Necessary and Sufficient Watermark for Large Language Models
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
In recent years, large language models (LLMs) have achieved remarkable performances in various NLP tasks. They can generate texts that are indistinguishable from those written by humans. Such remarkable performance of LLMs increases their risk of being used for malicious purposes, such as generating fake news articles. Therefore, it is necessary to develop methods for distinguishing texts written by LLMs from those written by humans. Watermarking is one of the most powerful methods for achieving this. Although existing watermarking methods have successfully detected texts generated by LLMs, they significantly degrade the quality of the generated texts. In this study, we propose the Necessary and Sufficient Watermark (NS-Watermark) for inserting watermarks into generated texts without degrading the text quality. More specifically, we derive minimum constraints required to be imposed on the generated texts to distinguish whether LLMs or humans write the texts. Then, we formulate the NS-Watermark as a constrained optimization problem and propose an efficient algorithm to solve it. Through the experiments, we demonstrate that the NS-Watermark can generate more natural texts than existing watermarking methods and distinguish more accurately between texts written by LLMs and those written by humans. Especially in machine translation tasks, the NS-Watermark can outperform the existing watermarking method by up to 30 BLEU scores.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 26 of its 30 references that are in the map. First posted on arXiv 2 Oct 2023.
Builds on
26 of 30 references.
Closest ancestors · 11
Same direction, newest first
- 2023Unbiased Watermark for Large Language Models22 Sep
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
- 2023Undetectable Watermarks for Language Models25 May
- 2023Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark17 May
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
- 2023Protecting Language Generation Models via Invisible Watermarking6 Feb
- 2023A Watermark for Large Language Models24 Jan
- 2022CATER: Intellectual Property Protection on Text Generation APIs via Conditional Watermarks19 Sep
- 2021Protecting Intellectual Property of Language Generation APIs with Lexical Watermark5 Dec
Other references · 15
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,895
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,818
- 2022No Language Left Behind: Scaling Human-Centered Machine Translationcited by 1,290
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
- 2019Defending Against Neural Fake Newscited by 553
3 more
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 490
- 2020Distortion Agnostic Deep Watermarkingcited by 88
- 2022DeAR: A Deep-learning-based Audio Re-recording Resilient Watermarkingcited by 15
Built on by
Citing papers per year: 2023: 2; 2024: 4; 2025: 4; 2026: 6.
16 papers.
Sort:
By area:
- 2024Watermark Stealing in Large Language Modelscited by 79
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarkscited by 62
- 2024Copyright Protection in Generative AI: A Technical Perspectivecited by 35
- 2023Embarrassingly Simple Text Watermarkscited by 23
- 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approachcited by 17
- 2024Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyondcited by 4
- 2026PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attackscited by 4
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?cited by 2
- 2025SimKey: A Semantically Aware Key Module for Watermarking Language Modelscited by 2
- 2025Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimizationcited by 1
- 2026Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarkingcited by 1
- 2025Toward Copyright Integrity and Verifiability via Multi-Bit Watermarking for Intelligent Transportation Systemscited by 0
4 more
- 2026Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputscited by 0
- 2026Optimal Multi-bit Generative Watermarking Schemes Under Worst-Case False-Alarm Constraintscited by 0
- 2026Watermarking Game-Playing Agents in Perfect-Information Extensive-Form Gamescited by 0
- 2026CORE-BREW: LLR-Based Soft Decoding for Robust Multi-Bit LLM Watermarkingcited by 0
- 2026CORE-BREW: LLR-Based Soft Decoding for Robust Multi-Bit LLM Watermarking23 Jun 2026
- 2026Watermarking Game-Playing Agents in Perfect-Information Extensive-Form Games14 May 2026
- 2026PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attacks9 May 2026
- 2026Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking1 May 2026
- 2026Optimal Multi-bit Generative Watermarking Schemes Under Worst-Case False-Alarm Constraints9 Apr 2026
- 2026Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs14 Jan 2026
- 2025Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimization13 Oct 2025
- 2025SimKey: A Semantically Aware Key Module for Watermarking Language Models11 Oct 2025
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?5 Jun 2025
- 2025Toward Copyright Integrity and Verifiability via Multi-Bit Watermarking for Intelligent Transportation Systems8 Feb 2025
- 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach3 Oct 2024
- 2024Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond15 Jul 2024
4 more
- 2024Watermark Stealing in Large Language Models29 Feb 2024
- 2024Copyright Protection in Generative AI: A Technical Perspective4 Feb 2024
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec 2023
- 2023Embarrassingly Simple Text Watermarks13 Oct 2023
- 2024Watermark Stealing in Large Language Modelscited by 79
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarkscited by 62
- 2023Embarrassingly Simple Text Watermarkscited by 23
- 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approachcited by 17
- 2024Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyondcited by 4
- 2026PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attackscited by 4
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?cited by 2
- 2025SimKey: A Semantically Aware Key Module for Watermarking Language Modelscited by 2
- 2025Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimizationcited by 1
- 2026Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarkingcited by 1
- 2026Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputscited by 0
- 2026Optimal Multi-bit Generative Watermarking Schemes Under Worst-Case False-Alarm Constraintscited by 0
12 most cited of 13 All 13 (JSON)
- 2026CORE-BREW: LLR-Based Soft Decoding for Robust Multi-Bit LLM Watermarking23 Jun 2026
- 2026PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attacks9 May 2026
- 2026Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking1 May 2026
- 2026Optimal Multi-bit Generative Watermarking Schemes Under Worst-Case False-Alarm Constraints9 Apr 2026
- 2026Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs14 Jan 2026
- 2025Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimization13 Oct 2025
- 2025SimKey: A Semantically Aware Key Module for Watermarking Language Models11 Oct 2025
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?5 Jun 2025
- 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach3 Oct 2024
- 2024Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond15 Jul 2024
- 2024Watermark Stealing in Large Language Models29 Feb 2024
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec 2023
12 newest of 13 All 13 (JSON)