Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Large language models generate high-quality responses with potential misinformation, underscoring the need for regulation by distinguishing AI-generated and human-written texts. Watermarking is pivotal in this context, which involves embedding hidden markers in texts during the LLM inference phase, which is imperceptible to humans. Achieving both the detectability of inserted watermarks and the semantic quality of generated texts is challenging. While current watermarking algorithms have made promising progress in this direction, there remains significant scope for improvement. To address these challenges, we introduce a novel multi-objective optimization (MOO) approach for watermarking that utilizes lightweight networks to generate token-specific watermarking logits and splitting ratios. By leveraging MOO to optimize for both detection and semantic objective functions, our method simultaneously achieves detectability and semantic integrity. Experimental results show that our method outperforms current watermarking techniques in enhancing the detectability of texts generated by LLMs while maintaining their semantic coherence. Our code is available at https://github.com/mignonjia/TS_watermark.
Key facts. Cited by 30 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 38 of its 62 references that are in the map. First posted on arXiv 28 Feb 2024.
Builds on
38 of 62 references.
Closest ancestors · 14
Same direction, newest first
- 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
- 2023A Robust Semantics-based Watermark for Large Language Model against Paraphrasing15 Nov
- 2023REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models18 Oct
- 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
- 2023Who Wrote this Code? Watermarking for Code Generation24 May
- 2023Watermarking Text Generated by Black-Box Language Models14 May
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Features3 May
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
- 2023A Watermark for Large Language Models24 Jan
2 more
Other references · 24
- 2017Attention Is All You Needcited by 59,932
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2015Delving Deep into Rectifiers: Surpassing Human-Level Performance on ImageNet Classificationcited by 3,590
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,201
- 2021SimCSE: Simple Contrastive Learning of Sentence Embeddingscited by 2,168
- 2017GradNorm: Gradient Normalization for Adaptive Loss Balancing in Deep Multitask Networkscited by 816
- 2018Multi-Task Learning as Multi-Objective Optimizationcited by 809
- 2019Release Strategies and the Social Impacts of Language Modelscited by 505
12 more
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 490
- 2023How Close is ChatGPT to Human Experts? Comparison Corpus, Evaluation, and Detectioncited by 472
- 2019Automatic Detection of Generated Text is Easiest when Humans are Fooledcited by 260
- 2023GPT detectors are biased against non-native English writerscited by 175
- 2023Factuality Challenges in the Era of Large Language Modelscited by 125
- 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 121
- 2023LLMDet: A Third Party Large Language Models Generated Text Detection Toolcited by 44
- 2020Neural Deepfake Detection with Factual Structure of Textcited by 40
- 2023Origin Tracing and Detecting of LLMscited by 39
- 2020Attacking Neural Text Detectorscited by 37
- 2019Multi-Gradient Descent for Multi-Objective Recommender Systemscited by 20
- 2023Composition-contrastive Learning for Sentence Embeddingscited by 14
Built on by
Citing papers per year: 2024: 12; 2025: 12; 2026: 6.
30 papers.
Sort:
By area:
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-offcited by 48
- 2024SoK: Watermarking for AI-Generated Contentcited by 43
- 2024Watermarking Techniques for Large Language Models: A Surveycited by 20
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guaranteescited by 20
- 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approachcited by 17
- 2024A Watermark for Order-Agnostic Language Modelscited by 14
- 2024De-mark: Watermark Removal in Large Language Modelscited by 11
- 2024Watermarking Language Models with Error Correcting Codescited by 10
- 2024WaterSeeker: Pioneering Efficient Detection of Watermarked Segments in Large Documentscited by 9
- 2025Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillationcited by 9
- 2025In-Context Watermarks for Large Language Modelscited by 9
- 2024Topic-Based Watermarks for Large Language Modelscited by 7
18 more
- 2025Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoptioncited by 7
- 2024Survey on Plagiarism Detection in Large Language Models: The Impact of ChatGPT and Gemini on Academic Integritycited by 5
- 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Modelscited by 5
- 2025Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarkingcited by 5
- 2025SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoderscited by 5
- 2025Factuality Beyond Coherence: Evaluating LLM Watermarking Methods for Medical Textscited by 4
- 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Modelcited by 3
- 2024Watermarking Large Language Models and the Generated Content: Opportunities and Challengescited by 2
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?cited by 2
- 2025Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimizationcited by 1
- 2026SearchLLM: Detecting LLM Paraphrased Text by Measuring the Similarity with Regeneration of the Candidate Source via Search Enginecited by 1
- 2024Less is More: Sparse Watermarking in LLMs with Enhanced Text Qualitycited by 0
- 2025Robust and Secure Code Watermarking for Large Language Models via ML/Crypto Codesigncited by 0
- 2025Adaptive Testing for Segmenting Watermarked Texts From Language Modelscited by 0
