{"total":120,"rows":[{"id":"2308.03825","title":"\"Do Anything Now\": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models","created":"2023-08-07","cited_by_count":489,"area":"safety"},{"id":"2312.06942","title":"AI Control: Improving Safety Despite Intentional Subversion","created":"2023-12-12","cited_by_count":229,"area":"safety"},{"id":"2310.06356","title":"A Semantic Invariant Robust Watermark for Large Language Models","created":"2023-10-10","cited_by_count":112,"area":"safety"},{"id":"2402.19361","title":"Watermark Stealing in Large Language Models","created":"2024-02-29","cited_by_count":92,"area":"safety"},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2308.00113","title":"Three Bricks to Consolidate Watermarks for Large Language Models","created":"2023-07-26","cited_by_count":84,"area":"safety"},{"id":"2312.04469","title":"On the Learnability of Watermarks for Language Models","created":"2023-12-07","cited_by_count":81,"area":"safety"},{"id":"2310.12362","title":"REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models","created":"2023-10-18","cited_by_count":78,"area":"safety"},{"id":"2401.13927","title":"Adaptive Text Watermark for Large Language Models","created":"2024-01-25","cited_by_count":67,"area":"safety"},{"id":"2402.14904","title":"Watermarking Makes Language Models Radioactive","created":"2024-02-22","cited_by_count":58,"area":"safety"},{"id":"2308.00221","title":"Advancing Beyond Identification: Multi-bit Watermark for Large Language Models","created":"2023-08-01","cited_by_count":57,"area":"safety"},{"id":"2307.15992","title":"Towards Codable Watermarking for Injecting Multi-bits Information to LLMs","created":"2023-07-29","cited_by_count":54,"area":"safety"},{"id":"2403.04808","title":"WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off","created":"2024-03-06","cited_by_count":54,"area":"safety"},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50,"area":"safety"},{"id":"2401.16820","title":"Provably Robust Multi-bit Watermarking for AI-generated Text","created":"2024-01-30","cited_by_count":47,"area":"safety"},{"id":"2402.09370","title":"Pseudorandom Error-Correcting Codes","created":"2024-02-14","cited_by_count":44,"area":"safety"},{"id":"2405.07932","title":"PARDEN, Can You Repeat That? Defending against Jailbreaks via Repetition","created":"2024-05-13","cited_by_count":35,"area":"safety"},{"id":"2402.18059","title":"Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models","created":"2024-02-28","cited_by_count":34,"area":"safety"},{"id":"2310.08920","title":"Embarrassingly Simple Text Watermarks","created":"2023-10-13","cited_by_count":29,"area":"safety"},{"id":"2312.07930","title":"Towards Optimal Statistical Watermarking","created":"2023-12-13","cited_by_count":26,"area":"safety"},{"id":"2409.08087","title":"Securing Large Language Models: Addressing Bias, Misinformation, and Prompt Attacks","created":"2024-09-12","cited_by_count":26,"area":"safety"},{"id":"2312.17295","title":"Optimizing watermarks for large language models","created":"2023-12-28","cited_by_count":25,"area":"safety"},{"id":"2405.20777","title":"Black-Box Detection of Language Model Watermarks","created":"2024-05-28","cited_by_count":23,"area":"safety"},{"id":"2409.00089","title":"Watermarking Techniques for Large Language Models: A Survey","created":"2024-08-26","cited_by_count":23,"area":"safety"},{"id":"2403.10553","title":"Learning to Watermark LLM-generated Text via Reinforcement Learning","created":"2024-03-13","cited_by_count":22,"area":"safety"},{"id":"2410.02890","title":"Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach","created":"2024-10-03","cited_by_count":22,"area":"safety"},{"id":"2402.14883","title":"Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning","created":"2024-02-22","cited_by_count":21,"area":"safety"},{"id":"2310.00833","title":"Necessary and Sufficient Watermark for Large Language Models","created":"2023-10-02","cited_by_count":19,"area":"safety"},{"id":"2411.11203","title":"Debiasing Watermarks for Large Language Models via Maximal Coupling","created":"2024-11-17","cited_by_count":19,"area":"safety"},{"id":"2405.11109","title":"Watermarking Language Models for Many Adaptive Users","created":"2024-05-17","cited_by_count":18,"area":"safety"},{"id":"2410.02099","title":"A Watermark for Black-Box Language Models","created":"2024-10-02","cited_by_count":16,"area":"safety"},{"id":"2410.02440","title":"Optimizing Adaptive Attacks against Watermarks for Language Models","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2410.03537","title":"Ward: Provable RAG Dataset Inference via LLM Watermarks","created":"2024-10-04","cited_by_count":16,"area":"safety"},{"id":"2506.16349","title":"Watermarking Autoregressive Image Generation","created":"2025-06-19","cited_by_count":16,"area":"safety"},{"id":"2410.13805","title":"A Watermark for Order-Agnostic Language