{"total":112,"rows":[{"id":"2403.07183","title":"Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviews","created":"2024-03-11","cited_by_count":164,"area":null},{"id":"2402.19361","title":"Watermark Stealing in Large Language Models","created":"2024-02-29","cited_by_count":92,"area":"safety"},{"id":"2311.04378","title":"Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models","created":"2023-11-07","cited_by_count":87,"area":"safety"},{"id":"2312.04469","title":"On the Learnability of Watermarks for Language Models","created":"2023-12-07","cited_by_count":81,"area":"safety"},{"id":"2406.02622","title":"Safeguarding Large Language Models: A Survey","created":"2024-06-03","cited_by_count":78,"area":"safety"},{"id":"2312.00273","title":"Mark My Words: Analyzing and Evaluating Language Model Watermarks","created":"2023-12-01","cited_by_count":71,"area":"safety"},{"id":"2401.13927","title":"Adaptive Text Watermark for Large Language Models","created":"2024-01-25","cited_by_count":67,"area":"safety"},{"id":"2402.14904","title":"Watermarking Makes Language Models Radioactive","created":"2024-02-22","cited_by_count":58,"area":"safety"},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50,"area":"safety"},{"id":"2401.16820","title":"Provably Robust Multi-bit Watermarking for AI-generated Text","created":"2024-01-30","cited_by_count":47,"area":"safety"},{"id":"2402.02333","title":"Copyright Protection in Generative AI: A Technical Perspective","created":"2024-02-04","cited_by_count":38,"area":null},{"id":"2402.18059","title":"Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models","created":"2024-02-28","cited_by_count":34,"area":"safety"},{"id":"2312.17295","title":"Optimizing watermarks for large language models","created":"2023-12-28","cited_by_count":25,"area":"safety"},{"id":"2405.20777","title":"Black-Box Detection of Language Model Watermarks","created":"2024-05-28","cited_by_count":23,"area":"safety"},{"id":"2403.10553","title":"Learning to Watermark LLM-generated Text via Reinforcement Learning","created":"2024-03-13","cited_by_count":22,"area":"safety"},{"id":"2410.02890","title":"Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach","created":"2024-10-03","cited_by_count":22,"area":"safety"},{"id":"2402.14883","title":"Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning","created":"2024-02-22","cited_by_count":21,"area":"safety"},{"id":"2402.09199","title":"Ten Words Only Still Help: Improving Black-Box AI-Generated Text Detection via Proxy-Guided Efficient Re-Sampling","created":"2024-02-14","cited_by_count":20,"area":null},{"id":"2503.04636","title":"Mark Your LLM: Detecting the Misuse of Open-Source Large Language Models via Watermarking","created":"2025-03-06","cited_by_count":19,"area":"safety"},{"id":"2407.17417","title":"Can Watermarking Large Language Models Prevent Copyrighted Text Generation and Hide Training Data?","created":"2024-07-24","cited_by_count":18,"area":"safety"},{"id":"2505.05190","title":"Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks","created":"2025-05-08","cited_by_count":18,"area":"safety"},{"id":"2410.02099","title":"A Watermark for Black-Box Language Models","created":"2024-10-02","cited_by_count":16,"area":"safety"},{"id":"2410.02440","title":"Optimizing Adaptive Attacks against Watermarks for Language Models","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2509.21057","title":"PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints","created":"2025-09-25","cited_by_count":16,"area":"safety"},{"id":"2509.24496","title":"LLM DNA: Tracing Model Evolution via Functional Representations","created":"2025-09-29","cited_by_count":15,"area":null},{"id":"2410.13805","title":"A Watermark for Order-Agnostic Language Models","created":"2024-10-17","cited_by_count":14,"area":"safety"},{"id":"2410.13808","title":"De-mark: Watermark Removal in Large Language Models","created":"2024-10-17","cited_by_count":14,"area":"safety"},{"id":"2411.11478","title":"SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI","created":"2024-11-18","cited_by_count":14,"area":"safety"},{"id":"2406.02633","title":"Edit Distance Robust Watermarks via Indexing Pseudorandom Codes","created":"2024-06-04","cited_by_count":13,"area":null},{"id":"2410.03168","title":"Can Watermarked LLMs be Identified by Users via Crafted Prompts?","created":"2024-10-04","cited_by_count":13,"area":"safety"},{"id":"2502.10673","title":"Dataset Protection via Watermarked Canaries in Retrieval-Augmented LLMs","created":"2025-02-15","cited_by_count":12,"area":"rag"},{"id":"2402.16578","title":"Multi-Bit Distortion-Free Watermarking for Large Language Models","created":"2024-02-26","cited_by_count":11,"area":"safety"},{"id":"2504.17480","title":"Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation","created":"2025-04-24","cited_by_count":11,"area":"safety"},{"id":"2406.02603","title":"Distortion-free Watermarks are not Truly Distortion-free under Watermark Key Collisions","created":"2024-06-02","cited_by_count":10,"area":"safety"},{"id":"2406.10281","title":"Watermarking