id":"2411.05091","title":"Watermarking Language Models through Language Models","created":"2024-11-07","cited_by_count":8,"area":"safety"}],"next_cursor":"100"}