{"total":146,"rows":[{"id":"2307.15593","title":"Robust Distortion-free Watermarks for Language Models","created":"2023-07-28","cited_by_count":320,"area":"safety"},{"id":"2306.17439","title":"Provable Robust Watermarking for AI-Generated Text","created":"2023-06-30","cited_by_count":299,"area":"safety"},{"id":"2310.06356","title":"A Semantic Invariant Robust Watermark for Large Language Models","created":"2023-10-10","cited_by_count":112,"area":"safety"},{"id":"2310.10669","title":"Unbiased Watermark for Large Language Models","created":"2023-09-22","cited_by_count":111,"area":"safety"},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2308.00113","title":"Three Bricks to Consolidate Watermarks for Large Language Models","created":"2023-07-26","cited_by_count":84,"area":"safety"},{"id":"2312.04469","title":"On the Learnability of Watermarks for Language Models","created":"2023-12-07","cited_by_count":81,"area":"safety"},{"id":"2310.12362","title":"REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models","created":"2023-10-18","cited_by_count":78,"area":"safety"},{"id":"2310.18491","title":"Publicly-Detectable Watermarking for Language Models","created":"2023-10-27","cited_by_count":76,"area":"safety"},{"id":"2312.00273","title":"Mark My Words: Analyzing and Evaluating Language Model Watermarks","created":"2023-12-01","cited_by_count":71,"area":"safety"},{"id":"2401.13927","title":"Adaptive Text Watermark for Large Language Models","created":"2024-01-25","cited_by_count":67,"area":"safety"},{"id":"2307.16230","title":"An Unforgeable Publicly Verifiable Watermark for Large Language Models","created":"2023-07-30","cited_by_count":65,"area":"safety"},{"id":"2402.14904","title":"Watermarking Makes Language Models Radioactive","created":"2024-02-22","cited_by_count":58,"area":"safety"},{"id":"2308.00221","title":"Advancing Beyond Identification: Multi-bit Watermark for Large Language Models","created":"2023-08-01","cited_by_count":57,"area":"safety"},{"id":"2310.07710","title":"A Resilient and Accessible Distribution-Preserving Watermark for Large Language Models","created":"2023-10-11","cited_by_count":56,"area":"safety"},{"id":"2403.04808","title":"WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off","created":"2024-03-06","cited_by_count":54,"area":"safety"},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50,"area":"safety"},{"id":"2401.16820","title":"Provably Robust Multi-bit Watermarking for AI-generated Text","created":"2024-01-30","cited_by_count":47,"area":"safety"},{"id":"2402.09370","title":"Pseudorandom Error-Correcting Codes","created":"2024-02-14","cited_by_count":44,"area":"safety"},{"id":"2310.08920","title":"Embarrassingly Simple Text Watermarks","created":"2023-10-13","cited_by_count":29,"area":"safety"},{"id":"2309.13322","title":"From Text to Source: Results in Detecting Large Language Model-Generated Content","created":"2023-09-23","cited_by_count":26,"area":"safety"},{"id":"2312.07930","title":"Towards Optimal Statistical Watermarking","created":"2023-12-13","cited_by_count":26,"area":"safety"},{"id":"2406.01946","title":"Bileve: Securing Text Provenance in Large Language Models Against Spoofing with Bi-level Signature","created":"2024-06-04","cited_by_count":25,"area":"safety"},{"id":"2405.20777","title":"Black-Box Detection of Language Model Watermarks","created":"2024-05-28","cited_by_count":23,"area":"safety"},{"id":"2402.05864","title":"Permute-and-Flip: An optimally stable and watermarkable decoder for LLMs","created":"2024-02-08","cited_by_count":22,"area":"safety"},{"id":"2403.10553","title":"Learning to Watermark LLM-generated Text via Reinforcement