Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Large Language Models (LLMs) are increasingly integrated into diverse industries, posing substantial security risks due to unauthorized replication and misuse. To mitigate these concerns, robust identification mechanisms are widely acknowledged as an effective strategy. Identification systems for LLMs now rely heavily on watermarking technology to manage and protect intellectual property and ensure data security. However, previous studies have primarily concentrated on the basic principles of algorithms and lacked a comprehensive analysis of watermarking theory and practice from the perspective of intelligent identification. To bridge this gap, firstly, we explore how a robust identity recognition system can be effectively implemented and managed within LLMs by various participants using watermarking technology. Secondly, we propose a mathematical framework based on mutual information theory, which systematizes the identification process to achieve more precise and customized watermarking. Additionally, we present a comprehensive evaluation of performance metrics for LLM watermarking, reflecting participant preferences and advancing discussions on its identification applications. Lastly, we outline the existing challenges in current watermarking technologies and theoretical frameworks, and provide directional guidance to address these challenges. Our systematic classification and detailed exposition aim to enhance the comparison and evaluation of various methods, fostering further research and development toward a transparent, secure, and equitable LLM ecosystem.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 34 of its 112 references that are in the map. First posted on arXiv 15 Jul 2024.
Builds on
34 of 112 references.
Closest ancestors · 26
Same direction, newest first
- 2024No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices25 Feb
- 2024Watermarking Makes Language Models Radioactive22 Feb
- 2024Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning22 Feb
- 2024Efficient and Universal Watermarking for LLM-Generated Code Detection12 Feb
- 2024Provably Robust Multi-bit Watermarking for AI-generated Text30 Jan
- 2023On the Learnability of Watermarks for Language Models7 Dec
- 2023Turning Your Strength into Watermark: Watermarking Large Language Model via Knowledge Injection16 Nov
- 2023Publicly-Detectable Watermarking for Language Models27 Oct
- 2023REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models18 Oct
- 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Models11 Oct
- 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
- 2023Necessary and Sufficient Watermark for Large Language Models2 Oct
14 more
- 2023Unbiased Watermark for Large Language Models22 Sep
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Models30 Jul
- 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs29 Jul
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
- 2023Undetectable Watermarks for Language Models25 May
- 2023Watermarking Text Data on Large Language Models for Dataset Copyright22 May
- 2023Watermarking Text Generated by Black-Box Language Models14 May
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
- 2023Can AI-Generated Text be Reliably Detected?17 Mar
- 2023Protecting Language Generation Models via Invisible Watermarking6 Feb
- 2023A Watermark for Large Language Models24 Jan
- 2022CATER: Intellectual Property Protection on Text Generation APIs via Conditional Watermarks19 Sep
Other references · 8
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2018Universal Sentence Encodercited by 485
- 2023GPTScore: Evaluate as You Desirecited by 357
- 2023A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directionscited by 101
- 2019How to Prove Your Model Belongs to You: A Blind-Watermark based Framework to Protect Intellectual Property of DNNcited by 58
- 2014A Survey of Digital Watermarking Techniques and its Applicationscited by 3
Built on by
Citing papers per year: 2025: 1; 2026: 3.
4 papers.
- 2025Token embeddings violate the manifold hypothesiscited by 14
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Contentcited by 1
- 2026Steer-to-Detect: Probing Hidden Representations for Detection of LLM-Generated Textscited by 0
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematizationcited by 0
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization11 Jul 2026
- 2026Implicit Identity Technologies for LLMs: Fingerprinting and Watermarking across Datasets, Models, and Generated Content28 May 2026
- 2026Steer-to-Detect: Probing Hidden Representations for Detection of LLM-Generated Texts13 May 2026
- 2025Token embeddings violate the manifold hypothesis1 Apr 2025