Models","created":"2024-10-17","cited_by_count":14,"area":"safety"},{"id":"2410.13808","title":"De-mark: Watermark Removal in Large Language Models","created":"2024-10-17","cited_by_count":14,"area":"safety"},{"id":"2410.03168","title":"Can Watermarked LLMs be Identified by Users via Crafted Prompts?","created":"2024-10-04","cited_by_count":13,"area":"safety"},{"id":"2502.10525","title":"Towards Watermarking of Open-Source LLMs","created":"2025-02-14","cited_by_count":13,"area":"safety"},{"id":"2506.05502","title":"StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models","created":"2025-06-05","cited_by_count":12,"area":"safety"},{"id":"2312.02382","title":"New Evaluation Metrics Capture Quality Degradation due to LLM Watermarking","created":"2023-12-04","cited_by_count":11,"area":"safety"},{"id":"2402.16578","title":"Multi-Bit Distortion-Free Watermarking for Large Language Models","created":"2024-02-26","cited_by_count":11,"area":"safety"},{"id":"2504.17480","title":"Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation","created":"2025-04-24","cited_by_count":11,"area":"safety"},{"id":"2505.08878","title":"Optimized Couplings for Watermarking Large Language Models","created":"2025-05-13","cited_by_count":9,"area":"safety"},{"id":"2505.16723","title":"LLM Fingerprinting via Semantically Conditioned Watermarks","created":"2025-05-22","cited_by_count":9,"area":"safety"},{"id":"2507.06274","title":"Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks","created":"2025-07-08","cited_by_count":9,"area":"safety"},{"id":"2509.09112","title":"Character-Level Perturbations Disrupt LLM Watermarks","created":"2025-09-11","cited_by_count":9,"area":"safety"},{"id":"2310.07726","title":"Warfare:Breaking the Watermark Protection of AI-Generated Content","created":"2023-09-27","cited_by_count":8,"area":"safety"},{"id":"2506.01011","title":"Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attack","created":"2025-06-01","cited_by_count":8,"area":"safety"},{"id":"2409.09739","title":"PersonaMark: Personalized LLM watermarking for model protection and user attribution","created":"2024-09-15","cited_by_count":7,"area":"safety"},{"id":"2605.10977","title":"PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attacks","created":"2026-05-09","cited_by_count":7,"area":"safety"},{"id":"2410.02693","title":"Discovering Spoofing Attempts on Language Model Watermarks","created":"2024-10-03","cited_by_count":6,"area":"safety"},{"id":"2410.03600","title":"Efficiently Identifying Watermarked Segments in Mixed-Source Texts","created":"2024-10-04","cited_by_count":6,"area":"safety"},{"id":"2407.11100","title":"Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond","created":"2024-07-15","cited_by_count":5,"area":"safety"},{"id":"2509.24048","title":"Analyzing and Evaluating Unbiased Language Model Watermark","created":"2025-09-28","cited_by_count":5,"area":"safety"},{"id":"2605.12456","title":"TextSeal: A Localized LLM Watermark for Provenance & Distillation Protection","created":"2026-05-12","cited_by_count":5,"area":"safety"},{"id":"2405.08400","title":"Stylometric Watermarks for Large Language Models","created":"2024-05-14","cited_by_count":4,"area":"safety"},{"id":"2407.04794","title":"On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks","created":"2024-07-05","cited_by_count":4,"area":"safety"},{"id":"2410.20670","title":"Segmenting Watermarked Texts From Language Models","created":"2024-10-28","cited_by_count":4,"area":"safety"},{"id":"2412.03107","title":"CredID: Credible Multi-Bit Watermark for Large Language Models Identification","created":"2024-12-04","cited_by_count":4,"area":"safety"},{"id":"2505.02344","title":"An End-to-End Model for Logits-Based Large Language Models Watermarking","created":"2025-05-05","cited_by_count":4,"area":"safety"},{"id":"2507.07871","title":"Mitigating Watermark Forgery in Generative Models via Randomized Key Selection","created":"2025-07-10","cited_by_count":4,"area":"safety"},{"id":"2508.03829","title":"Majority Bit-Aware Watermarking For Large Language Models","created":"2025-08-05","cited_by_count":4,"area":"safety"},{"id":"2508.20228","title":"Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID","created":"2025-08-27","cited_by_count":4,"area":"safety"},{"id":"2510.23891","title":"PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs","created":"2025-10-27","cited_by_count":4,"area":"safety"},{"id":"2607.03688","title":"PathMark: Protecting Intellectual Property of Mixture-of-Expert LLMs via Path Watermarks","created":"2026-07-04","cited_by_count":4,"area":"safety"},{"id":"2402.16889","title":"Generative Models are Self-Watermarked: Declaring Model Authentication through Re-Generation","created":"2024-02-23","cited_by_count":3,"area":"safety"},{"id":"2409.19708","title":"A Certified Robust Watermark For Large Language Models","created":"2024-09-29","cited_by_count":3,"area":"safety"},{"id":"2501.12174","title":"BiMarker: Enhancing Text Watermark Detection for Large