{"total":71,"rows":[{"id":"2312.07913","title":"A Survey of Text Watermarking in the Era of Large Language Models","created":"2023-12-13","cited_by_count":112,"area":"safety"},{"id":"2312.17673","title":"Jatmo: Prompt Injection Defense by Task-Specific Finetuning","created":"2023-12-29","cited_by_count":106,"area":"safety"},{"id":"2405.10051","title":"MarkLLM: An Open-Source Toolkit for LLM Watermarking","created":"2024-05-16","cited_by_count":95,"area":"safety"},{"id":"2402.19361","title":"Watermark Stealing in Large Language Models","created":"2024-02-29","cited_by_count":92,"area":"safety"},{"id":"2402.14904","title":"Watermarking Makes Language Models Radioactive","created":"2024-02-22","cited_by_count":58,"area":"safety"},{"id":"2403.04808","title":"WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off","created":"2024-03-06","cited_by_count":54,"area":"safety"},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50,"area":"safety"},{"id":"2401.16820","title":"Provably Robust Multi-bit Watermarking for AI-generated Text","created":"2024-01-30","cited_by_count":47,"area":"safety"},{"id":"2402.09370","title":"Pseudorandom Error-Correcting Codes","created":"2024-02-14","cited_by_count":44,"area":"safety"},{"id":"2402.18059","title":"Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models","created":"2024-02-28","cited_by_count":34,"area":"safety"},{"id":"2510.09263","title":"SynthID-Image: Image watermarking at internet scale","created":"2025-10-10","cited_by_count":31,"area":null},{"id":"2502.06872","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","created":"2025-02-08","cited_by_count":30,"area":"rag"},{"id":"2312.07930","title":"Towards Optimal Statistical Watermarking","created":"2023-12-13","cited_by_count":26,"area":"safety"},{"id":"2312.17295","title":"Optimizing watermarks for large language models","created":"2023-12-28","cited_by_count":25,"area":"safety"},{"id":"2405.20777","title":"Black-Box Detection of Language Model Watermarks","created":"2024-05-28","cited_by_count":23,"area":"safety"},{"id":"2411.11203","title":"Debiasing Watermarks for Large Language Models via Maximal Coupling","created":"2024-11-17","cited_by_count":19,"area":"safety"},{"id":"2410.02440","title":"Optimizing Adaptive Attacks against Watermarks for Language Models","created":"2024-10-03","cited_by_count":16,"area":"safety"},{"id":"2410.03537","title":"Ward: Provable RAG Dataset Inference via LLM Watermarks","created":"2024-10-04","cited_by_count":16,"area":"safety"},{"id":"2410.13808","title":"De-mark: Watermark Removal in Large Language Models","created":"2024-10-17","cited_by_count":14,"area":"safety"},{"id":"2410.18861","title":"Provably Robust Watermarks for Open-Source Language Models","created":"2024-10-24","cited_by_count":13,"area":"safety"},{"id":"2506.05502","title":"StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models","created":"2025-06-05","cited_by_count":12,"area":"safety"},{"id":"2406.10281","title":"Watermarking Language Models with Error Correcting Codes","created":"2024-06-12","cited_by_count":10,"area":"safety"},{"id":"2505.08878","title":"Optimized Couplings for Watermarking Large Language Models","created":"2025-05-13","cited_by_count":9,"area":"safety"},{"id":"2505.23814","title":"Watermarking Without Standards Is Not AI Governance","created":"2025-05-27","cited_by_count":9,"area":"safety"},{"id":"2507.06274","title":"Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks","created":"2025-07-08","cited_by_count":9,"area":"safety"},{"id":"2509.09112","title":"Character-Level Perturbations Disrupt LLM Watermarks","created":"2025-09-11","cited_by_count":9,"area":"safety"},{"id":"2409.09739","title":"PersonaMark: Personalized LLM watermarking for model protection and user attribution","created":"2024-09-15","cited_by_count":7,"area":"safety"},{"id":"2410.01285","title":"Enhancing Training Data Attribution for Large Language Models with Fitting Error Consideration","created":"2024-10-02","cited_by_count":7,"area":null},{"id":"2509.24043","title":"An Ensemble Framework for Unbiased Language Model Watermarking","created":"2025-09-28","cited_by_count":6,"area":"safety"},{"id":"2510.10987","title":"DITTO: A Spoofing Attack Framework on Watermarked LLMs via Knowledge Distillation","created":"2025-10-13","cited_by_count":6,"area":"safety"},{"id":"2602.03812","title":"Antidistillation Fingerprinting","created":"2026-02-03","cited_by_count":6,"area":null},{"id":"2509.24048","title":"Analyzing and Evaluating Unbiased Language Model Watermark","created":"2025-09-28","cited_by_count":5,"area":"safety"},{"id":"2510.03944","title":"On the Empirical Power of Goodness-of-Fit Tests in Watermark Detection","created":"2025-10-04","cited_by_count":5,"area":null},{"id":"2605.12456","title":"TextSeal: A Localized LLM Watermark for Provenance & Distillation Protection","created":"2026-05-12","cited_by_count":5,"area":"safety"},{"id":"2607.08400","title":"TRACE: A Two-Channel Robust Attribution Watermark via Complementary Embeddings for LLM-Agent Trajectories","created":"2026-07-09","cited_by_count":5,"area":"agents"},{"id":"2407.04794","title":"On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks","created":"2024-07-05","cited_by_count":4,"area":"safety"},{"id":"2409.17518","title":"Multi-Designated