{"total":145,"rows":[{"id":"2306.17439","title":"Provable Robust Watermarking for AI-Generated Text","created":"2023-06-30","cited_by_count":299,"area":"safety"},{"id":"2305.18462","title":"Membership Inference Attacks against Language Models via Neighbourhood Comparison","created":"2023-05-29","cited_by_count":258,"area":"safety"},{"id":"2306.09194","title":"Undetectable Watermarks for Language Models","created":"2023-05-25","cited_by_count":226,"area":"safety"},{"id":"2306.04634","title":"On the Reliability of Watermarks for Large Language Models","created":"2023-06-07","cited_by_count":189,"area":"safety"},{"id":"2305.15060","title":"Who Wrote this Code? Watermarking for Code Generation","created":"2023-05-24","cited_by_count":141,"area":"safety"},{"id":"2310.06356","title":"A Semantic Invariant Robust Watermark for Large Language Models","created":"2023-10-10","cited_by_count":112,"area":"safety"},{"id":"2312.07913","title":"A Survey of Text Watermarking in the Era of Large Language Models","created":"2023-12-13","cited_by_count":112,"area":"safety"},{"id":"2310.10669","title":"Unbiased Watermark for Large Language Models","created":"2023-09-22","cited_by_count":111,"area":"safety"},{"id":"2405.10051","title":"MarkLLM: An Open-Source Toolkit for LLM Watermarking","created":"2024-05-16","cited_by_count":95,"area":"safety"},{"id":"2402.19361","title":"Watermark Stealing in Large Language Models","created":"2024-02-29","cited_by_count":92,"area":"safety"},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2311.08721","title":"A Robust Semantics-based Watermark for Large Language Model against Paraphrasing","created":"2023-11-15","cited_by_count":82,"area":"safety"},{"id":"2312.04469","title":"On the Learnability of Watermarks for Language Models","created":"2023-12-07","cited_by_count":81,"area":"safety"},{"id":"2305.03807","title":"Evading Watermark based Detection of AI-Generated Content","created":"2023-05-05","cited_by_count":78,"area":"safety"},{"id":"2310.18491","title":"Publicly-Detectable Watermarking for Language Models","created":"2023-10-27","cited_by_count":76,"area":"safety"},{"id":"2312.00273","title":"Mark My Words: Analyzing and Evaluating Language Model Watermarks","created":"2023-12-01","cited_by_count":71,"area":"safety"},{"id":"2401.13927","title":"Adaptive Text Watermark for Large Language Models","created":"2024-01-25","cited_by_count":67,"area":"safety"},{"id":"2308.00221","title":"Advancing Beyond Identification: Multi-bit Watermark for Large Language Models","created":"2023-08-01","cited_by_count":57,"area":"safety"},{"id":"2310.07710","title":"A Resilient and Accessible Distribution-Preserving Watermark for Large Language Models","created":"2023-10-11","cited_by_count":56,"area":"safety"},{"id":"2305.19713","title":"Red Teaming Language Model Detectors with Language Models","created":"2023-05-31","cited_by_count":55,"area":"safety"},{"id":"2307.15992","title":"Towards Codable Watermarking for Injecting Multi-bits Information to LLMs","created":"2023-07-29","cited_by_count":54,"area":"safety"},{"id":"2402.11399","title":"k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text","created":"2024-02-17","cited_by_count":51,"area":"safety"},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50,"area":"safety"},{"id":"2401.16820","title":"Provably Robust Multi-bit Watermarking for AI-generated Text","created":"2024-01-30","cited_by_count":47,"area":"safety"},{"id":"2402.12948","title":"GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trick","created":"2024-02-20","cited_by_count":37,"area":"safety"},{"id":"2402.18059","title":"Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models","created":"2024-02-28","cited_by_count":34,"area":"safety"},{"id":"2311.07138","title":"WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models","created":"2023-11-13","cited_by_count":32,"area":"safety"},{"id":"2310.08920","title":"Embarrassingly Simple Text Watermarks","created":"2023-10-13","cited_by_count":29,"area":"safety"},{"id":"2406.14517","title":"PostMark: A Robust Blackbox Watermark for Large Language Models","created":"2024-06-20","cited_by_count":29,"area":"safety"},{"id":"2403.14719","title":"Bypassing LLM Watermarks with Color-Aware Substitutions","created":"2024-03-19","cited_by_count":28,"area":"safety"},{"id":"2409.08087","title":"Securing Large Language Models: Addressing Bias, Misinformation, and Prompt Attacks","created":"2024-09-12","cited_by_count":26,"area":"safety"},{"id":"2312.17295","title":"Optimizing watermarks for large language models","created":"2023-12-28","cited_by_count":25,"area":"safety"},{"id":"2406.01946","title":"Bileve: Securing Text Provenance in Large Language Models Against Spoofing with Bi-level Signature","created":"2024-06-04","cited_by_count":25,"area":"safety"},{"id":"2505.11541","title":"MorphMark: Flexible Adaptive Watermarking for Large Language