{"total":81,"rows":[{"id":"2312.07913","title":"A Survey of Text Watermarking in the Era of Large Language Models","created":"2023-12-13","cited_by_count":112,"area":"safety"},{"id":"2405.10051","title":"MarkLLM: An Open-Source Toolkit for LLM Watermarking","created":"2024-05-16","cited_by_count":95,"area":"safety"},{"id":"2402.19361","title":"Watermark Stealing in Large Language Models","created":"2024-02-29","cited_by_count":92,"area":"safety"},{"id":"2402.14904","title":"Watermarking Makes Language Models Radioactive","created":"2024-02-22","cited_by_count":58,"area":"safety"},{"id":"2403.04808","title":"WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off","created":"2024-03-06","cited_by_count":54,"area":"safety"},{"id":"2411.18479","title":"SoK: Watermarking for AI-Generated Content","created":"2024-11-27","cited_by_count":51,"area":"safety"},{"id":"2402.16187","title":"No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices","created":"2024-02-25","cited_by_count":50,"area":"safety"},{"id":"2502.06872","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","created":"2025-02-08","cited_by_count":30,"area":"rag"},{"id":"2312.17295","title":"Optimizing watermarks for large language models","created":"2023-12-28","cited_by_count":25,"area":"safety"},{"id":"2406.01946","title":"Bileve: Securing Text Provenance in Large Language Models Against Spoofing with Bi-level Signature","created":"2024-06-04","cited_by_count":25,"area":"safety"},{"id":"2504.13146","title":"Antidistillation Sampling","created":"2025-04-17","cited_by_count":25,"area":null},{"id":"2405.20777","title":"Black-Box Detection of Language Model Watermarks","created":"2024-05-28","cited_by_count":23,"area":"safety"},{"id":"2403.10553","title":"Learning to Watermark LLM-generated Text via Reinforcement Learning","created":"2024-03-13","cited_by_count":22,"area":"safety"},{"id":"2402.09199","title":"Ten Words Only Still Help: Improving Black-Box AI-Generated Text Detection via Proxy-Guided Efficient Re-Sampling","created":"2024-02-14","cited_by_count":20,"area":null},{"id":"2508.11548","title":"Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends","created":"2025-08-15","cited_by_count":20,"area":"safety"},{"id":"2502.11598","title":"Can LLM Watermarks Robustly Prevent Unauthorized Knowledge Distillation?","created":"2025-02-17","cited_by_count":19,"area":"safety"},{"id":"2410.02099","title":"A Watermark for Black-Box Language Models","created":"2024-10-02","cited_by_count":16,"area":"safety"},{"id":"2411.11478","title":"SoK: On the Role and Future of AIGC Watermarking in the Era of Gen-AI","created":"2024-11-18","cited_by_count":14,"area":"safety"},{"id":"2406.02633","title":"Edit Distance Robust Watermarks via Indexing Pseudorandom Codes","created":"2024-06-04","cited_by_count":13,"area":null},{"id":"2410.18861","title":"Provably Robust Watermarks for Open-Source Language Models","created":"2024-10-24","cited_by_count":13,"area":"safety"},{"id":"2410.06467","title":"WAPITI: A Watermark for Finetuned Open-Source LLMs","created":"2024-10-09","cited_by_count":12,"area":"safety"},{"id":"2510.17489","title":"DETree: DEtecting Human-AI Collaborative Texts via Tree-Structured Hierarchical Representation Learning","created":"2025-10-20","cited_by_count":12,"area":null},{"id":"2504.17480","title":"Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation","created":"2025-04-24","cited_by_count":11,"area":"safety"},{"id":"2510.19796","title":"Blackbox Model Provenance via Palimpsestic Membership Inference","created":"2025-10-22","cited_by_count":11,"area":"safety"},{"id":"2412.03123","title":"Robust Multi-bit Text Watermark with LLM-based Paraphrasers","created":"2024-12-04","cited_by_count":10,"area":"safety"},{"id":"2505.16934","title":"In-Context Watermarks for Large Language Models","created":"2025-05-22","cited_by_count":10,"area":"safety"},{"id":"2505.16723","title":"LLM Fingerprinting via Semantically Conditioned Watermarks","created":"2025-05-22","cited_by_count":9,"area":"safety"},{"id":"2507.06274","title":"Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks","created":"2025-07-08","cited_by_count":9,"area":"safety"},{"id":"2505.12682","title":"RAFP: