{"total":82,"rows":[{"id":"2312.07913","title":"A Survey of Text Watermarking in the Era of Large Language Models","created":"2023-12-13","cited_by_count":112,"area":"safety"},{"id":"2405.10051","title":"MarkLLM: An Open-Source Toolkit for LLM Watermarking","created":"2024-05-16","cited_by_count":95,"area":"safety"},{"id":"2402.19361","title":"Watermark Stealing in Large Language Models","created":"2024-02-29","cited_by_count":92,"area":"safety"},{"id":"2312.04469","title":"On the Learnability of Watermarks for Language Models","created":"2023-12-07","cited_by_count":81,"area":"safety"},{"id":"2403.13485","title":"An Entropy-based Text Watermarking Detection Method","created":"2024-03-20","cited_by_count":75,"area":"safety"},{"id":"2401.13927","title":"Adaptive Text Watermark for Large Language Models","created":"2024-01-25","cited_by_count":67,"area":"safety"},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50,"area":"safety"},{"id":"2401.16820","title":"Provably Robust Multi-bit Watermarking for AI-generated Text","created":"2024-01-30","cited_by_count":47,"area":"safety"},{"id":"2402.02333","title":"Copyright Protection in Generative AI: A Technical Perspective","created":"2024-02-04","cited_by_count":38,"area":null},{"id":"2402.12948","title":"GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trick","created":"2024-02-20","cited_by_count":37,"area":"safety"},{"id":"2402.18059","title":"Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models","created":"2024-02-28","cited_by_count":34,"area":"safety"},{"id":"2505.11541","title":"MorphMark: Flexible Adaptive Watermarking for Large Language Models","created":"2025-05-14","cited_by_count":24,"area":"safety"},{"id":"2405.20777","title":"Black-Box Detection of Language Model Watermarks","created":"2024-05-28","cited_by_count":23,"area":"safety"},{"id":"2406.05392","title":"Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Survey","created":"2024-06-08","cited_by_count":23,"area":null},{"id":"2410.02890","title":"Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach","created":"2024-10-03","cited_by_count":22,"area":"safety"},{"id":"2402.14883","title":"Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning","created":"2024-02-22","cited_by_count":21,"area":"safety"},{"id":"2506.21602","title":"BiMark: Unbiased Multilayer Watermarking for Large Language Models","created":"2025-06-19","cited_by_count":21,"area":"safety"},{"id":"2508.11548","title":"Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends","created":"2025-08-15","cited_by_count":20,"area":"safety"},{"id":"2403.01152","title":"A Survey of AI-generated Text Forensic Systems: Detection, Attribution, and Characterization","created":"2024-03-02","cited_by_count":19,"area":null},{"id":"2506.06975","title":"Auditing Black-Box LLM APIs with a Rank-Based Uniformity Test","created":"2025-06-08","cited_by_count":18,"area":null},{"id":"2410.02099","title":"A Watermark for Black-Box Language Models","created":"2024-10-02","cited_by_count":16,"area":"safety"},{"id":"2311.09816","title":"Downstream Trade-offs of a Family of Text Watermarks","created":"2023-11-16","cited_by_count":14,"area":"safety"},{"id":"2405.19677","title":"Large Language Model Watermark Stealing With Mixed Integer Programming","created":"2024-05-30","cited_by_count":14,"area":"safety"},{"id":"2410.06467","title":"WAPITI: A Watermark for Finetuned Open-Source LLMs","created":"2024-10-09","cited_by_count":12,"area":"safety"},{"id":"2507.14067","title":"VLA-Mark: A cross modal watermark for large vision-language alignment model","created":"2025-07-18","cited_by_count":12,"area":"mllm"},{"id":"2403.13000","title":"Duwak: Dual Watermarks in Large Language Models","created":"2024-03-12","cited_by_count":11,"area":"safety"},{"id":"2504.06575","title":"Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learning","created":"2025-04-09","cited_by_count":10,"area":"safety"},{"id":"2505.16934","title":"In-Context Watermarks for Large Language Models","created":"2025-05-22","cited_by_count":10,"area":"safety"},{"id":"2403.19548","title":"WaterJudge: Quality-Detection Trade-off when Watermarking Large Language