k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Recent watermarked generation algorithms inject detectable signatures during language generation to facilitate post-hoc detection. While token-level watermarks are vulnerable to paraphrase attacks, SemStamp (Hou et al., 2023) applies watermark on the semantic representation of sentences and demonstrates promising robustness. SemStamp employs locality-sensitive hashing (LSH) to partition the semantic space with arbitrary hyperplanes, which results in a suboptimal tradeoff between robustness and speed. We propose k-SemStamp, a simple yet effective enhancement of SemStamp, utilizing k-means clustering as an alternative of LSH to partition the embedding space with awareness of inherent semantic structure. Experimental results indicate that k-SemStamp saliently improves its robustness and sampling efficiency while preserving the generation quality, advancing a more effective tool for machine-generated text detection.
Key facts. Cited by 46 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 14 of its 21 references that are in the map. First posted on arXiv 17 Feb 2024.
Builds on
14 of 21 references.
Closest ancestors · 6
Same direction, newest first
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Watermarking Conditional Text Generation for AI Detection: Unveiling Challenges and a Semantic-Aware Watermark Remedy25 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Features3 May
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
- 2023Can AI-Generated Text be Reliably Detected?17 Mar
Other references · 8
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2019PEGASUS: Pre-training with Extracted Gap-sentences for Abstractive Summarizationcited by 1,100
- 2018Model Cards for Model Reportingcited by 1,068
- 2021BookSum: A Collection of Datasets for Long-form Narrative Summarizationcited by 184
- 2018Generating Informative and Diverse Conversational Responses via Adversarial Information Maximizationcited by 114
- 2022Measuring and Improving Semantic Diversity of Dialogue Generationcited by 16
Built on by
Citing papers per year: 2024: 7; 2025: 20; 2026: 19.
46 papers.
Sort:
By area:
- 2024SoK: Watermarking for AI-Generated Contentcited by 43
- 2024Stumbling Blocks: Stress Testing the Robustness of Machine-Generated Text Detectors Under Attackscited by 25
- 2024PostMark: A Robust Blackbox Watermark for Large Language Modelscited by 24
- 2024Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Surveycited by 23
- 2024Watermarking Techniques for Large Language Models: A Surveycited by 20
- 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Qualitycited by 17
- 2025Can LLM Watermarks Robustly Prevent Unauthorized Knowledge Distillation?cited by 16
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraintscited by 14
- 2025SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Modelscited by 13
- 2025DETree: DEtecting Human-AI Collaborative Texts via Tree-Structured Hierarchical Representation Learningcited by 12
- 2024Watermarking Language Models with Error Correcting Codescited by 10
- 2025Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learningcited by 10
34 more
- 2025Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillationcited by 9
- 2025Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attackscited by 8
- 2024Topic-Based Watermarks for Large Language Modelscited by 7
- 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Modelscited by 5
- 2025Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarkingcited by 5
- 2025Large Language Model Sourcing: A Surveycited by 5
- 2025Evaluating the Robustness and Accuracy of Text Watermarking Under Real-World Cross-Lingual Manipulationscited by 4
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigmcited by 4
- 2025WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarkingcited by 4
- 2026PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attackscited by 4
- 2026Distilling the Thought, Watermarking the Answer: A Principle Semantic Guided Watermark for Large Reasoning Modelscited by 3
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?cited by 2
- 2025SimKey: A Semantically Aware Key Module for Watermarking Language Modelscited by 2
- 2025How Good is Post-Hoc Watermarking With Language Model Rephrasing?cited by 2
- 2026TextSeal: A Localized LLM Watermark for Provenance & Distillation Protectioncited by 2
- 2026Robust LLM Watermarking with Minimal Semantic Distortion for IP Protectioncited by 1
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustnesscited by 1
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Contentcited by 1
- 2026WaterMoE: Expert-Routing-based Watermarking for High Fidelity and Efficiencycited by 1
- 2026DenMark: Robust Semantic Watermarking for Diffusion Language Modelscited by 1
- 2025Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technologycited by 0
- 2025WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarkingcited by 0
- 2025DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attackcited by 0
- 2026Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputscited by 0
- 2026WorldCup Sampling for Multi-bit LLM Watermarkingcited by 0
- 2026Rethinking LLM Watermark Detection in Black-Box Settings: A Non-Intrusive Third-Party Frameworkcited by 0
- 2026LLM Output Detectability and Task Performance Can be Jointly Optimizedcited by 0
- 2026SWAN: Semantic Watermarking with Abstract Meaning Representationcited by 0
- 2026AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasingcited by 0
- 2026Robust Text Watermarking for Large Language Models via Dual Semantic Embeddingscited by 0
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematizationcited by 0
- 2026Semantic Watermarking with Order-Robust Detection over Sub-sentence Unitscited by 0
- 2026OpenStamp: A Watermark for Open-Source Language Modelscited by 0
- 2026Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoodscited by 0
- 2026Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoods29 Sep 2026
- 2026DenMark: Robust Semantic Watermarking for Diffusion Language Models13 Sep 2026
- 2026OpenStamp: A Watermark for Open-Source Language Models28 Aug 2026
- 2026Semantic Watermarking with Order-Robust Detection over Sub-sentence Units27 Aug 2026
- 2026WaterMoE: Expert-Routing-based Watermarking for High Fidelity and Efficiency14 Jul 2026
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization11 Jul 2026