Identifying LLM Lineages via Rare-Region Fingerprints","created":"2025-05-19","cited_by_count":8,"area":null},{"id":"2509.26598","title":"Are Robust LLM Fingerprints Adversarially Robust?","created":"2025-09-30","cited_by_count":8,"area":null},{"id":"2411.01222","title":"$B^4$: A Black-Box Scrubbing Attack on LLM Watermarks","created":"2024-11-02","cited_by_count":7,"area":"safety"},{"id":"2508.08211","title":"SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders","created":"2025-08-11","cited_by_count":7,"area":"safety"},{"id":"2510.18333","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","created":"2025-10-21","cited_by_count":7,"area":"safety"},{"id":"2605.10977","title":"PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attacks","created":"2026-05-09","cited_by_count":7,"area":"safety"},{"id":"2410.02693","title":"Discovering Spoofing Attempts on Language Model Watermarks","created":"2024-10-03","cited_by_count":6,"area":"safety"},{"id":"2410.22307","title":"SVIP: Towards Verifiable Inference of Open-source Large Language Models","created":"2024-10-29","cited_by_count":6,"area":null},{"id":"2502.17259","title":"Detecting Benchmark Contamination Through Watermarking","created":"2025-02-24","cited_by_count":6,"area":null},{"id":"2503.22330","title":"WMCopier: Forging Invisible Image Watermarks on Arbitrary Images","created":"2025-03-28","cited_by_count":6,"area":null},{"id":"2505.14112","title":"Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking","created":"2025-05-20","cited_by_count":6,"area":"safety"},{"id":"2602.03812","title":"Antidistillation Fingerprinting","created":"2026-02-03","cited_by_count":6,"area":null},{"id":"2407.11100","title":"Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond","created":"2024-07-15","cited_by_count":5,"area":"safety"},{"id":"2505.09924","title":"From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models","created":"2025-05-15","cited_by_count":5,"area":"safety"},{"id":"2509.07287","title":"Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm","created":"2025-09-08","cited_by_count":5,"area":null},{"id":"2509.07755","title":"Factuality Beyond Coherence: Evaluating LLM Watermarking Methods for Medical Texts","created":"2025-09-09","cited_by_count":5,"area":"safety"},{"id":"2605.12456","title":"TextSeal: A Localized LLM Watermark for Provenance & Distillation Protection","created":"2026-05-12","cited_by_count":5,"area":"safety"},{"id":"2407.04794","title":"On Evaluating The Performance of Watermarked Machine-Generated Texts Under Adversarial Attacks","created":"2024-07-05","cited_by_count":4,"area":"safety"},{"id":"2504.06446","title":"Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Models","created":"2025-04-08","cited_by_count":4,"area":"safety"},{"id":"2507.07871","title":"Mitigating Watermark Forgery in Generative Models via Randomized Key Selection","created":"2025-07-10","cited_by_count":4,"area":"safety"},{"id":"2403.15740","title":"Protecting Copyrighted Material with Unique Identifiers in Large Language Model Training","created":"2024-03-23","cited_by_count":3,"area":"safety"},{"id":"2409.19708","title":"A Certified Robust Watermark For Large Language Models","created":"2024-09-29","cited_by_count":3,"area":"safety"},{"id":"2510.21946","title":"$\\delta$-STEAL: LLM Stealing Attack with Local Differential Privacy","created":"2025-10-24","cited_by_count":3,"area":"safety"},{"id":"2603.17445","title":"When Only the Final Text Survives: Implicit Execution Tracing for Multi-Agent Auditing","created":"2026-03-18","cited_by_count":3,"area":null},{"id":"2506.05594","title":"SoK: Are Watermarks in LLMs Ready for Deployment?","created":"2025-06-05","cited_by_count":2,"area":"safety"},{"id":"2510.16830","title":"Verifiable Fine-Tuning for LLMs: Zero-Knowledge Training Proofs Bound to Data Provenance and Policy","created":"2025-10-19","cited_by_count":2,"area":null},{"id":"2511.00988","title":"Advancing Machine-Generated Text Detection from an Easy to