A Watermark for Order-Agnostic Language Models
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Statistical watermarking techniques are well-established for sequentially decoded language models (LMs). However, these techniques cannot be directly applied to order-agnostic LMs, as the tokens in order-agnostic LMs are not generated sequentially. In this work, we introduce Pattern-mark, a pattern-based watermarking framework specifically designed for order-agnostic LMs. We develop a Markov-chain-based watermark generator that produces watermark key sequences with high-frequency key patterns. Correspondingly, we propose a statistical pattern-based detection algorithm that recovers the key sequence during detection and conducts statistical tests based on the count of high-frequency patterns. Our extensive evaluations on order-agnostic LMs, such as ProteinMPNN and CMLM, demonstrate Pattern-mark's enhanced detection efficiency, generation quality, and robustness, positioning it as a superior watermarking technique for order-agnostic LMs.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 21 of its 45 references that are in the map. First posted on arXiv 17 Oct 2024.
Builds on
21 of 45 references.
Closest ancestors · 11
Same direction, newest first
- 2024Distortion-free Watermarks are not Truly Distortion-free under Watermark Key Collisions2 Jun
- 2024Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models28 Feb
- 2023REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models18 Oct
- 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
- 2023Unbiased Watermark for Large Language Models22 Sep
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Models30 Jul
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
- 2023Undetectable Watermarks for Language Models25 May
- 2023A Watermark for Large Language Models24 Jan
Other references · 10
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2017Non-Autoregressive Neural Machine Translationcited by 463
- 2024Your Vision-Language Model Itself Is a Strong Filter: Towards High-Quality Instruction Tuning with Data Selectioncited by 48
- 2022Adversarial Weight Perturbation Improves Generalization in Graph Neural Networkscited by 21
- 2023Learning to Learn from APIs: Black-Box Data-Free Meta-Learningcited by 18
- 2022RetrievalGuard: Provably Robust 1-Nearest Neighbor Image Retrievalcited by 15
- 2024Few-Shot Class Incremental Learning with Attention-Aware Self-Adaptive Promptcited by 15
- 2022A Law of Robustness beyond Isoperimetrycited by 9
- 2021NAST: Non-Autoregressive Spatial-Temporal Transformer for Time Series Forecastingcited by 8
Built on by
Citing papers per year: 2025: 7; 2026: 7.
14 papers.
Sort:
By area:
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guaranteescited by 21
- 2025Improved Unbiased Watermark for Large Language Modelscited by 17
- 2025In-Context Watermarks for Large Language Modelscited by 10
- 2025Watermarking Diffusion Language Modelscited by 10
- 2025Toward Robust Non-Transferable Learning: A Survey and Benchmarkcited by 7
- 2025Explore Data Left Behind in Reinforcement Learning for Reasoning Language Modelscited by 7
- 2025Detecting Post-generation Edits to Watermarked LLM Outputs via Combinatorial Watermarkingcited by 3
- 2026More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensemblescited by 2
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustnesscited by 2
- 2026Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarkscited by 1
- 2026AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasingcited by 1
- 2026SAC-Copula: Quality-Preserving Watermarking for Diffusion Language Models via Smooth Correlated Gumbel Fieldscited by 1
- 2026Anchor-ECC: Local Integrity Checking for Watermarked LLM Outputs via Error-Correcting Codes30 Sep 2026
- 2026DenMark: Robust Semantic Watermarking for Diffusion Language Models13 Sep 2026
- 2026SAC-Copula: Quality-Preserving Watermarking for Diffusion Language Models via Smooth Correlated Gumbel Fields21 Aug 2026
- 2026AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing28 May 2026
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness25 May 2026
- 2026Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks6 May 2026
- 2026More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensembles12 Feb 2026
- 2025Explore Data Left Behind in Reinforcement Learning for Reasoning Language Models6 Nov 2025
- 2025Detecting Post-generation Edits to Watermarked LLM Outputs via Combinatorial Watermarking2 Oct 2025
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guarantees29 Sep 2025
- 2025Watermarking Diffusion Language Models29 Sep 2025
- 2025In-Context Watermarks for Large Language Models22 May 2025
2 more
- 2025Toward Robust Non-Transferable Learning: A Survey and Benchmark19 Feb 2025
- 2025Improved Unbiased Watermark for Large Language Models16 Feb 2025
- 2025Improved Unbiased Watermark for Large Language Modelscited by 17
- 2025In-Context Watermarks for Large Language Modelscited by 10
- 2025Detecting Post-generation Edits to Watermarked LLM Outputs via Combinatorial Watermarkingcited by 3
- 2026More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensemblescited by 2
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustnesscited by 2
- 2026AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasingcited by 1
- 2026Anchor-ECC: Local Integrity Checking for Watermarked LLM Outputs via Error-Correcting Codescited by 0
- 2026Anchor-ECC: Local Integrity Checking for Watermarked LLM Outputs via Error-Correcting Codes30 Sep 2026
- 2026AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing28 May 2026
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness25 May 2026
- 2026More Haste, Less Speed: Weaker Single-Layer Watermark Improves Distortion-Free Watermark Ensembles12 Feb 2026
- 2025Detecting Post-generation Edits to Watermarked LLM Outputs via Combinatorial Watermarking2 Oct 2025
- 2025In-Context Watermarks for Large Language Models22 May 2025
- 2025Improved Unbiased Watermark for Large Language Models16 Feb 2025
- 2025Watermarking Diffusion Language Modelscited by 10
- 2026Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarkscited by 1
- 2026SAC-Copula: Quality-Preserving Watermarking for Diffusion Language Models via Smooth Correlated Gumbel Fieldscited by 1
- 2026DenMark: Robust Semantic Watermarking for Diffusion Language Modelscited by 1
- 2026DenMark: Robust Semantic Watermarking for Diffusion Language Models13 Sep 2026
- 2026SAC-Copula: Quality-Preserving Watermarking for Diffusion Language Models via Smooth Correlated Gumbel Fields21 Aug 2026
- 2026Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks6 May 2026
- 2025Watermarking Diffusion Language Models29 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2024A Watermark for Black-Box Language Models
- 2024A Statistical Framework of Watermarks for Large Language Models: Pivot, Detection Efficiency and Optimal Rules
- 2026ChainMark: Model-Free LLM Watermarking with Closed-Form Calibration
- 2024Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers
- 2026Flip, Don't Shuffle: Watermarking LLMs at the Speed of Inference
- 2024Black-Box Detection of Language Model Watermarks
- 2024Learnable Linguistic Watermarks for Tracing Model Extraction Attacks on Large Language Models
- 2024Watermarking Low-entropy Generation for Large Language Models: An Unbiased and Low-risk Method