mlsanityData to 7 Oct 2026

Source Attribution for Large Language Model-Generated Data

arXiv 2310.00646 ↗First posted 1 Oct 2023cs.LG cs.AI stat.MLcited by 11

On the map: Synthetic data and self-improvement for LLMs → Privacy-preserving tabular data synthesis

also in 1 more
Abstract (arXiv)

The impressive performances of Large Language Models (LLMs) and their immense potential for commercialization have given rise to serious concerns over the Intellectual Property (IP) of their training data. In particular, the synthetic texts generated by LLMs may infringe the IP of the data being used to train the LLMs. To this end, it is imperative to be able to perform source attribution by identifying the data provider who contributed to the generation of a synthetic text by an LLM. In this paper, we show that this problem can be tackled by watermarking, i.e., by enabling an LLM to generate synthetic texts with embedded watermarks that contain information about their source(s). We identify the key properties of such watermarking frameworks (e.g., source attribution accuracy, robustness against adversaries), and propose a source attribution framework that satisfies these key properties due to our algorithmic designs. Our framework enables an LLM to learn an accurate mapping from the generated texts to data providers, which sets the foundation for effective source attribution. Extensive empirical evaluations show that our framework achieves effective source attribution.

Key facts. Cited by 11 papers in the map (data through 7 Oct 2026). Placed in Privacy-preserving tabular data synthesis, one of 13 directions in Synthetic data and self-improvement for LLMs. Builds on 22 of its 43 references that are in the map. First posted on arXiv 1 Oct 2023.

Builds on

22 of 43 references.

References · 22

  1. 2022Training language models to follow instructions with human feedbackcited by 15,712
  2. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  3. 2023Tree of Thoughts: Deliberate Problem Solving with Large Language Modelscited by 3,155
  4. 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
  5. 2020Making Pre-trained Language Models Better Few-shot Learnerscited by 1,255
  6. 2019PEGASUS: Pre-training with Extracted Gap-sentences for Abstractive Summarizationcited by 1,100
  7. 2015A Diversity-Promoting Objective Function for Neural Conversation Modelscited by 1,068
  8. 2023A Watermark for Large Language Modelscited by 667
  9. 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 341
  10. 2023Robust Distortion-free Watermarks for Language Modelscited by 279
  11. 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 200
  12. 2018Do GANs leave artificial fingerprints?cited by 188
10 more
  1. 2021BookSum: A Collection of Datasets for Long-form Narrative Summarizationcited by 184
  2. 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 121
  3. 2019On the Use of ArXiv as a Datasetcited by 101
  4. 2021Protecting Intellectual Property of Language Generation APIs with Lexical Watermarkcited by 78
  5. 2019Neural Linguistic Steganographycited by 73
  6. 2017A Large Self-Annotated Corpus for Sarcasmcited by 63
  7. 2022Watermarking Pre-trained Language Models with Backdooringcited by 44
  8. 2022Distillation-Resistant Watermarking for Model Protection in NLPcited by 29
  9. 2023Watermarking Text Data on Large Language Models for Dataset Copyrightcited by 24
  10. 2022DeepHider: A Covert NLP Watermarking Framework Based on Multi-task Learningcited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 1; 2024: 5; 2025: 2; 2026: 3.

11 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption
  2. 2025SoK: Large Language Model Copyright Auditing via Fingerprinting
  3. 2025StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models
  4. 2025SAFE: Improving LLM Systems using Sentence-Level In-generation Attribution
  5. 2025Intrinsic Fingerprint of LLMs: Continue Training is NOT All You Need to Steal A Model!
  6. 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Models
  7. 2024Evaluation of Attribution Bias in Generator-Aware Retrieval-Augmented Large Language Models
  8. 2025How Good is Post-Hoc Watermarking With Language Model Rephrasing?