Language Models with Error Correcting Codes","created":"2024-06-12","cited_by_count":10,"area":"safety"},{"id":"2412.03123","title":"Robust Multi-bit Text Watermark with LLM-based Paraphrasers","created":"2024-12-04","cited_by_count":10,"area":"safety"},{"id":"2504.06575","title":"Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learning","created":"2025-04-09","cited_by_count":10,"area":"safety"},{"id":"2505.16934","title":"In-Context Watermarks for Large Language Models","created":"2025-05-22","cited_by_count":10,"area":"safety"},{"id":"2507.06274","title":"Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks","created":"2025-07-08","cited_by_count":9,"area":"safety"},{"id":"2404.02138","title":"Topic-Based Watermarks for Large Language Models","created":"2024-04-02","cited_by_count":8,"area":"safety"},{"id":"2410.20418","title":"Inevitable Trade-off between Watermark Strength and Speculative Sampling Efficiency for Language Models","created":"2024-10-27","cited_by_count":8,"area":"inference"},{"id":"2506.01011","title":"Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attack","created":"2025-06-01","cited_by_count":8,"area":"safety"},{"id":"2602.08401","title":"On Protecting Agentic Systems' Intellectual Property via Watermarking","created":"2026-02-09","cited_by_count":8,"area":"agents"},{"id":"2409.09739","title":"PersonaMark: Personalized LLM watermarking for model protection and user attribution","created":"2024-09-15","cited_by_count":7,"area":"safety"},{"id":"2510.18333","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","created":"2025-10-21","cited_by_count":7,"area":"safety"},{"id":"2605.10977","title":"PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attacks","created":"2026-05-09","cited_by_count":7,"area":"safety"},{"id":"2405.13517","title":"WaterPool: A Watermark Mitigating Trade-offs among Imperceptibility, Efficacy and Robustness","created":"2024-05-22","cited_by_count":6,"area":null},{"id":"2502.17259","title":"Detecting Benchmark Contamination Through Watermarking","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2407.11100","title":"Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond","created":"2024-07-15","cited_by_count":5,"area":"safety"},{"id":"2503.04332","title":"The Challenge of Identifying the Origin of Black-Box Large Language Models","created":"2025-03-06","cited_by_count":5,"area":null},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2509.10569","title":"MarkDiffusion: An Open-Source Toolkit for Generative Watermarking of Latent Diffusion Models","created":"2025-09-11","cited_by_count":5,"area":"diffusion"},{"id":"2509.24048","title":"Analyzing and Evaluating Unbiased Language Model Watermark","created":"2025-09-28","cited_by_count":5,"area":"safety"},{"id":"2510.21053","title":"A Reinforcement Learning Framework for Robust and Secure LLM Watermarking","created":"2025-10-23","cited_by_count":5,"area":"safety"},{"id":"2605.11036","title":"Sequential Behavioral Watermarking for LLM Agents","created":"2026-05-11","cited_by_count":5,"area":"agents"},{"id":"2605.12456","title":"TextSeal: A Localized LLM Watermark for Provenance & Distillation Protection","created":"2026-05-12","cited_by_count":5,"area":"safety"},{"id":"2412.03107","title":"CredID: Credible Multi-Bit Watermark for Large Language Models Identification","created":"2024-12-04","cited_by_count":4,"area":"safety"},{"id":"2504.06446","title":"Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Models","created":"2025-04-08","cited_by_count":4,"area":"safety"},{"id":"2505.02344","title":"An End-to-End Model for Logits-Based Large Language Models Watermarking","created":"2025-05-05","cited_by_count":4,"area":"safety"},{"id":"2508.03829","title":"Majority Bit-Aware Watermarking For Large Language Models","created":"2025-08-05","cited_by_count":4,"area":"safety"},{"id":"2508.20228","title":"Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID","created":"2025-08-27","cited_by_count":4,"area":"safety"},{"id":"2510.23891","title":"PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs","created":"2025-10-27","cited_by_count":4,"area":"safety"},{"id":"2602.14030","title":"MC$^2$Mark: Distortion-Free Multi-Bit Watermarking for Long Messages","created":"2026-02-15","cited_by_count":4,"area":"safety"},{"id":"2312.06488","title":"Performance-lossless Black-box Model Watermarking","created":"2023-12-11","cited_by_count":3,"area":"safety"},{"id":"2403.15740","title":"Protecting Copyrighted Material with Unique Identifiers in Large Language Model Training","created":"2024-03-23","cited_by_count":3,"area":"safety"},{"id":"2409.19708","title":"A Certified Robust Watermark For Large Language Models","created":"2024-09-29","cited_by_count":3,"area":"safety"},{"id":"2501.12174","title":"BiMarker: Enhancing Text Watermark Detection for Large Language Models with Bipolar Watermarks","created":"2025-01-21","cited_by_count":3,"area":"safety"},{"id":"2504.03765","title":"Watermarking for AI Content Detection: A Review on Text, Visual, and Audio