WaterPool: A Watermark Mitigating Trade-offs among Imperceptibility, Efficacy and Robustness
Not on the map. Why?
Abstract (arXiv)
With the increasing use of large language models (LLMs) in daily life, concerns have emerged regarding their potential misuse and societal impact. Watermarking is proposed to trace the usage of specific models by injecting patterns into their generated texts. An ideal watermark should produce outputs that are nearly indistinguishable from those of the original LLM (imperceptibility), while ensuring a high detection rate (efficacy), even when the text is partially altered (robustness). Despite many methods having been proposed, none have simultaneously achieved all three properties, revealing an inherent trade-off. This paper utilizes a key-centered scheme to unify existing watermarking techniques by decomposing a watermark into two distinct modules: a key module and a mark module. Through this decomposition, we demonstrate for the first time that the key module significantly contributes to the trade-off issues observed in prior methods. Specifically, this reflects the conflict between the scale of the key sampling space during generation and the complexity of key restoration during detection. To this end, we introduce WaterPool, a simple yet effective key module that preserves a complete key sampling space required by imperceptibility while utilizing semantics-based search to improve the key restoration process. WaterPool can integrate with most watermarks, acting as a plug-in. Our experiments with three well-known watermarking techniques show that WaterPool significantly enhances their performance, achieving near-optimal imperceptibility and markedly improving efficacy and robustness (+12.73% for KGW, +20.27% for EXP, +7.27% for ITS).
Key facts. Cited by 6 papers in the map (data through 13 Oct 2026). Builds on 18 of its 22 references that are in the map. First posted on arXiv 22 May 2024.
Builds on
18 of 22 references.
References · 18
- 2023A Watermark for Large Language Modelscited by 717
- 2019ELI5: Long Form Question Answeringcited by 571
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 423
- 2023Robust Distortion-free Watermarks for Language Modelscited by 315
- 2023Provable Robust Watermarking for AI-Generated Textcited by 293
- 2024Nomic Embed: Training a Reproducible Long Context Text Embeddercited by 263
- 2023Undetectable Watermarks for Language Modelscited by 224
- 2023On the Reliability of Watermarks for Large Language Modelscited by 187
- 2023A Survey of Text Watermarking in the Era of Large Language Modelscited by 112
- 2023A Semantic Invariant Robust Watermark for Large Language Modelscited by 110
- 2023Unbiased Watermark for Large Language Modelscited by 109
- 2023Three Bricks to Consolidate Watermarks for Large Language Modelscited by 82
6 more
- 2023A Robust Semantics-based Watermark for Large Language Model against Paraphrasingcited by 81
- 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Modelscited by 54
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-offcited by 53
- 2023Downstream Trade-offs of a Family of Text Watermarkscited by 14
- 2024WaterJudge: Quality-Detection Trade-off when Watermarking Large Language Modelscited by 9
- 2023Improving the Generation Quality of Watermarked Large Language Models via Word Importance Scoringcited by 6
Built on by
Citing papers per year: 2024: 1; 2025: 3; 2026: 2.
6 papers.
- 2024Hidden in the Noise: Two-Stage Robust Watermarking for Imagescited by 21
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?cited by 2
- 2025SimKey: A Semantically Aware Key Module for Watermarking Language Modelscited by 2
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictionscited by 1
- 2026Robust LLM Watermarking with Minimal Semantic Distortion for IP Protectioncited by 1
- 2026Trustworthy AI: Ensuring Reliability and Accountability from Models to Agentscited by 0
- 2026Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection22 May 2026
- 2026Trustworthy AI: Ensuring Reliability and Accountability from Models to Agents9 May 2026
- 2025SimKey: A Semantically Aware Key Module for Watermarking Language Models11 Oct 2025
- 2025HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions6 Jun 2025
- 2025SoK: Are Watermarks in LLMs Ready for Deployment?5 Jun 2025
- 2024Hidden in the Noise: Two-Stage Robust Watermarking for Images5 Dec 2024
Similar, not cited
Close in wording, no citation either way
- 2025WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking
- 2024Black-Box Detection of Language Model Watermarks
- 2023Baselines for Identifying Watermarked Large Language Models
- 2023On the Learnability of Watermarks for Language Models
- 2024PostMark: A Robust Blackbox Watermark for Large Language Models
- 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules
- 2023WatME: Towards Lossless Watermarking Through Lexical Redundancy
- 2024Provably Robust Watermarks for Open-Source Language Models