Models","created":"2025-05-14","cited_by_count":24,"area":"safety"},{"id":"2402.05864","title":"Permute-and-Flip: An optimally stable and watermarkable decoder for LLMs","created":"2024-02-08","cited_by_count":22,"area":"safety"},{"id":"2403.10553","title":"Learning to Watermark LLM-generated Text via Reinforcement Learning","created":"2024-03-13","cited_by_count":22,"area":"safety"},{"id":"2506.21602","title":"BiMark: Unbiased Multilayer Watermarking for Large Language Models","created":"2025-06-19","cited_by_count":21,"area":"safety"},{"id":"2308.02122","title":"ParaFuzz: An Interpretability-Driven Technique for Detecting Poisoned Samples in NLP","created":"2023-08-04","cited_by_count":19,"area":"safety"},{"id":"2310.00833","title":"Necessary and Sufficient Watermark for Large Language Models","created":"2023-10-02","cited_by_count":19,"area":"safety"},{"id":"2502.11598","title":"Can LLM Watermarks Robustly Prevent Unauthorized Knowledge Distillation?","created":"2025-02-17","cited_by_count":19,"area":"safety"},{"id":"2407.17417","title":"Can Watermarking Large Language Models Prevent Copyrighted Text Generation and Hide Training Data?","created":"2024-07-24","cited_by_count":18,"area":"safety"},{"id":"2505.05190","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","created":"2025-05-08","cited_by_count":18,"area":"safety"},{"id":"2502.11268","title":"Improved Unbiased Watermark for Large Language Models","created":"2025-02-16","cited_by_count":17,"area":"safety"},{"id":"2410.02099","title":"A Watermark for Black-Box Language Models","created":"2024-10-02","cited_by_count":16,"area":"safety"},{"id":"2410.02440","title":"Optimizing Adaptive Attacks against Watermarks for Language Models","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2506.16349","title":"Watermarking Autoregressive Image Generation","created":"2025-06-19","cited_by_count":16,"area":"safety"},{"id":"2502.02787","title":"SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models","created":"2025-02-05","cited_by_count":15,"area":"safety"},{"id":"2405.19677","title":"Large Language Model Watermark Stealing With Mixed Integer Programming","created":"2024-05-30","cited_by_count":14,"area":"safety"},{"id":"2406.09325","title":"REVS: Unlearning Sensitive Information in Language Models via Rank Editing in the Vocabulary Space","created":"2024-06-13","cited_by_count":13,"area":"safety"},{"id":"2410.11272","title":"Cognitive Overload Attack:Prompt Injection for Long Context","created":"2024-10-15","cited_by_count":13,"area":"safety"},{"id":"2410.06467","title":"WAPITI: A Watermark for Finetuned Open-Source LLMs","created":"2024-10-09","cited_by_count":12,"area":"safety"},{"id":"2506.05502","title":"StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models","created":"2025-06-05","cited_by_count":12,"area":"safety"},{"id":"2504.17480","title":"Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation","created":"2025-04-24","cited_by_count":11,"area":"safety"},{"id":"2406.02603","title":"Distortion-free Watermarks are not Truly Distortion-free under Watermark Key Collisions","created":"2024-06-02","cited_by_count":10,"area":"safety"},{"id":"2406.10281","title":"Watermarking Language Models with Error Correcting Codes","created":"2024-06-12","cited_by_count":10,"area":"safety"},{"id":"2504.06575","title":"Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learning","created":"2025-04-09","cited_by_count":10,"area":"safety"},{"id":"2411.13425","title":"Watermark under Fire: A Robustness Evaluation of LLM Watermarking","created":"2024-11-20","cited_by_count":9,"area":"safety"},{"id":"2507.06274","title":"Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks","created":"2025-07-08","cited_by_count":9,"area":"safety"},{"id":"2509.09112","title":"Character-Level Perturbations Disrupt LLM Watermarks","created":"2025-09-11","cited_by_count":9,"area":"safety"},{"id":"2404.02138","title":"Topic-Based Watermarks for Large Language Models","created":"2024-04-02","cited_by_count":8,"area":"safety"},{"id":"2411.01222","title":"$B^4$: A Black-Box Scrubbing Attack on LLM Watermarks","created":"2024-11-02","cited_by_count":7,"area":"safety"},{"id":"2502.15082","title":"UPCORE: Utility-Preserving Coreset Selection for Balanced Unlearning","created":"2025-02-20","cited_by_count":7,"area":"safety"},{"id":"2508.08211","title":"SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders","created":"2025-08-11","cited_by_count":7,"area":"safety"},{"id":"2605.10977","title":"PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attacks","created":"2026-05-09","cited_by_count":7,"area":"safety"},{"id":"2410.02693","title":"Discovering Spoofing Attempts on Language Model Watermarks","created":"2024-10-03","cited_by_count":6,"area":"safety"},{"id":"2411.03806","title":"Understanding the Effects of Human-written Paraphrases in LLM-generated Text Detection","created":"2024-11-06","cited_by_count":6,"area":"safety"},{"id":"2505.14112","title":"Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2509.24043","title":"An