- 2026Robust Text Watermarking for Large Language Models via Dual Semantic Embeddings30 Jun 2026
- 2026AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing28 May 2026
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Content28 May 2026
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness25 May 2026
- 2026Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection22 May 2026
- 2026TextSeal: A Localized LLM Watermark for Provenance & Distillation Protection12 May 2026
34 more
- 2026PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attacks9 May 2026
- 2026SWAN: Semantic Watermarking with Abstract Meaning Representation5 May 2026
- 2026LLM Output Detectability and Task Performance Can be Jointly Optimized2 May 2026
- 2026Rethinking LLM Watermark Detection in Black-Box Settings: A Non-Intrusive Third-Party Framework16 Mar 2026
- 2026WorldCup Sampling for Multi-bit LLM Watermarking2 Feb 2026
- 2026Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs14 Jan 2026
- 2026Distilling the Thought, Watermarking the Answer: A Principle Semantic Guided Watermark for Large Reasoning Models8 Jan 2026
- 2025How Good is Post-Hoc Watermarking With Language Model Rephrasing?18 Dec 2025
- 2025DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack18 Dec 2025
- 2025WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking30 Nov 2025
- 2025WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarking11 Nov 2025
- 2025Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology5 Nov 2025
- 2025DETree: DEtecting Human-AI Collaborative Texts via Tree-Structured Hierarchical Representation Learning20 Oct 2025
- 2025SimKey: A Semantically Aware Key Module for Watermarking Language Models11 Oct 2025
- 2025Large Language Model Sourcing: A Survey11 Oct 2025
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints25 Sep 2025
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm8 Sep 2025
- 2025Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks8 Jul 2025
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?5 Jun 2025
- 2025Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking20 May 2025
- 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models15 May 2025
- 2025Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation24 Apr 2025
- 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Quality24 Apr 2025
- 2025Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learning9 Apr 2025
- 2025Evaluating the Robustness and Accuracy of Text Watermarking Under Real-World Cross-Lingual Manipulations23 Feb 2025
- 2025Can LLM Watermarks Robustly Prevent Unauthorized Knowledge Distillation?17 Feb 2025
- 2025SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models5 Feb 2025
- 2024SoK: Watermarking for AI-Generated Content27 Nov 2024
- 2024Watermarking Techniques for Large Language Models: A Survey26 Aug 2024
- 2024PostMark: A Robust Blackbox Watermark for Large Language Models20 Jun 2024
- 2024Watermarking Language Models with Error Correcting Codes12 Jun 2024
- 2024Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Survey8 Jun 2024
- 2024Topic-Based Watermarks for Large Language Models2 Apr 2024
- 2024Stumbling Blocks: Stress Testing the Robustness of Machine-Generated Text Detectors Under Attacks18 Feb 2024
- 2024SoK: Watermarking for AI-Generated Contentcited by 43
- 2024PostMark: A Robust Blackbox Watermark for Large Language Modelscited by 24
- 2024Watermarking Techniques for Large Language Models: A Surveycited by 20
- 2025Can LLM Watermarks Robustly Prevent Unauthorized Knowledge Distillation?cited by 16
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraintscited by 14
- 2025SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Modelscited by 13
- 2024Watermarking Language Models with Error Correcting Codescited by 10
- 2025Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learningcited by 10
- 2025Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillationcited by 9
- 2025Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attackscited by 8
- 2024Topic-Based Watermarks for Large Language Modelscited by 7
- 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Modelscited by 5
12 most cited of 36 All 36 (JSON)
- 2026Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoods29 Sep 2026
- 2026OpenStamp: A Watermark for Open-Source Language Models28 Aug 2026
- 2026Semantic Watermarking with Order-Robust Detection over Sub-sentence Units27 Aug 2026
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization11 Jul 2026
- 2026Robust Text Watermarking for Large Language Models via Dual Semantic Embeddings30 Jun 2026
- 2026AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing28 May 2026
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Content28 May 2026
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness25 May 2026
- 2026Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection22 May 2026
- 2026TextSeal: A Localized LLM Watermark for Provenance & Distillation Protection12 May 2026
- 2026PASA: A Principled Embedding-Space Watermarking Approach for LLM-Generated Text under Semantic-Invariant Attacks9 May 2026
- 2026LLM Output Detectability and Task Performance Can be Jointly Optimized2 May 2026
12 newest of 36 All 36 (JSON)
- 2024Stumbling Blocks: Stress Testing the Robustness of Machine-Generated Text Detectors Under Attackscited by 25
- 2024Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Surveycited by 23
- 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Qualitycited by 17
- 2025DETree: DEtecting Human-AI Collaborative Texts via Tree-Structured Hierarchical Representation Learningcited by 12
- 2025Large Language Model Sourcing: A Surveycited by 5
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigmcited by 4
- 2026SWAN: Semantic Watermarking with Abstract Meaning Representationcited by 0
- 2026SWAN: Semantic Watermarking with Abstract Meaning Representation5 May 2026
- 2025DETree: DEtecting Human-AI Collaborative Texts via Tree-Structured Hierarchical Representation Learning20 Oct 2025
- 2025Large Language Model Sourcing: A Survey11 Oct 2025
- 2025Paladin: Defending LLM-enabled Phishing Emails with a New Trigger-Tag Paradigm8 Sep 2025
- 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Quality24 Apr 2025
- 2024Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Survey8 Jun 2024
- 2024Stumbling Blocks: Stress Testing the Robustness of Machine-Generated Text Detectors Under Attacks18 Feb 2024