- 2026On Google's SynthID-Text LLM Watermarking System: Theoretical Analysis and Empirical Validationcited by 0
- 2026Watermarking Game-Playing Agents in Perfect-Information Extensive-Form Gamescited by 0
- 2026READER: Reasoning-Enhanced AI-Generated Text Detectioncited by 0
- 2026A Locally Tokenized Generative Model for Robust Time-Series Watermarkingcited by 0
- 2026A Locally Tokenized Generative Model for Robust Time-Series Watermarking20 Aug 2026
- 2026READER: Reasoning-Enhanced AI-Generated Text Detection24 May 2026
- 2026Watermarking Game-Playing Agents in Perfect-Information Extensive-Form Games14 May 2026
- 2026On Google's SynthID-Text LLM Watermarking System: Theoretical Analysis and Empirical Validation3 Mar 2026
- 2026SearchLLM: Detecting LLM Paraphrased Text by Measuring the Similarity with Regeneration of the Candidate Source via Search Engine23 Jan 2026
- 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Model12 Jan 2026
- 2025Adaptive Testing for Segmenting Watermarked Texts From Language Models10 Nov 2025
- 2025Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption21 Oct 2025
- 2025Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimization13 Oct 2025
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guarantees29 Sep 2025
- 2025Factuality Beyond Coherence: Evaluating LLM Watermarking Methods for Medical Texts9 Sep 2025
- 2025SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders11 Aug 2025
18 more
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?5 Jun 2025
- 2025In-Context Watermarks for Large Language Models22 May 2025
- 2025Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking20 May 2025
- 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models15 May 2025
- 2025Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation24 Apr 2025
- 2025Robust and Secure Code Watermarking for Large Language Models via ML/Crypto Codesign4 Feb 2025
- 2024SoK: Watermarking for AI-Generated Content27 Nov 2024
- 2024Watermarking Large Language Models and the Generated Content: Opportunities and Challenges24 Oct 2024
- 2024De-mark: Watermark Removal in Large Language Models17 Oct 2024
- 2024A Watermark for Order-Agnostic Language Models17 Oct 2024
- 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach3 Oct 2024
- 2024WaterSeeker: Pioneering Efficient Detection of Watermarked Segments in Large Documents8 Sep 2024
- 2024Watermarking Techniques for Large Language Models: A Survey26 Aug 2024
- 2024Less is More: Sparse Watermarking in LLMs with Enhanced Text Quality17 Jul 2024
- 2024Watermarking Language Models with Error Correcting Codes12 Jun 2024
- 2024Survey on Plagiarism Detection in Large Language Models: The Impact of ChatGPT and Gemini on Academic Integrity4 Jun 2024
- 2024Topic-Based Watermarks for Large Language Models2 Apr 2024
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off6 Mar 2024
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-offcited by 48
- 2024SoK: Watermarking for AI-Generated Contentcited by 43
- 2024Watermarking Techniques for Large Language Models: A Surveycited by 20
- 2024Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approachcited by 17
- 2024A Watermark for Order-Agnostic Language Modelscited by 14
- 2024De-mark: Watermark Removal in Large Language Modelscited by 11
- 2024Watermarking Language Models with Error Correcting Codescited by 10
- 2025Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillationcited by 9
- 2025In-Context Watermarks for Large Language Modelscited by 9
- 2024Topic-Based Watermarks for Large Language Modelscited by 7
- 2025Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoptioncited by 7
- 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Modelscited by 5
12 most cited of 23 All 23 (JSON)
- 2026A Locally Tokenized Generative Model for Robust Time-Series Watermarking20 Aug 2026
- 2026On Google's SynthID-Text LLM Watermarking System: Theoretical Analysis and Empirical Validation3 Mar 2026
- 2025Adaptive Testing for Segmenting Watermarked Texts From Language Models10 Nov 2025
- 2025Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption21 Oct 2025
- 2025Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimization13 Oct 2025
- 2025Factuality Beyond Coherence: Evaluating LLM Watermarking Methods for Medical Texts9 Sep 2025
- 2025SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders11 Aug 2025
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?5 Jun 2025
- 2025In-Context Watermarks for Large Language Models22 May 2025
- 2025Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking20 May 2025
- 2025From Trade-off to Synergy: A Versatile Symbiotic Watermarking Framework for Large Language Models15 May 2025
- 2025Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation24 Apr 2025
12 newest of 23 All 23 (JSON)
- 2026READER: Reasoning-Enhanced AI-Generated Text Detectioncited by 0
- 2026READER: Reasoning-Enhanced AI-Generated Text Detection24 May 2026
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guaranteescited by 20
- 2024WaterSeeker: Pioneering Efficient Detection of Watermarked Segments in Large Documentscited by 9
- 2024Survey on Plagiarism Detection in Large Language Models: The Impact of ChatGPT and Gemini on Academic Integritycited by 5
- 2026SearchLLM: Detecting LLM Paraphrased Text by Measuring the Similarity with Regeneration of the Candidate Source via Search Enginecited by 1
- 2026SearchLLM: Detecting LLM Paraphrased Text by Measuring the Similarity with Regeneration of the Candidate Source via Search Engine23 Jan 2026
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guarantees29 Sep 2025
- 2024WaterSeeker: Pioneering Efficient Detection of Watermarked Segments in Large Documents8 Sep 2024
- 2024Survey on Plagiarism Detection in Large Language Models: The Impact of ChatGPT and Gemini on Academic Integrity4 Jun 2024