Ensemble Framework for Unbiased Language Model Watermarking","created":"2025-09-28","cited_by_count":6,"area":"safety"},{"id":"2407.11100","title":"Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond","created":"2024-07-15","cited_by_count":5,"area":"safety"},{"id":"2505.09924","title":"From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models","created":"2025-05-15","cited_by_count":5,"area":"safety"},{"id":"2510.21053","title":"A Reinforcement Learning Framework for Robust and Secure LLM Watermarking","created":"2025-10-23","cited_by_count":5,"area":"safety"},{"id":"2407.04794","title":"On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks","created":"2024-07-05","cited_by_count":4,"area":"safety"},{"id":"2412.03107","title":"CredID: Credible Multi-Bit Watermark for Large Language Models Identification","created":"2024-12-04","cited_by_count":4,"area":"safety"},{"id":"2502.16699","title":"Evaluating the Robustness and Accuracy of Text Watermarking Under Real-World Cross-Lingual Manipulations","created":"2025-02-23","cited_by_count":4,"area":"safety"},{"id":"2504.06446","title":"Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Models","created":"2025-04-08","cited_by_count":4,"area":"safety"},{"id":"2505.02344","title":"An End-to-End Model for Logits-Based Large Language Models Watermarking","created":"2025-05-05","cited_by_count":4,"area":"safety"},{"id":"2507.07871","title":"Mitigating Watermark Forgery in Generative Models via Randomized Key Selection","created":"2025-07-10","cited_by_count":4,"area":"safety"},{"id":"2508.03829","title":"Majority Bit-Aware Watermarking For Large Language Models","created":"2025-08-05","cited_by_count":4,"area":"safety"},{"id":"2508.20228","title":"Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID","created":"2025-08-27","cited_by_count":4,"area":"safety"},{"id":"2510.02902","title":"DMark: Order-Agnostic Watermarking for Diffusion Large Language Models","created":"2025-10-03","cited_by_count":4,"area":"safety"},{"id":"2510.23891","title":"PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs","created":"2025-10-27","cited_by_count":4,"area":"safety"},{"id":"2602.14030","title":"MC$^2$Mark: Distortion-Free Multi-Bit Watermarking for Long Messages","created":"2026-02-15","cited_by_count":4,"area":"safety"},{"id":"2406.11106","title":"From Intentions to Techniques: A Comprehensive Taxonomy and Challenges in Text Watermarking for Large Language Models","created":"2024-06-17","cited_by_count":3,"area":"safety"},{"id":"2409.19708","title":"A Certified Robust Watermark For Large Language Models","created":"2024-09-29","cited_by_count":3,"area":"safety"},{"id":"2510.21946","title":"$\\delta$-STEAL: LLM Stealing Attack with Local Differential Privacy","created":"2025-10-24","cited_by_count":3,"area":"safety"},{"id":"2604.05242","title":"XMark: Reliable Multi-Bit Watermarking for LLM-Generated Texts","created":"2026-04-06","cited_by_count":3,"area":"safety"},{"id":"2604.13786","title":"QuantileMark: A Message-Symmetric Multi-bit Watermark for LLMs","created":"2026-04-15","cited_by_count":3,"area":"safety"},{"id":"2506.05594","title":"SoK: Are Watermarks in LLMs Ready for Deployment?","created":"2025-06-05","cited_by_count":2,"area":"safety"},{"id":"2509.10577","title":"The Coding Limits of Robust Watermarking for Generative Models","created":"2025-09-11","cited_by_count":2,"area":"safety"},{"id":"2509.20924","title":"RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks","created":"2025-09-25","cited_by_count":2,"area":"safety"},{"id":"2510.13829","title":"A Linguistics-Aware LLM Watermarking via Syntactic Predictability","created":"2025-10-10","cited_by_count":2,"area":"safety"},{"id":"2510.26274","title":"PVMark: Enabling Public Verifiability for LLM Watermarking Schemes","created":"2025-10-30","cited_by_count":2,"area":"safety"},{"id":"2602.11793","title":"More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensembles","created":"2026-02-12","cited_by_count":2,"area":"safety"},{"id":"2604.11546","title":"RLSpoofer: A Lightweight Evaluator for LLM Watermark Spoofing Resilience","created":"2026-04-13","cited_by_count":2,"area":"safety"},{"id":"2605.00348","title":"Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking","created":"2026-05-01","cited_by_count":2,"area":"safety"},{"id":"2605.05443","title":"SLAM: Structural Linguistic Activation Marking for Language Models","created":"2026-05-06","cited_by_count":2,"area":"safety"},{"id":"2505.05712","title":"LLM-Text Watermarking based on Lagrange Interpolation","created":"2025-05-09","cited_by_count":1,"area":"safety"},{"id":"2508.11925","title":"Optimizing Token Choice for Code Watermarking: An RL Approach","created":"2025-08-16","cited_by_count":1,"area":"safety"},{"id":"2509.23019","title":"LLM Watermark Evasion via Bias Inversion","created":"2025-09-27","cited_by_count":1,"area":"safety"}],"next_cursor":"100"}