mlsanityData to 7 Oct 2026

WatME: Towards Lossless Watermarking Through Lexical Redundancy

arXiv 2311.09832 ↗First posted 16 Nov 2023cs.CLcited by 22

Not on the map. Why?

Abstract (arXiv)

Text watermarking has emerged as a pivotal technique for identifying machine-generated text. However, existing methods often rely on arbitrary vocabulary partitioning during decoding to embed watermarks, which compromises the availability of suitable tokens and significantly degrades the quality of responses. This study assesses the impact of watermarking on different capabilities of large language models (LLMs) from a cognitive science lens. Our finding highlights a significant disparity; knowledge recall and logical reasoning are more adversely affected than language generation. These results suggest a more profound effect of watermarking on LLMs than previously understood. To address these challenges, we introduce Watermarking with Mutual Exclusion (WatME), a novel approach leveraging linguistic prior knowledge of inherent lexical redundancy in LLM vocabularies to seamlessly integrate watermarks. Specifically, WatME dynamically optimizes token usage during the decoding process by applying a mutually exclusive rule to the identified lexical redundancies. This strategy effectively prevents the unavailability of appropriate tokens and preserves the expressive power of LLMs. We provide both theoretical analysis and empirical evidence showing that WatME effectively preserves the diverse capabilities of LLMs while ensuring watermark detectability.

Key facts. Cited by 22 papers in the map (data through 7 Oct 2026). Builds on 28 of its 56 references that are in the map. First posted on arXiv 16 Nov 2023.

Builds on

28 of 56 references.

References · 28

  1. 2020Language Models are Few-Shot Learnerscited by 32,199
  2. 2022Training language models to follow instructions with human feedbackcited by 15,712
  3. 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
  4. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  5. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
  6. 2015Neural Machine Translation of Rare Words with Subword Unitscited by 2,898
  7. 2018SentencePiece: A simple and language independent subword tokenizer and detokenizer for Neural Text Processingcited by 1,973
  8. 2021Calibrate Before Use: Improving Few-Shot Performance of Language Modelscited by 1,371
  9. 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
  10. 2019Defending Against Neural Fake Newscited by 553
  11. 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 490
  12. 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 481
16 more
  1. 2023Can AI-Generated Text be Reliably Detected?cited by 372
  2. 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 334
  3. 2022Generate rather than Retrieve: Large Language Models are Strong Context Generatorscited by 296
  4. 2023Robust Distortion-free Watermarks for Language Modelscited by 279
  5. 2023Provable Robust Watermarking for AI-Generated Textcited by 259
  6. 2023GPT detectors are biased against non-native English writerscited by 175
  7. 2020Automatic Detection of Machine Generated Text: A Critical Surveycited by 160
  8. 2023Prompting and Evaluating Large Language Models for Proactive Dialogues: Clarification, Target-guided, and Non-collaborationcited by 115
  9. 2023Regulating ChatGPT and other Large Generative AI Modelscited by 102
  10. 2023Chain-of-Thought Hub: A Continuous Effort to Measure Large Language Models' Reasoning Performancecited by 102
  11. 2023On the Possibilities of AI-Generated Text Detectioncited by 88
  12. 2021Protecting Intellectual Property of Language Generation APIs with Lexical Watermarkcited by 78
  13. 2023Beyond Factuality: A Comprehensive Evaluation of Large Language Models as Knowledge Generatorscited by 42
  14. 2020Attacking Neural Text Detectorscited by 37
  15. 2021Frustratingly Easy Edit-based Linguistic Steganography with a Masked Language Modelcited by 28
  16. 2023Towards Robust Personalized Dialogue Generation via Order-Insensitive Representation Regularizationcited by 17

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 1; 2024: 0; 2025: 12; 2026: 9.

22 papers.

Sort:

By area:

  1. 2023A Survey of Text Watermarking in the Era of Large Language Modelscited by 102
  2. 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Qualitycited by 17
  3. 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Modelscited by 5
  4. 2025Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarkingcited by 5
  5. 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigmcited by 4
  6. 2025DITTO: A Spoofing Attack Framework on Watermarked LLMs via Knowledge Distillationcited by 4
  7. 2025WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarkingcited by 4
  8. 2026Distilling the Thought, Watermarking the Answer: A Principle Semantic Guided Watermark for Large Reasoning Modelscited by 3
  9. 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Modelcited by 3
  10. 2025SoK: Are Watermarks in LLMs Ready for Deployment?cited by 2
  11. 2025CATMark: A Context-Aware Thresholding Framework for Robust Cross-Task Watermarking in Large Language Modelscited by 2
  12. 2025A Linguistics-Aware LLM Watermarking via Syntactic Predictabilitycited by 2
10 more
  1. 2025Advancing Machine-Generated Text Detection from an Easy to Hard Supervision Perspectivecited by 2
  2. 2025Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translationcited by 1
  3. 2026Robust LLM Watermarking with Minimal Semantic Distortion for IP Protectioncited by 1
  4. 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustnesscited by 1
  5. 2025Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technologycited by 0
  6. 2026SSG: Logit-Balanced Vocabulary Partitioning for LLM Watermarkingcited by 0
  7. 2026Marking the Wrong Symptoms: Evaluating LLM Watermarks in Medical Textscited by 0
  8. 2026Fighting Fire with Fire: On the Feasibility of Protecting Exercises Against AI Cheatingcited by 0
  9. 2026TrajMark: Ownership Attribution and Segment-Level Tamper Localization for Coding-Agent Trajectoriescited by 0
  10. 2026TripPattern: A Pattern-based Text Watermarking Method for Large Language Modelscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2026WaterMoE: Expert-Routing-based Watermarking for High Fidelity and Efficiency
  2. 2026Improving the Trade-off Between Watermark Strength and Speculative Sampling Efficiency for Language Models
  3. 2024Inevitable Trade-off between Watermark Strength and Speculative Sampling Efficiency for Language Models
  4. 2025Towards Copyright Protection for Knowledge Bases of Retrieval-augmented Language Models via Reasoning
  5. 2025StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models
  6. 2025How Good is Post-Hoc Watermarking With Language Model Rephrasing?
  7. 2026Language Model Fingerprinting Requires Rethinking Watermark Teachers
  8. 2025Watermarking Degrades Alignment in Language Models: Analysis and Mitigation