Neural Linguistic Steganography
Not on the map. Why?
Abstract (arXiv)
Whereas traditional cryptography encrypts a secret message into an unintelligible form, steganography conceals that communication is taking place by encoding a secret message into a cover signal. Language is a particularly pragmatic cover signal due to its benign occurrence and independence from any one medium. Traditionally, linguistic steganography systems encode secret messages in existing text via synonym substitution or word order rearrangements. Advances in neural language models enable previously impractical generation-based techniques. We propose a steganography technique based on arithmetic coding with large-scale neural language models. We find that our approach can generate realistic looking cover sentences as evaluated by humans, while at the same time preserving security by matching the cover message distribution with the language model distribution.
Key facts. Cited by 73 papers in the map (data through 7 Oct 2026). First posted on arXiv 3 Sep 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 5; 2022: 5; 2023: 15; 2024: 12; 2025: 15; 2026: 21.
73 papers.
Sort:
By area:
- 2023A Watermark for Large Language Modelscited by 667
- 2023Robust Distortion-free Watermarks for Language Modelscited by 279
- 2023On the Reliability of Watermarks for Large Language Modelscited by 170
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 107
- 2025Subliminal Learning: Language models transmit behavioral traits via hidden signals in datacited by 89
- 2024Watermark Stealing in Large Language Modelscited by 79
- 2023Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Modelscited by 77
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Featurescited by 76
- 2023A Survey on Detection of LLMs-Generated Contentcited by 70
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarkscited by 62
- 2024Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMscited by 52
- 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Modelscited by 51
38 more
- 2022Perfectly Secure Steganography Using Minimum Entropy Couplingcited by 42
- 2024AI as Humanity's Salieri: Quantifying Linguistic Creativity of Language Models via Systematic Attribution of Machine Text against Web Textcited by 40
- 2023Smaller Language Models are Better Black-box Machine-Generated Text Detectorscited by 35
- 2021Provably Secure Generative Linguistic Steganographycited by 34
- 2021Frustratingly Easy Edit-based Linguistic Steganography with a Masked Language Modelcited by 28
- 2023Towards Possibilities & Impossibilities of AI-generated Text Detection: A Surveycited by 28
- 2023Embarrassingly Simple Text Watermarkscited by 23
- 2023Optimizing watermarks for large language modelscited by 22
- 2023Watermarking LLMs with Weight Quantizationcited by 19
- 2025BiMark: Unbiased Multilayer Watermarking for Large Language Modelscited by 18
- 2023G3Detector: General GPT-Generated Text Detectorcited by 17
- 2024Generative Text Steganography with Large Language Modelcited by 16
- 2023Source Attribution for Large Language Model-Generated Datacited by 11
- 2024Watermarking Language Models with Error Correcting Codescited by 10
- 2025Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attackscited by 8
- 2022Addressing Segmentation Ambiguity in Neural Linguistic Steganographycited by 7
- 2025TrojanStego: Your Language Model Can Secretly Be A Steganographic Privacy Leaking Agentcited by 7
- 2021Exploiting Language Model for Efficient Linguistic Steganalysiscited by 6
- 2022Semantic-Preserving Linguistic Steganography by Pivot Translation and Semantic-Aware Bins Codingcited by 6
- 2022Autoregressive Linguistic Steganography Based on BERT and Consistency Codingcited by 6
- 2024Provably Secure Disambiguating Neural Linguistic Steganographycited by 5
- 2024OD-Stega: LLM-Based Relatively Secure Steganography via Optimized Distributionscited by 5
- 2025ImF: Implicit Fingerprint for Large Language Modelscited by 5
- 2026Tool Use Enables Undetectable Steganography in Multi-Agent LLM Systemscited by 5
- 2024Zero-shot Generative Linguistic Steganographycited by 4
- 2025Out of Control -- Why Alignment Needs Formal Control Theory (and an Alignment Control Stack)cited by 3
- 2025Addressing Tokenization Inconsistency in Steganography and Watermarking Based on Large Language Modelscited by 3
- 2026Efficient Provably Secure Linguistic Steganography via Range Codingcited by 3
- 2021Leveraging Generative Models for Covert Messaging: Challenges and Tradeoffs for "Dead-Drop" Deploymentscited by 2
- 2024Large Language Models as Carriers of Hidden Messagescited by 2
- 2024Steganography in Game Actionscited by 2
- 2025Provable Secure Steganography Based on Adaptive Dynamic Samplingcited by 2
- 2025LLMs can hide text in other text of the same lengthcited by 2
- 2026Invisible Safety Threat: Malicious Finetuning for LLM via Steganographycited by 2
- 2026Anchored Sliding Window: Toward Robust and Imperceptible Linguistic Steganographycited by 2