Learning","created":"2024-03-13","cited_by_count":22,"area":"safety"},{"id":"2410.02890","title":"Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach","created":"2024-10-03","cited_by_count":22,"area":"safety"},{"id":"2402.14883","title":"Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning","created":"2024-02-22","cited_by_count":21,"area":"safety"},{"id":"2310.00833","title":"Necessary and Sufficient Watermark for Large Language Models","created":"2023-10-02","cited_by_count":19,"area":"safety"},{"id":"2411.11203","title":"Debiasing Watermarks for Large Language Models via Maximal Coupling","created":"2024-11-17","cited_by_count":19,"area":"safety"},{"id":"2405.11109","title":"Watermarking Language Models for Many Adaptive Users","created":"2024-05-17","cited_by_count":18,"area":"safety"},{"id":"2407.17417","title":"Can Watermarking Large Language Models Prevent Copyrighted Text Generation and Hide Training Data?","created":"2024-07-24","cited_by_count":18,"area":"safety"},{"id":"2410.02099","title":"A Watermark for Black-Box Language Models","created":"2024-10-02","cited_by_count":16,"area":"safety"},{"id":"2410.03537","title":"Ward: Provable RAG Dataset Inference via LLM Watermarks","created":"2024-10-04","cited_by_count":16,"area":"safety"},{"id":"2506.16349","title":"Watermarking Autoregressive Image Generation","created":"2025-06-19","cited_by_count":16,"area":"safety"},{"id":"2509.21057","title":"PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints","created":"2025-09-25","cited_by_count":16,"area":"safety"},{"id":"2407.04411","title":"Waterfall: Framework for Robust and Scalable Text Watermarking and Provenance for LLMs","created":"2024-07-05","cited_by_count":15,"area":"safety"},{"id":"2410.13805","title":"A Watermark for Order-Agnostic Language Models","created":"2024-10-17","cited_by_count":14,"area":"safety"},{"id":"2410.13808","title":"De-mark: Watermark Removal in Large Language Models","created":"2024-10-17","cited_by_count":14,"area":"safety"},{"id":"2410.18861","title":"Provably Robust Watermarks for Open-Source Language Models","created":"2024-10-24","cited_by_count":13,"area":"safety"},{"id":"2502.10525","title":"Towards Watermarking of Open-Source LLMs","created":"2025-02-14","cited_by_count":13,"area":"safety"},{"id":"2410.06467","title":"WAPITI: A Watermark for Finetuned Open-Source LLMs","created":"2024-10-09","cited_by_count":12,"area":"safety"},{"id":"2507.07341","title":"On the Impossibility of Separating Intelligence from Judgment: The Computational Intractability of Filtering for AI Alignment","created":"2025-07-09","cited_by_count":12,"area":"safety"},{"id":"2312.02382","title":"New Evaluation Metrics Capture Quality Degradation due to LLM Watermarking","created":"2023-12-04","cited_by_count":11,"area":"safety"},{"id":"2504.17480","title":"Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation","created":"2025-04-24","cited_by_count":11,"area":"safety"},{"id":"2510.19796","title":"Blackbox Model Provenance via Palimpsestic Membership Inference","created":"2025-10-22","cited_by_count":11,"area":"safety"},{"id":"2311.09535","title":"Turning Your Strength into Watermark: Watermarking Large Language Model via Knowledge Injection","created":"2023-11-16","cited_by_count":10,"area":"safety"},{"id":"2406.02603","title":"Distortion-free Watermarks are not Truly Distortion-free under Watermark Key Collisions","created":"2024-06-02","cited_by_count":10,"area":"safety"},{"id":"2406.10281","title":"Watermarking Language Models with Error Correcting Codes","created":"2024-06-12","cited_by_count":10,"area":"safety"},{"id":"2412.03123","title":"Robust Multi-bit Text Watermark with LLM-based Paraphrasers","created":"2024-12-04","cited_by_count":10,"area":"safety"},{"id":"2504.06575","title":"Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learning","created":"2025-04-09","cited_by_count":10,"area":"safety"},{"id":"2505.16934","title":"In-Context