Detector Watermarking for Language Models","created":"2024-09-26","cited_by_count":4,"area":"safety"},{"id":"2507.07871","title":"Mitigating Watermark Forgery in Generative Models via Randomized Key Selection","created":"2025-07-10","cited_by_count":4,"area":"safety"},{"id":"2508.03829","title":"Majority Bit-Aware Watermarking For Large Language Models","created":"2025-08-05","cited_by_count":4,"area":"safety"},{"id":"2510.09655","title":"Data Provenance Auditing of Fine-Tuned Large Language Models with a Text-Preserving Technique","created":"2025-10-07","cited_by_count":4,"area":null},{"id":"2602.14030","title":"MC$^2$Mark: Distortion-Free Multi-Bit Watermarking for Long Messages","created":"2026-02-15","cited_by_count":4,"area":"safety"},{"id":"2604.05242","title":"XMark: Reliable Multi-Bit Watermarking for LLM-Generated Texts","created":"2026-04-06","cited_by_count":3,"area":"safety"},{"id":"2501.02441","title":"A Statistical Hypothesis Testing Framework for Data Misappropriation Detection in Large Language Models","created":"2025-01-05","cited_by_count":2,"area":null},{"id":"2509.20924","title":"RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks","created":"2025-09-25","cited_by_count":2,"area":"safety"},{"id":"2512.16904","title":"How Good is Post-Hoc Watermarking With Language Model Rephrasing?","created":"2025-12-18","cited_by_count":2,"area":"safety"},{"id":"2602.14286","title":"Online LLM watermark detection via e-processes","created":"2026-02-15","cited_by_count":2,"area":"safety"},{"id":"2603.30017","title":"Refined Detection for Gumbel Watermarking","created":"2026-03-31","cited_by_count":2,"area":null},{"id":"2604.11546","title":"RLSpoofer: A Lightweight Evaluator for LLM Watermark Spoofing Resilience","created":"2026-04-13","cited_by_count":2,"area":"safety"},{"id":"2604.13776","title":"Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking","created":"2026-04-15","cited_by_count":2,"area":"safety"},{"id":"2605.13095","title":"Watermarking Should Be Treated as a Monitoring Primitive","created":"2026-05-13","cited_by_count":2,"area":null},{"id":"2506.06409","title":"HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions","created":"2025-06-06","cited_by_count":1,"area":"safety"},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2605.05503","title":"Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks","created":"2026-05-06","cited_by_count":1,"area":"diffusion"},{"id":"2605.23175","title":"Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection","created":"2026-05-22","cited_by_count":1,"area":"safety"},{"id":"2607.10103","title":"LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization","created":"2026-07-11","cited_by_count":1,"area":"safety"},{"id":"2608.20047","title":"Auditing Cross-Lingual Fairness in Language Model Watermarking","created":"2026-08-20","cited_by_count":1,"area":"safety"},{"id":"2407.13803","title":"Less is More: Sparse Watermarking in LLMs with Enhanced Text Quality","created":"2024-07-17","cited_by_count":0,"area":"safety"},{"id":"2407.14206","title":"Watermark Smoothing Attacks against Language Models","created":"2024-07-19","cited_by_count":0,"area":"safety"},{"id":"2502.18608","title":"Breaking Distortion-free Watermarks in Large Language Models","created":"2025-02-25","cited_by_count":0,"area":"safety"},{"id":"2511.03641","title":"Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology","created":"2025-11-05","cited_by_count":0,"area":"safety"},{"id":"2605.08964","title":"Trustworthy AI: Ensuring Reliability and Accountability from Models to Agents","created":"2026-05-09","cited_by_count":0,"area":"agents"},{"id":"2607.00325","title":"Watermarking for Proprietary Dataset Protection","created":"2026-07-01","cited_by_count":0,"area":null},{"id":"2607.21958","title":"Efficient Online LLM Watermark Detection via Rao-Blackwellized E-Processes","created":"2026-07-24","cited_by_count":0,"area":"safety"},{"id":"2608.06416","title":"WorldMark: A Plug-and-Play World Knowledge Interface for Cross-Host Language Model Watermarking","created":"2026-08-05","cited_by_count":0,"area":"safety"},{"id":"2608.19369","title":"Linguistic Holonomy and Statistical Watermarks: Inner Geometry of Meaning-Preserving Transformations","created":"2026-08-19","cited_by_count":0,"area":"safety"},{"id":"2609.09604","title":"Watermarks Without Verification: AI Text Watermarking After the EU AI Act","created":"2026-09-09","cited_by_count":0,"area":"safety"},{"id":"2609.36372","title":"TTMark: Pairwise Distortion-Free Watermarking Beyond Single-Token Entropy","created":"2026-09-28","cited_by_count":0,"area":"safety"},{"id":"2610.03124","title":"The Fragility of Trigger-Tag Mechanisms for Misuse Detection in Open-Weight LLMs","created":"2026-10-02","cited_by_count":0,"area":"safety"},{"id":"2610.09552","title":"Constitution-Guided Watermarking","created":"2026-10-07","cited_by_count":0,"area":null},{"id":"2610.14378","title":"Tokenization-Invariant Watermarking: A Byte-Local Method for LLM Text","created":"2026-10-09","cited_by_count":0,"area":"safety"}],"next_cursor":null}