Hard Supervision Perspective","created":"2025-11-02","cited_by_count":2,"area":null},{"id":"2604.11546","title":"RLSpoofer: A Lightweight Evaluator for LLM Watermark Spoofing Resilience","created":"2026-04-13","cited_by_count":2,"area":"safety"},{"id":"2604.22438","title":"SSG: Logit-Balanced Vocabulary Partitioning for LLM Watermarking","created":"2026-04-24","cited_by_count":2,"area":"safety"},{"id":"2605.13095","title":"Watermarking Should Be Treated as a Monitoring Primitive","created":"2026-05-13","cited_by_count":2,"area":null},{"id":"2605.29245","title":"Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Content","created":"2026-05-28","cited_by_count":1,"area":"safety"},{"id":"2607.10103","title":"LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization","created":"2026-07-11","cited_by_count":1,"area":"safety"},{"id":"2407.13803","title":"Less is More: Sparse Watermarking in LLMs with Enhanced Text Quality","created":"2024-07-17","cited_by_count":0,"area":"safety"},{"id":"2502.18608","title":"Breaking Distortion-free Watermarks in Large Language Models","created":"2025-02-25","cited_by_count":0,"area":"safety"},{"id":"2504.12229","title":"Watermarking Needs Input Repetition Masking","created":"2025-04-16","cited_by_count":0,"area":null},{"id":"2508.13131","title":"Improving Detection of Watermarked Language Models","created":"2025-08-18","cited_by_count":0,"area":"safety"},{"id":"2509.12574","title":"Yet Another Watermark for Large Language Models","created":"2025-09-16","cited_by_count":0,"area":"safety"},{"id":"2511.03641","title":"Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology","created":"2025-11-05","cited_by_count":0,"area":"safety"},{"id":"2512.04044","title":"MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking","created":"2025-12-03","cited_by_count":0,"area":"safety"},{"id":"2601.11629","title":"Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs","created":"2026-01-14","cited_by_count":0,"area":"safety"},{"id":"2603.14968","title":"Rethinking LLM Watermark Detection in Black-Box Settings: A Non-Intrusive Third-Party Framework","created":"2026-03-16","cited_by_count":0,"area":"safety"},{"id":"2604.08759","title":"Optimal Multi-bit Generative Watermarking Schemes Under Worst-Case False-Alarm Constraints","created":"2026-04-09","cited_by_count":0,"area":"safety"},{"id":"2604.10893","title":"Beyond A Fixed Seal: Adaptive Stealing Watermark in Large Language Models","created":"2026-04-13","cited_by_count":0,"area":"safety"},{"id":"2607.20435","title":"Making Open-Source Text LLM Watermarks Durable Against Merging","created":"2026-05-11","cited_by_count":0,"area":"safety"},{"id":"2608.01112","title":"Fighting Fire with Fire: On the Feasibility of Protecting Exercises Against AI Cheating","created":"2026-08-02","cited_by_count":0,"area":null},{"id":"2608.27899","title":"OpenStamp: A Watermark for Open-Source Language Models","created":"2026-08-28","cited_by_count":0,"area":"safety"},{"id":"2608.29151","title":"WoE Wrote It? Watermarking Mixture-of-Experts LLMs for Black-Box Text Provenance","created":"2026-08-29","cited_by_count":0,"area":"safety"},{"id":"2609.03844","title":"Flip, Don't Shuffle: Watermarking LLMs at the Speed of Inference","created":"2026-09-03","cited_by_count":0,"area":"safety"},{"id":"2609.11149","title":"Break Step: Recursive Training Resonates with Replayed Sampling Noise","created":"2026-09-10","cited_by_count":0,"area":null},{"id":"2609.20457","title":"Fingerprinting Multimodal Large Language Models","created":"2026-09-17","cited_by_count":0,"area":"mllm"},{"id":"2609.35224","title":"TANGO: Watermarking Masked Diffusion Language Models in Token Pairs","created":"2026-09-28","cited_by_count":0,"area":"diffusion"},{"id":"2610.04169","title":"Language Model Fingerprinting Requires Rethinking Watermark Teachers","created":"2026-10-03","cited_by_count":0,"area":"safety"},{"id":"2610.18359","title":"Pin It on Anyone: Certified Targeted Displacement of Multi-Bit LLM Watermarks Without the Key","created":"2026-10-13","cited_by_count":0,"area":"safety"}],"next_cursor":null}