Language Models with Bipolar Watermarks","created":"2025-01-21","cited_by_count":3,"area":"safety"},{"id":"2506.15975","title":"Multi-use LLM Watermarking and the False Detection Problem","created":"2025-06-19","cited_by_count":3,"area":"safety"},{"id":"2510.01637","title":"Detecting Post-generation Edits to Watermarked LLM Outputs via Combinatorial Watermarking","created":"2025-10-02","cited_by_count":3,"area":"safety"},{"id":"2601.22246","title":"MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking","created":"2026-01-29","cited_by_count":3,"area":"safety"},{"id":"2602.07235","title":"ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport","created":"2026-02-06","cited_by_count":3,"area":"safety"},{"id":"2410.19096","title":"Watermarking Large Language Models and the Generated Content: Opportunities and Challenges","created":"2024-10-24","cited_by_count":2,"area":"safety"},{"id":"2509.20924","title":"RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks","created":"2025-09-25","cited_by_count":2,"area":"safety"},{"id":"2510.26274","title":"PVMark: Enabling Public Verifiability for LLM Watermarking Schemes","created":"2025-10-30","cited_by_count":2,"area":"safety"},{"id":"2512.16904","title":"How Good is Post-Hoc Watermarking With Language Model Rephrasing?","created":"2025-12-18","cited_by_count":2,"area":"safety"},{"id":"2605.25796","title":"SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness","created":"2026-05-25","cited_by_count":2,"area":"safety"},{"id":"2404.11408","title":"DUPE: Detection Undermining via Prompt Engineering for Deepfake Text","created":"2024-04-17","cited_by_count":1,"area":"safety"},{"id":"2408.01354","title":"MCGMark: An Encodable and Robust Online Watermark for Tracing LLM-Generated Malicious Code","created":"2024-08-02","cited_by_count":1,"area":"safety"},{"id":"2412.12563","title":"Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers","created":"2024-12-17","cited_by_count":1,"area":"safety"},{"id":"2506.06409","title":"HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions","created":"2025-06-06","cited_by_count":1,"area":"safety"},{"id":"2506.13494","title":"Watermarking LLM-Generated Datasets in Downstream Tasks","created":"2025-06-16","cited_by_count":1,"area":"safety"},{"id":"2508.11925","title":"Optimizing Token Choice for Code Watermarking: An RL Approach","created":"2025-08-16","cited_by_count":1,"area":"safety"},{"id":"2509.23019","title":"LLM Watermark Evasion via Bias Inversion","created":"2025-09-27","cited_by_count":1,"area":"safety"},{"id":"2510.15976","title":"Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimization","created":"2025-10-13","cited_by_count":1,"area":"safety"},{"id":"2512.07038","title":"Ideal Attribution and Faithful Watermarks for Language Models","created":"2025-12-07","cited_by_count":1,"area":"safety"},{"id":"2512.17310","title":"Cryptanalysis of LDPC-Based Pseudorandom Error-Correcting Codes","created":"2025-12-19","cited_by_count":1,"area":"safety"},{"id":"2604.11720","title":"On the Robustness of Watermarking for Autoregressive Image Generation","created":"2026-04-13","cited_by_count":1,"area":"safety"},{"id":"2605.12529","title":"BackFlush: Knowledge-Free Backdoor Detection and Elimination with Watermark Preservation in Large Language Models","created":"2026-04-15","cited_by_count":1,"area":"safety"},{"id":"2605.29434","title":"AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing","created":"2026-05-28","cited_by_count":1,"area":"safety"},{"id":"2605.30501","title":"Linear Ensembles Wash Away Watermarks: On the Fragility of Distributional Perturbations in LLMs","created":"2026-05-28","cited_by_count":1,"area":"safety"},{"id":"2607.05694","title":"Beyond Heuristic Tuning: Power-Calibrated LLM Watermarking","created":"2026-07-06","cited_by_count":1,"area":"safety"},{"id":"2607.10103","title":"LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization","created":"2026-07-11","cited_by_count":1,"area":"safety"},{"id":"2608.12713","title":"Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks","created":"2026-08-13","cited_by_count":1,"area":"safety"},{"id":"2407.13803","title":"Less is More: Sparse Watermarking in LLMs with Enhanced Text Quality","created":"2024-07-17","cited_by_count":0,"area":"safety"},{"id":"2407.14206","title":"Watermark Smoothing Attacks against Language Models","created":"2024-07-19","cited_by_count":0,"area":"safety"},{"id":"2502.08332","title":"Modification and Generated-Text Detection: Achieving Dual Detection Capabilities for the Outputs of LLM by Watermark","created":"2025-02-12","cited_by_count":0,"area":"safety"},{"id":"2511.03641","title":"Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology","created":"2025-11-05","cited_by_count":0,"area":"safety"},{"id":"2511.06645","title":"Adaptive Testing for Segmenting Watermarked Texts From Language Models","created":"2025-11-10","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}