- 2026An Application-Layer Multi-Modal Covert-Channel Reference Monitor for LLM Agent Egresscited by 2
- 2024Task-Oriented Paraphrase Analyticscited by 1
- 2025Steganography Beyond Space-Time with Chain of Multimodal AIcited by 1
50 most cited of 73 All 73 (JSON)
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems30 Sep 2026
- 2026Codetta: High-Capacity, Keyless, and Undetectable Multi-Agent Collusion24 Sep 2026
- 2026For Your Eyes Only: Evaluating Coordination Between Isolated Language Model Instances16 Sep 2026
- 2026CARTS: Contextual Autoregressive Rank Transcoding Steganography for Full-Capacity Keyed Text Encoding9 Sep 2026
- 2026A Comprehensive Survey on Linguistic Steganography: Methods, Countermeasures, Evaluation, and Challenges29 Aug 2026
- 2026Synchronized Logit Steering: Real-world Steganography9 Aug 2026
- 2026HiTMS: A High-Throughput Multi-Stream Linguistic Steganography Framework26 Jul 2026
- 2026Robust Text Watermarking for Large Language Models via Dual Semantic Embeddings30 Jun 2026
- 2026Tool Use Enables Undetectable Steganography in Multi-Agent LLM Systems25 Jun 2026
- 2026Now You (Still) See Me: Detecting Evasive Steganographic Payloads in LLMs8 Jun 2026
- 2026Steganography Without Modification: Hidden Communication via LLM Seeds8 Jun 2026
- 2026Hiding in Plain Floats: Steganographic Carriers for Indirect Prompt and Content Injection7 Jun 2026
38 more
- 2026FADRW: A Feature-Aware Modulated and Dynamically Reweighted Loss for Few-Shot Linguistic Steganalysis3 Jun 2026
- 2026REED: Post-Training Representation Editing for Cross-Domain Linguistic Steganalysis27 May 2026
- 2026An Application-Layer Multi-Modal Covert-Channel Reference Monitor for LLM Agent Egress20 May 2026
- 2026Text Steganography with Dynamic Codebook and Multimodal Large Language Model22 Apr 2026
- 2026Anchored Sliding Window: Toward Robust and Imperceptible Linguistic Steganography10 Apr 2026
- 2026ACF: A Collaborative Framework for Agent Covert Communication under Cognitive Asymmetry9 Apr 2026
- 2026Efficient Provably Secure Linguistic Steganography via Range Coding9 Apr 2026
- 2026Invisible Safety Threat: Malicious Finetuning for LLM via Steganography9 Mar 2026
- 2026Hide and Seek in Embedding Space: Geometry-based Steganography and Detection in Large Language Models30 Jan 2026
- 2025SteganoBackdoor: Evading Data-Poisoning Defenses via Steganographic Backdoors18 Nov 2025
- 2025A Content-Preserving Secure Linguistic Steganography16 Nov 2025
- 2025LLMs can hide text in other text of the same length22 Oct 2025
- 2025A High-Capacity and Secure Disambiguation Algorithm for Neural Linguistic Steganography26 Sep 2025
- 2025Addressing Tokenization Inconsistency in Steganography and Watermarking Based on Large Language Models28 Aug 2025
- 2025Subliminal Learning: Language models transmit behavioral traits via hidden signals in data20 Jul 2025
- 2025Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks8 Jul 2025
- 2025Out of Control -- Why Alignment Needs Formal Control Theory (and an Alignment Control Stack)21 Jun 2025
- 2025BiMark: Unbiased Multilayer Watermarking for Large Language Models19 Jun 2025
- 2025TrojanStego: Your Language Model Can Secretly Be A Steganographic Privacy Leaking Agent26 May 2025
- 2025GSDFuse: Capturing Cognitive Inconsistencies from Multi-Dimensional Weak Signals in Social Media Steganalysis20 May 2025
- 2025A Character-based Diffusion Embedding Algorithm for Enhancing the Generation Quality of Generative Linguistic Steganographic Texts2 May 2025
- 2025Provable Secure Steganography Based on Adaptive Dynamic Sampling17 Apr 2025
- 2025ImF: Implicit Fingerprint for Large Language Models25 Mar 2025
- 2025Steganography Beyond Space-Time with Chain of Multimodal AI25 Feb 2025
- 2024Steganography in Game Actions11 Dec 2024
- 2024OD-Stega: LLM-Based Relatively Secure Steganography via Optimized Distributions6 Oct 2024
- 2024AI as Humanity's Salieri: Quantifying Linguistic Creativity of Language Models via Systematic Attribution of Machine Text against Web Text5 Oct 2024
- 2024Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMs2 Oct 2024
- 2024Watermarking Language Models with Error Correcting Codes12 Jun 2024
- 2024Large Language Models as Carriers of Hidden Messages4 Jun 2024
- 2024Generative Text Steganography with Large Language Model16 Apr 2024
- 2024Task-Oriented Paraphrase Analytics26 Mar 2024
- 2024Provably Secure Disambiguating Neural Linguistic Steganography26 Mar 2024
- 2024Zero-shot Generative Linguistic Steganography16 Mar 2024
- 2024Watermark Stealing in Large Language Models29 Feb 2024
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganography12 Feb 2024
- 2023Optimizing watermarks for large language models28 Dec 2023
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec 2023
50 newest of 73 All 73 (JSON)
- 2023A Watermark for Large Language Modelscited by 667
- 2023Robust Distortion-free Watermarks for Language Modelscited by 279