Models","created":"2024-03-28","cited_by_count":9,"area":"safety"},{"id":"2411.13425","title":"Watermark under Fire: A Robustness Evaluation of LLM Watermarking","created":"2024-11-20","cited_by_count":9,"area":"safety"},{"id":"2507.06274","title":"Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks","created":"2025-07-08","cited_by_count":9,"area":"safety"},{"id":"2410.20418","title":"Inevitable Trade-off between Watermark Strength and Speculative Sampling Efficiency for Language Models","created":"2024-10-27","cited_by_count":8,"area":"inference"},{"id":"2411.01222","title":"$B^4$: A Black-Box Scrubbing Attack on LLM Watermarks","created":"2024-11-02","cited_by_count":7,"area":"safety"},{"id":"2510.18333","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","created":"2025-10-21","cited_by_count":7,"area":"safety"},{"id":"2403.20127","title":"The Impact of Prompts on Zero-Shot Detection of AI-Generated Text","created":"2024-03-29","cited_by_count":6,"area":null},{"id":"2405.13517","title":"WaterPool: A Watermark Mitigating Trade-offs among Imperceptibility, Efficacy and Robustness","created":"2024-05-22","cited_by_count":6,"area":null},{"id":"2410.02693","title":"Discovering Spoofing Attempts on Language Model Watermarks","created":"2024-10-03","cited_by_count":6,"area":"safety"},{"id":"2509.18880","title":"Diversity Boosts AI-Generated Text Detection","created":"2025-09-23","cited_by_count":6,"area":null},{"id":"2505.09924","title":"From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models","created":"2025-05-15","cited_by_count":5,"area":"safety"},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2510.21053","title":"A Reinforcement Learning Framework for Robust and Secure LLM Watermarking","created":"2025-10-23","cited_by_count":5,"area":"safety"},{"id":"2602.06754","title":"A Unified Framework for LLM Watermarks","created":"2026-02-06","cited_by_count":5,"area":"safety"},{"id":"2407.04794","title":"On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks","created":"2024-07-05","cited_by_count":4,"area":"safety"},{"id":"2505.06827","title":"Sandcastles in the Storm: Revisiting the (Im)possibility of Strong Watermarking","created":"2025-05-11","cited_by_count":4,"area":null},{"id":"2508.20228","title":"Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID","created":"2025-08-27","cited_by_count":4,"area":"safety"},{"id":"2510.23891","title":"PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs","created":"2025-10-27","cited_by_count":4,"area":"safety"},{"id":"2406.11106","title":"From Intentions to Techniques: A Comprehensive Taxonomy and Challenges in Text Watermarking for Large Language Models","created":"2024-06-17","cited_by_count":3,"area":"safety"},{"id":"2501.12174","title":"BiMarker: Enhancing Text Watermark Detection for Large Language Models with Bipolar Watermarks","created":"2025-01-21","cited_by_count":3,"area":"safety"},{"id":"2506.07403","title":"Enhancing Watermarking Quality for LLMs via Contextual Generation States Awareness","created":"2025-06-09","cited_by_count":3,"area":"safety"},{"id":"2508.06656","title":"ClusterMark: Towards Robust Watermarking for Autoregressive Image Generators with Visual Token Clustering","created":"2025-08-08","cited_by_count":3,"area":"diffusion"},{"id":"2601.05144","title":"Distilling the Thought, Watermarking the Answer: A Principle Semantic Guided Watermark for Large Reasoning Models","created":"2026-01-08","cited_by_count":3,"area":"lr"},{"id":"2406.08922","title":"Navigating the Shadows: Unveiling Effective Disturbances for Modern AI Content Detectors","created":"2024-06-13","cited_by_count":2,"area":null},{"id":"2506.05594","title":"SoK: Are Watermarks in LLMs Ready for Deployment?","created":"2025-06-05","cited_by_count":2,"area":"safety"},{"id":"2509.20924","title":"RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks","created":"2025-09-25","cited_by_count":2,"area":"safety"},{"id":"2605.05443","title":"SLAM: Structural Linguistic Activation Marking for Language