Modalities","created":"2025-04-02","cited_by_count":3,"area":"safety"},{"id":"2506.15975","title":"Multi-use LLM Watermarking and the False Detection Problem","created":"2025-06-19","cited_by_count":3,"area":"safety"},{"id":"2601.05144","title":"Distilling the Thought, Watermarking the Answer: A Principle Semantic Guided Watermark for Large Reasoning Models","created":"2026-01-08","cited_by_count":3,"area":"lr"},{"id":"2601.07291","title":"A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Model","created":"2026-01-12","cited_by_count":3,"area":"mllm"},{"id":"2506.05594","title":"SoK: Are Watermarks in LLMs Ready for Deployment?","created":"2025-06-05","cited_by_count":2,"area":"safety"},{"id":"2509.20924","title":"RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks","created":"2025-09-25","cited_by_count":2,"area":"safety"},{"id":"2510.12828","title":"SimKey: A Semantically Aware Key Module for Watermarking Language Models","created":"2025-10-11","cited_by_count":2,"area":"safety"},{"id":"2512.03620","title":"SELF: A Robust Singular Value and Eigenvalue Approach for LLM Fingerprinting","created":"2025-12-03","cited_by_count":2,"area":null},{"id":"2512.16904","title":"How Good is Post-Hoc Watermarking With Language Model Rephrasing?","created":"2025-12-18","cited_by_count":2,"area":"safety"},{"id":"2605.05443","title":"SLAM: Structural Linguistic Activation Marking for Language Models","created":"2026-05-06","cited_by_count":2,"area":"safety"},{"id":"2605.25967","title":"Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio","created":"2026-05-25","cited_by_count":2,"area":"safety"},{"id":"2504.02898","title":"A Practical Synthesis of Detecting AI-Generated Textual, Visual, and Audio Content","created":"2025-04-02","cited_by_count":1,"area":null},{"id":"2505.24267","title":"MUSE: Model-Agnostic Tabular Watermarking via Multi-Sample Selection","created":"2025-05-30","cited_by_count":1,"area":"diffusion"},{"id":"2506.13494","title":"Watermarking LLM-Generated Datasets in Downstream Tasks","created":"2025-06-16","cited_by_count":1,"area":"safety"},{"id":"2509.23019","title":"LLM Watermark Evasion via Bias Inversion","created":"2025-09-27","cited_by_count":1,"area":"safety"},{"id":"2510.15976","title":"Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimization","created":"2025-10-13","cited_by_count":1,"area":"safety"},{"id":"2510.24789","title":"Cross-Lingual Summarization as a Black-Box Watermark Removal Attack","created":"2025-10-27","cited_by_count":1,"area":null},{"id":"2602.00772","title":"Provable Model Provenance Set for Large Language Models","created":"2026-01-31","cited_by_count":1,"area":null},{"id":"2605.29434","title":"AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing","created":"2026-05-28","cited_by_count":1,"area":"safety"},{"id":"2607.10103","title":"LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization","created":"2026-07-11","cited_by_count":1,"area":"safety"},{"id":"2607.13099","title":"WaterMoE: Expert-Routing-based Watermarking for High Fidelity and Efficiency","created":"2026-07-14","cited_by_count":1,"area":"moe"},{"id":"2608.12713","title":"Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks","created":"2026-08-13","cited_by_count":1,"area":"safety"},{"id":"2405.01509","title":"Learnable Linguistic Watermarks for Tracing Model Extraction Attacks on Large Language Models","created":"2024-04-28","cited_by_count":0,"area":"safety"},{"id":"2407.13803","title":"Less is More: Sparse Watermarking in LLMs with Enhanced Text Quality","created":"2024-07-17","cited_by_count":0,"area":"safety"},{"id":"2407.14206","title":"Watermark Smoothing Attacks against Language Models","created":"2024-07-19","cited_by_count":0,"area":"safety"},{"id":"2502.05213","title":"DERMARK: A Dynamic, Efficient and Robust Multi-bit Watermark for Large Language Models","created":"2025-02-04","cited_by_count":0,"area":"safety"},{"id":"2503.20802","title":"CEFW: A Comprehensive Evaluation Framework for Watermark in Large Language Models","created":"2025-03-24","cited_by_count":0,"area":"safety"},{"id":"2508.13131","title":"Improving Detection of Watermarked Language Models","created":"2025-08-18","cited_by_count":0,"area":"safety"},{"id":"2511.13722","title":"Signature vs. Substance: Evaluating the Balance of Adversarial Resistance and Linguistic Quality in Watermarking Large Language Models","created":"2025-08-11","cited_by_count":0,"area":"safety"},{"id":"2601.11629","title":"Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs","created":"2026-01-14","cited_by_count":0,"area":"safety"},{"id":"2602.01752","title":"WorldCup Sampling for Multi-bit LLM Watermarking","created":"2026-02-02","cited_by_count":0,"area":"safety"},{"id":"2603.04896","title":"Authorize-on-Demand: Dynamic Authorization with Legality-Aware Intellectual Property Protection for VLMs","created":"2026-03-05","cited_by_count":0,"area":null},{"id":"2605.01350","title":"LLM Output Detectability and Task Performance Can be Jointly Optimized","created":"2026-05-02","cited_by_count":0,"area":"safety"}],"next_cursor":"100"}