- 2023On the Reliability of Watermarks for Large Language Modelscited by 170
- 2024Watermark Stealing in Large Language Modelscited by 79
- 2023Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Modelscited by 77
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Featurescited by 76
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarkscited by 62
- 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Modelscited by 51
- 2023Embarrassingly Simple Text Watermarkscited by 23
- 2023Optimizing watermarks for large language modelscited by 22
- 2023Watermarking LLMs with Weight Quantizationcited by 19
- 2025BiMark: Unbiased Multilayer Watermarking for Large Language Modelscited by 18
12 most cited of 16 All 16 (JSON)
- 2026Robust Text Watermarking for Large Language Models via Dual Semantic Embeddings30 Jun 2026
- 2025Addressing Tokenization Inconsistency in Steganography and Watermarking Based on Large Language Models28 Aug 2025
- 2025Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks8 Jul 2025
- 2025BiMark: Unbiased Multilayer Watermarking for Large Language Models19 Jun 2025
- 2024Watermarking Language Models with Error Correcting Codes12 Jun 2024
- 2024Watermark Stealing in Large Language Models29 Feb 2024
- 2023Optimizing watermarks for large language models28 Dec 2023
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec 2023
- 2023Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models7 Nov 2023
- 2023Watermarking LLMs with Weight Quantization17 Oct 2023
- 2023Embarrassingly Simple Text Watermarks13 Oct 2023
- 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Models1 Aug 2023
12 newest of 16 All 16 (JSON)
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganographycited by 107
- 2026Tool Use Enables Undetectable Steganography in Multi-Agent LLM Systemscited by 5
- 2026An Application-Layer Multi-Modal Covert-Channel Reference Monitor for LLM Agent Egresscited by 2
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systemscited by 1
- 2026Codetta: High-Capacity, Keyless, and Undetectable Multi-Agent Collusioncited by 0
- 2026Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems30 Sep 2026
- 2026Codetta: High-Capacity, Keyless, and Undetectable Multi-Agent Collusion24 Sep 2026
- 2026Tool Use Enables Undetectable Steganography in Multi-Agent LLM Systems25 Jun 2026
- 2026An Application-Layer Multi-Modal Covert-Channel Reference Monitor for LLM Agent Egress20 May 2026
- 2024Secret Collusion among AI Agents: Multi-Agent Deception via Steganography12 Feb 2024
- 2023Source Attribution for Large Language Model-Generated Datacited by 11
- 2025Subliminal Learning: Language models transmit behavioral traits via hidden signals in datacited by 89
- 2023A Survey on Detection of LLMs-Generated Contentcited by 70
- 2024Hidden in Plain Text: Emergence & Mitigation of Steganographic Collusion in LLMscited by 52
- 2022Perfectly Secure Steganography Using Minimum Entropy Couplingcited by 42
- 2024AI as Humanity's Salieri: Quantifying Linguistic Creativity of Language Models via Systematic Attribution of Machine Text against Web Textcited by 40
- 2023Smaller Language Models are Better Black-box Machine-Generated Text Detectorscited by 35
- 2021Provably Secure Generative Linguistic Steganographycited by 34
- 2021Frustratingly Easy Edit-based Linguistic Steganography with a Masked Language Modelcited by 28
- 2023Towards Possibilities & Impossibilities of AI-generated Text Detection: A Surveycited by 28
- 2023G3Detector: General GPT-Generated Text Detectorcited by 17
- 2024Generative Text Steganography with Large Language Modelcited by 16
- 2022Addressing Segmentation Ambiguity in Neural Linguistic Steganographycited by 7
12 most cited of 50 All 50 (JSON)
- 2026For Your Eyes Only: Evaluating Coordination Between Isolated Language Model Instances16 Sep 2026
- 2026CARTS: Contextual Autoregressive Rank Transcoding Steganography for Full-Capacity Keyed Text Encoding9 Sep 2026
- 2026A Comprehensive Survey on Linguistic Steganography: Methods, Countermeasures, Evaluation, and Challenges29 Aug 2026
- 2026Synchronized Logit Steering: Real-world Steganography9 Aug 2026
- 2026HiTMS: A High-Throughput Multi-Stream Linguistic Steganography Framework26 Jul 2026
- 2026Now You (Still) See Me: Detecting Evasive Steganographic Payloads in LLMs8 Jun 2026
- 2026Steganography Without Modification: Hidden Communication via LLM Seeds8 Jun 2026
- 2026Hiding in Plain Floats: Steganographic Carriers for Indirect Prompt and Content Injection7 Jun 2026
- 2026FADRW: A Feature-Aware Modulated and Dynamically Reweighted Loss for Few-Shot Linguistic Steganalysis3 Jun 2026
- 2026REED: Post-Training Representation Editing for Cross-Domain Linguistic Steganalysis27 May 2026
- 2026Text Steganography with Dynamic Codebook and Multimodal Large Language Model22 Apr 2026
- 2026Anchored Sliding Window: Toward Robust and Imperceptible Linguistic Steganography10 Apr 2026
12 newest of 50 All 50 (JSON)