Models","created":"2026-05-06","cited_by_count":2,"area":"safety"},{"id":"2605.25796","title":"SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness","created":"2026-05-25","cited_by_count":2,"area":"safety"},{"id":"2506.06409","title":"HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions","created":"2025-06-06","cited_by_count":1,"area":"safety"},{"id":"2506.13494","title":"Watermarking LLM-Generated Datasets in Downstream Tasks","created":"2025-06-16","cited_by_count":1,"area":"safety"},{"id":"2507.10475","title":"Can You Detect the Difference?","created":"2025-07-14","cited_by_count":1,"area":null},{"id":"2510.18019","title":"Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translation","created":"2025-10-20","cited_by_count":1,"area":"safety"},{"id":"2604.27666","title":"VOW: Verifiable and Oblivious Watermark Detection for Large Language Models","created":"2026-04-30","cited_by_count":1,"area":"safety"},{"id":"2605.11653","title":"Every Bit, Everywhere, All at Once: A Binomial Multibit LLM Watermark","created":"2026-05-12","cited_by_count":1,"area":"safety"},{"id":"2605.23175","title":"Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection","created":"2026-05-22","cited_by_count":1,"area":"safety"},{"id":"2605.29434","title":"AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing","created":"2026-05-28","cited_by_count":1,"area":"safety"},{"id":"2608.12713","title":"Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks","created":"2026-08-13","cited_by_count":1,"area":"safety"},{"id":"2608.27666","title":"Semantic Watermarking with Order-Robust Detection over Sub-sentence Units","created":"2026-08-27","cited_by_count":1,"area":"safety"},{"id":"2609.14257","title":"DenMark: Robust Semantic Watermarking for Diffusion Language Models","created":"2026-09-13","cited_by_count":1,"area":"diffusion"},{"id":"2508.13131","title":"Improving Detection of Watermarked Language Models","created":"2025-08-18","cited_by_count":0,"area":"safety"},{"id":"2601.04534","title":"BanglaLorica: Design and Evaluation of a Robust Watermarking Algorithm for Large Language Models in Bangla Text Generation","created":"2026-01-08","cited_by_count":0,"area":"safety"},{"id":"2603.14968","title":"Rethinking LLM Watermark Detection in Black-Box Settings: A Non-Intrusive Third-Party Framework","created":"2026-03-16","cited_by_count":0,"area":"safety"},{"id":"2604.12216","title":"TimeMark: A Trustworthy Time Watermarking Framework for Exact Generation-Time Recovery from AIGC","created":"2026-04-14","cited_by_count":0,"area":"safety"},{"id":"2605.04305","title":"SWAN: Semantic Watermarking with Abstract Meaning Representation","created":"2026-05-05","cited_by_count":0,"area":null},{"id":"2605.08964","title":"Trustworthy AI: Ensuring Reliability and Accountability from Models to Agents","created":"2026-05-09","cited_by_count":0,"area":"agents"},{"id":"2608.03093","title":"DHMark: Public-Key Watermarking for LLM-Generated Text via Diffie-Hellman-Guided Rejection Sampling","created":"2026-08-04","cited_by_count":0,"area":"safety"},{"id":"2608.18102","title":"Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Text","created":"2026-06-09","cited_by_count":0,"area":"safety"},{"id":"2609.03749","title":"Rent-a-RAG: Embedding-Space Watermarks for Auditing Third-Party RAG","created":"2026-09-03","cited_by_count":0,"area":"rag"},{"id":"2609.10416","title":"TrajMark: Ownership Attribution and Segment-Level Tamper Localization for Coding-Agent Trajectories","created":"2026-09-09","cited_by_count":0,"area":"agents"},{"id":"2609.12472","title":"TripPattern: A Pattern-based Text Watermarking Method for Large Language Models","created":"2026-09-11","cited_by_count":0,"area":"safety"},{"id":"2609.35224","title":"TANGO: Watermarking Masked Diffusion Language Models in Token Pairs","created":"2026-09-28","cited_by_count":0,"area":"diffusion"},{"id":"2609.37218","title":"Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoods","created":"2026-09-29","cited_by_count":0,"area":"safety"},{"id":"2609.39623","title":"Semantic Watermarking for Malicious Image Manipulation Detection","created":"2026-09-30","cited_by_count":0,"area":null},{"id":"2610.14427","title":"ByteMark: A Unified Byte-Level Watermark for Detection Across Language Models","created":"2026-10-10","cited_by_count":0,"area":"safety"}],"next_cursor":null}