mlsanityData to 7 Oct 2026

New Evaluation Metrics Capture Quality Degradation due to LLM Watermarking

arXiv 2312.02382 ↗First posted 4 Dec 2023cs.CLcited by 10

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

With the increasing use of large-language models (LLMs) like ChatGPT, watermarking has emerged as a promising approach for tracing machine-generated content. However, research on LLM watermarking often relies on simple perplexity or diversity-based measures to assess the quality of watermarked text, which can mask important limitations in watermarking. Here we introduce two new easy-to-use methods for evaluating watermarking algorithms for LLMs: 1) evaluation by LLM-judger with specific guidelines; and 2) binary classification on text embeddings to distinguish between watermarked and unwatermarked text. We apply these methods to characterize the effectiveness of current watermarking techniques. Our experiments, conducted across various datasets, reveal that current watermarking methods are detectable by even simple classifiers, challenging the notion of watermarking subtlety. We also found, through the LLM judger, that watermarking impacts text quality, especially in degrading the coherence and depth of the response. Our findings underscore the trade-off between watermark robustness and text quality and highlight the importance of having more informative metrics to assess watermarking quality.

Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 16 of its 21 references that are in the map. First posted on arXiv 4 Dec 2023.

Builds on

16 of 21 references.

Closest ancestors · 7

Same direction, newest first

  1. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  2. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  3. 2023On the Reliability of Watermarks for Large Language Models7 Jun
  4. 2023Undetectable Watermarks for Language Models25 May
  5. 2023Robust Multi-bit Natural Language Watermarking through Invariant Features3 May
  6. 2023Protecting Language Generation Models via Invisible Watermarking6 Feb
  7. 2023A Watermark for Large Language Models24 Jan

Other references · 9

  1. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
  2. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
  3. 2023LIMA: Less Is More for Alignmentcited by 1,080
  4. 2023Large Language Models are not Fair Evaluatorscited by 1,050
  5. 2018A Discourse-Aware Attention Model for Abstractive Summarization of Long Documentscited by 477
  6. 2023PandaLM: An Automatic Evaluation Benchmark for LLM Instruction Tuning Optimizationcited by 311
  7. 2021All That's 'Human' Is Not Gold: Evaluating Human Evaluation of Generated Textcited by 287
  8. 2023The Science of Detecting LLM-Generated Textscited by 126
  9. 2023LongForm: Effective Instruction Tuning with Reverse Instructionscited by 47

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 5; 2025: 3; 2026: 2.

10 papers.