Watermarks for Large Language Models","created":"2025-05-22","cited_by_count":10,"area":"safety"},{"id":"2505.08878","title":"Optimized Couplings for Watermarking Large Language Models","created":"2025-05-13","cited_by_count":9,"area":"safety"},{"id":"2505.16723","title":"LLM Fingerprinting via Semantically Conditioned Watermarks","created":"2025-05-22","cited_by_count":9,"area":"safety"},{"id":"2509.09112","title":"Character-Level Perturbations Disrupt LLM Watermarks","created":"2025-09-11","cited_by_count":9,"area":"safety"},{"id":"2411.05091","title":"Watermarking Language Models through Language Models","created":"2024-11-07","cited_by_count":8,"area":"safety"},{"id":"2405.02365","title":"ModelShield: Adaptive and Robust Watermark against Model Extraction Attack","created":"2024-05-03","cited_by_count":7,"area":"safety"},{"id":"2405.14018","title":"Watermarking Generative Tabular Data","created":"2024-05-22","cited_by_count":7,"area":"safety"},{"id":"2409.09739","title":"PersonaMark: Personalized LLM watermarking for model protection and user attribution","created":"2024-09-15","cited_by_count":7,"area":"safety"},{"id":"2510.18333","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","created":"2025-10-21","cited_by_count":7,"area":"safety"},{"id":"2401.06829","title":"Cross-Attention Watermarking of Large Language Models","created":"2024-01-12","cited_by_count":6,"area":"safety"},{"id":"2410.03600","title":"Efficiently Identifying Watermarked Segments in Mixed-Source Texts","created":"2024-10-04","cited_by_count":6,"area":"safety"},{"id":"2506.23731","title":"Radioactive Watermarks in Diffusion and Autoregressive Image Generative Models","created":"2025-06-30","cited_by_count":6,"area":"safety"},{"id":"2509.24043","title":"An Ensemble Framework for Unbiased Language Model Watermarking","created":"2025-09-28","cited_by_count":6,"area":"safety"},{"id":"2602.08563","title":"Stateless Yet Not Forgetful: Implicit Memory as a Hidden Channel in LLMs","created":"2026-02-09","cited_by_count":6,"area":"safety"},{"id":"2407.11100","title":"Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond","created":"2024-07-15","cited_by_count":5,"area":"safety"},{"id":"2509.24048","title":"Analyzing and Evaluating Unbiased Language Model Watermark","created":"2025-09-28","cited_by_count":5,"area":"safety"},{"id":"2605.12456","title":"TextSeal: A Localized LLM Watermark for Provenance & Distillation Protection","created":"2026-05-12","cited_by_count":5,"area":"safety"},{"id":"2405.08400","title":"Stylometric Watermarks for Large Language Models","created":"2024-05-14","cited_by_count":4,"area":"safety"},{"id":"2407.04794","title":"On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks","created":"2024-07-05","cited_by_count":4,"area":"safety"},{"id":"2409.07580","title":"New constructions of pseudorandom codes","created":"2024-09-11","cited_by_count":4,"area":"safety"},{"id":"2409.17518","title":"Multi-Designated Detector Watermarking for Language Models","created":"2024-09-26","cited_by_count":4,"area":"safety"},{"id":"2504.06446","title":"Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Models","created":"2025-04-08","cited_by_count":4,"area":"safety"},{"id":"2507.07871","title":"Mitigating Watermark Forgery in Generative Models via Randomized Key Selection","created":"2025-07-10","cited_by_count":4,"area":"safety"},{"id":"2508.03829","title":"Majority Bit-Aware Watermarking For Large Language Models","created":"2025-08-05","cited_by_count":4,"area":"safety"},{"id":"2508.20228","title":"Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID","created":"2025-08-27","cited_by_count":4,"area":"safety"},{"id":"2510.02902","title":"DMark: Order-Agnostic Watermarking for Diffusion Large Language Models","created":"2025-10-03","cited_by_count":4,"area":"safety"},{"id":"2510.16367","title":"EditMark: Watermarking Large Language Models based on Model Editing","created":"2025-10-18","cited_by_count":4,"area":"safety"},{"id":"2602.14030","title":"MC$^2$Mark: Distortion-Free Multi-Bit Watermarking for Long Messages","created":"2026-02-15","cited_by_count":4,"area":"safety"},{"id":"2402.16889","title":"Generative Models are Self-Watermarked: Declaring Model Authentication through Re-Generation","created":"2024-02-23","cited_by_count":3,"area":"safety"},{"id":"2406.05660","title":"Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models","created":"2024-06-09","cited_by_count":3,"area":"safety"},{"id":"2409.14700","title":"Adaptive and Robust Watermark for Generative Tabular Data","created":"2024-09-23","cited_by_count":3,"area":"safety"},{"id":"2501.12174","title":"BiMarker: Enhancing Text Watermark Detection for Large Language Models with Bipolar Watermarks","created":"2025-01-21","cited_by_count":3,"area":"safety"},{"id":"2502.12710","title":"Innamark: A Whitespace Replacement Information-Hiding Method","created":"2025-02-18","cited_by_count":3,"area":"safety"},{"id":"2504.12108","title":"Entropy-Guided Watermarking for LLMs: A Test-Time Framework for Robust and Traceable Text Generation","created":"2025-04-16","cited_by_count":3,"area":"safety"},{"id":"2506.07403","title":"Enhancing Watermarking Quality for LLMs via Contextual Generation States Awareness","created":"2025-06-09","cited_by_count":3,"area":"safety"},{"id":"2506.15975","title":"Multi-use LLM Watermarking and the False Detection Problem","created":"2025-06-19","cited_by_count":3,"area":"safety"},{"id":"2510.01637","title":"Detecting Post-generation Edits to Watermarked LLM Outputs via Combinatorial Watermarking","created":"2025-10-02","cited_by_count":3,"area":"safety"},{"id":"2510.02342","title":"CATMark: A Context-Aware Thresholding Framework for Robust Cross-Task Watermarking in Large Language Models","created":"2025-09-27","cited_by_count":3,"area":"safety"},{"id":"2601.22246","title":"MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking","created":"2026-01-29","cited_by_count":3,"area":"safety"},{"id":"2602.07235","title":"ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport","created":"2026-02-06","cited_by_count":3,"area":"safety"},{"id":"2410.19096","title":"Watermarking Large Language Models and the Generated Content: Opportunities and Challenges","created":"2024-10-24","cited_by_count":2,"area":"safety"},{"id":"2506.05594","title":"SoK: Are Watermarks in LLMs Ready for Deployment?","created":"2025-06-05","cited_by_count":2,"area":"safety"},{"id":"2509.10577","title":"The Coding Limits of Robust Watermarking for Generative Models","created":"2025-09-11","cited_by_count":2,"area":"safety"},{"id":"2510.12828","title":"SimKey: A Semantically Aware Key Module for Watermarking Language Models","created":"2025-10-11","cited_by_count":2,"area":"safety"},{"id":"2512.16904","title":"How Good is Post-Hoc Watermarking With Language Model Rephrasing?","created":"2025-12-18","cited_by_count":2,"area":"safety"},{"id":"2605.25796","title":"SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness","created":"2026-05-25","cited_by_count":2,"area":"safety"},{"id":"2505.01484","title":"LLM Watermarking Using Mixtures and Statistical-to-Computational Gaps","created":"2025-05-02","cited_by_count":1,"area":"safety"},{"id":"2506.06409","title":"HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions","created":"2025-06-06","cited_by_count":1,"area":"safety"}],"next_cursor":"100"}