Improving the Generation Quality of Watermarked Large Language Models via Word Importance Scoring
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
The strong general capabilities of Large Language Models (LLMs) bring potential ethical risks if they are unrestrictedly accessible to malicious users. Token-level watermarking inserts watermarks in the generated texts by altering the token probability distributions with a private random number generator seeded by its prefix tokens. However, this watermarking algorithm alters the logits during generation, which can lead to a downgraded text quality if it chooses to promote tokens that are less relevant given the input. In this work, we propose to improve the quality of texts generated by a watermarked language model by Watermarking with Importance Scoring (WIS). At each generation step, we estimate the importance of the token to generate, and prevent it from being impacted by watermarking if it is important for the semantic correctness of the output. We further propose three methods to predict importance scoring, including a perturbation-based method and two model-based methods. Empirical experiments show that our method can generate texts with better quality with comparable level of detection rate.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 17 of its 23 references that are in the map. First posted on arXiv 16 Nov 2023.
Builds on
17 of 23 references.
Closest ancestors · 2
Same direction, newest first
- 2023Watermarking Conditional Text Generation for AI Detection: Unveiling Challenges and a Semantic-Aware Watermark Remedy25 Jul
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Features3 May
Other references · 15
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2018Don't Give Me the Details, Just the Summary! Topic-Aware Convolutional Neural Networks for Extreme Summarizationcited by 1,308
- 2016Abstractive Text Summarization Using Sequence-to-Sequence RNNs and Beyondcited by 809
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
- 2019ELI5: Long Form Question Answeringcited by 567
- 2019Release Strategies and the Social Impacts of Language Modelscited by 505
- 2023A Survey of Hallucination in Large Foundation Modelscited by 365
- 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 334
- 2018Analysis Methods in Neural Language Processing: A Surveycited by 276
3 more
- 2023LLM Lies: Hallucinations are not Bugs, but Features as Adversarial Examplescited by 177
- 2022Evaluating the Factual Consistency of Large Language Models Through News Summarizationcited by 90
- 2021Evaluating the Faithfulness of Importance Measures in NLP by Recursively Masking Allegedly Important Tokens and Retrainingcited by 31
Built on by
Citing papers per year: 2023: 1; 2024: 3; 2025: 2.
6 papers.
- 2023Optimizing watermarks for large language modelscited by 22
- 2024WaterJudge: Quality-Detection Trade-off when Watermarking Large Language Modelscited by 9
- 2024WaterPool: A Watermark Mitigating Trade-offs among Imperceptibility, Efficacy and Robustnesscited by 6
- 2024B4: A Black-Box Scrubbing Attack on LLM Watermarkscited by 5
- 2025Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimizationcited by 1
- 2025CEFW: A Comprehensive Evaluation Framework for Watermark in Large Language Modelscited by 0
- 2025Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimization13 Oct 2025
- 2025CEFW: A Comprehensive Evaluation Framework for Watermark in Large Language Models24 Mar 2025
- 2024B4: A Black-Box Scrubbing Attack on LLM Watermarks2 Nov 2024
- 2024WaterPool: A Watermark Mitigating Trade-offs among Imperceptibility, Efficacy and Robustness22 May 2024
- 2024WaterJudge: Quality-Detection Trade-off when Watermarking Large Language Models28 Mar 2024
- 2023Optimizing watermarks for large language models28 Dec 2023