WatME: Towards Lossless Watermarking Through Lexical Redundancy
Not on the map. Why?
Abstract (arXiv)
Text watermarking has emerged as a pivotal technique for identifying machine-generated text. However, existing methods often rely on arbitrary vocabulary partitioning during decoding to embed watermarks, which compromises the availability of suitable tokens and significantly degrades the quality of responses. This study assesses the impact of watermarking on different capabilities of large language models (LLMs) from a cognitive science lens. Our finding highlights a significant disparity; knowledge recall and logical reasoning are more adversely affected than language generation. These results suggest a more profound effect of watermarking on LLMs than previously understood. To address these challenges, we introduce Watermarking with Mutual Exclusion (WatME), a novel approach leveraging linguistic prior knowledge of inherent lexical redundancy in LLM vocabularies to seamlessly integrate watermarks. Specifically, WatME dynamically optimizes token usage during the decoding process by applying a mutually exclusive rule to the identified lexical redundancies. This strategy effectively prevents the unavailability of appropriate tokens and preserves the expressive power of LLMs. We provide both theoretical analysis and empirical evidence showing that WatME effectively preserves the diverse capabilities of LLMs while ensuring watermark detectability.
Key facts. Cited by 22 papers in the map (data through 7 Oct 2026). Builds on 28 of its 56 references that are in the map. First posted on arXiv 16 Nov 2023.
Builds on
28 of 56 references.
References · 28
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2015Neural Machine Translation of Rare Words with Subword Unitscited by 2,898
- 2018SentencePiece: A simple and language independent subword tokenizer and detokenizer for Neural Text Processingcited by 1,973
- 2021Calibrate Before Use: Improving Few-Shot Performance of Language Modelscited by 1,371
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
- 2019Defending Against Neural Fake Newscited by 553
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 490
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 481
16 more
- 2023Can AI-Generated Text be Reliably Detected?cited by 372
- 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 334
- 2022Generate rather than Retrieve: Large Language Models are Strong Context Generatorscited by 296
- 2023Robust Distortion-free Watermarks for Language Modelscited by 279
- 2023Provable Robust Watermarking for AI-Generated Textcited by 259
- 2023GPT detectors are biased against non-native English writerscited by 175
- 2020Automatic Detection of Machine Generated Text: A Critical Surveycited by 160
- 2023Prompting and Evaluating Large Language Models for Proactive Dialogues: Clarification, Target-guided, and Non-collaborationcited by 115
- 2023Regulating ChatGPT and other Large Generative AI Modelscited by 102
- 2023Chain-of-Thought Hub: A Continuous Effort to Measure Large Language Models' Reasoning Performancecited by 102
- 2023On the Possibilities of AI-Generated Text Detectioncited by 88
- 2021Protecting Intellectual Property of Language Generation APIs with Lexical Watermarkcited by 78
- 2023Beyond Factuality: A Comprehensive Evaluation of Large Language Models as Knowledge Generatorscited by 42
- 2020Attacking Neural Text Detectorscited by 37
- 2021Frustratingly Easy Edit-based Linguistic Steganography with a Masked Language Modelcited by 28
- 2023Towards Robust Personalized Dialogue Generation via Order-Insensitive Representation Regularizationcited by 17
Built on by
Citing papers per year: 2023: 1; 2024: 0; 2025: 12; 2026: 9.
22 papers.
Sort:
By area:
- 2023A Survey of Text Watermarking in the Era of Large Language Modelscited by 102
- 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Qualitycited by 17
- 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Modelscited by 5
- 2025Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarkingcited by 5
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigmcited by 4
- 2025DITTO: A Spoofing Attack Framework on Watermarked LLMs via Knowledge Distillationcited by 4
- 2025WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarkingcited by 4
- 2026Distilling the Thought, Watermarking the Answer: A Principle Semantic Guided Watermark for Large Reasoning Modelscited by 3
- 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Modelcited by 3
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?cited by 2
- 2025CATMark: A Context-Aware Thresholding Framework for Robust Cross-Task Watermarking in Large Language Modelscited by 2
- 2025A Linguistics-Aware LLM Watermarking via Syntactic Predictabilitycited by 2
10 more
- 2025Advancing Machine-Generated Text Detection from an Easy to Hard Supervision Perspectivecited by 2
- 2025Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translationcited by 1
- 2026Robust LLM Watermarking with Minimal Semantic Distortion for IP Protectioncited by 1
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustnesscited by 1
- 2025Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technologycited by 0
- 2026SSG: Logit-Balanced Vocabulary Partitioning for LLM Watermarkingcited by 0
- 2026Marking the Wrong Symptoms: Evaluating LLM Watermarks in Medical Textscited by 0
- 2026Fighting Fire with Fire: On the Feasibility of Protecting Exercises Against AI Cheatingcited by 0
- 2026TrajMark: Ownership Attribution and Segment-Level Tamper Localization for Coding-Agent Trajectoriescited by 0
- 2026TripPattern: A Pattern-based Text Watermarking Method for Large Language Modelscited by 0
- 2026TripPattern: A Pattern-based Text Watermarking Method for Large Language Models11 Sep 2026
- 2026TrajMark: Ownership Attribution and Segment-Level Tamper Localization for Coding-Agent Trajectories9 Sep 2026
- 2026Fighting Fire with Fire: On the Feasibility of Protecting Exercises Against AI Cheating2 Aug 2026
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness25 May 2026
- 2026Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection22 May 2026
- 2026Marking the Wrong Symptoms: Evaluating LLM Watermarks in Medical Texts16 May 2026
- 2026SSG: Logit-Balanced Vocabulary Partitioning for LLM Watermarking24 Apr 2026
- 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Model12 Jan 2026
- 2026Distilling the Thought, Watermarking the Answer: A Principle Semantic Guided Watermark for Large Reasoning Models8 Jan 2026
- 2025WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarking11 Nov 2025
- 2025Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology5 Nov 2025
- 2025Advancing Machine-Generated Text Detection from an Easy to Hard Supervision Perspective2 Nov 2025
10 more
- 2025Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translation20 Oct 2025
- 2025DITTO: A Spoofing Attack Framework on Watermarked LLMs via Knowledge Distillation13 Oct 2025
- 2025A Linguistics-Aware LLM Watermarking via Syntactic Predictability10 Oct 2025
- 2025CATMark: A Context-Aware Thresholding Framework for Robust Cross-Task Watermarking in Large Language Models27 Sep 2025
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm8 Sep 2025
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?5 Jun 2025
- 2025Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking20 May 2025
- 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models15 May 2025
- 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Quality24 Apr 2025
- 2023A Survey of Text Watermarking in the Era of Large Language Models13 Dec 2023
- 2023A Survey of Text Watermarking in the Era of Large Language Modelscited by 102
- 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Modelscited by 5
- 2025Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarkingcited by 5
- 2025DITTO: A Spoofing Attack Framework on Watermarked LLMs via Knowledge Distillationcited by 4
- 2025WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarkingcited by 4
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?cited by 2
- 2025CATMark: A Context-Aware Thresholding Framework for Robust Cross-Task Watermarking in Large Language Modelscited by 2
- 2025A Linguistics-Aware LLM Watermarking via Syntactic Predictabilitycited by 2
- 2025Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translationcited by 1
- 2026Robust LLM Watermarking with Minimal Semantic Distortion for IP Protectioncited by 1
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustnesscited by 1
- 2025Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technologycited by 0
12 most cited of 15 All 15 (JSON)
- 2026TripPattern: A Pattern-based Text Watermarking Method for Large Language Models11 Sep 2026
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness25 May 2026
- 2026Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection22 May 2026
- 2026Marking the Wrong Symptoms: Evaluating LLM Watermarks in Medical Texts16 May 2026
- 2026SSG: Logit-Balanced Vocabulary Partitioning for LLM Watermarking24 Apr 2026
- 2025WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarking11 Nov 2025
- 2025Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology5 Nov 2025
- 2025Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translation20 Oct 2025
- 2025DITTO: A Spoofing Attack Framework on Watermarked LLMs via Knowledge Distillation13 Oct 2025
- 2025A Linguistics-Aware LLM Watermarking via Syntactic Predictability10 Oct 2025
- 2025CATMark: A Context-Aware Thresholding Framework for Robust Cross-Task Watermarking in Large Language Models27 Sep 2025
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?5 Jun 2025
12 newest of 15 All 15 (JSON)
- 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Qualitycited by 17
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigmcited by 4
- 2025Advancing Machine-Generated Text Detection from an Easy to Hard Supervision Perspectivecited by 2
- 2026Fighting Fire with Fire: On the Feasibility of Protecting Exercises Against AI Cheatingcited by 0
- 2026Fighting Fire with Fire: On the Feasibility of Protecting Exercises Against AI Cheating2 Aug 2026
- 2025Advancing Machine-Generated Text Detection from an Easy to Hard Supervision Perspective2 Nov 2025
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm8 Sep 2025
- 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Quality24 Apr 2025
Similar, not cited
Close in wording, no citation either way
- 2026WaterMoE: Expert-Routing-based Watermarking for High Fidelity and Efficiency
- 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Models
- 2024Inevitable Trade-off between Watermark Strength and Speculative Sampling Efficiency for Language Models
- 2025Towards Copyright Protection for Knowledge Bases of Retrieval-augmented Language Models via Reasoning
- 2025StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models
- 2025How Good is Post-Hoc Watermarking With Language Model Rephrasing?
- 2026Language Model Fingerprinting Requires Rethinking Watermark Teachers
- 2025Watermarking Degrades Alignment in Language Models: Analysis and Mitigation