SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
The widespread adoption of large language models (LLMs) necessitates reliable methods to detect LLM-generated text. We introduce SimMark, a robust sentence-level watermarking algorithm that makes LLMs' outputs traceable without requiring access to model internals, making it compatible with both open and API-based LLMs. By leveraging the similarity of semantic sentence embeddings combined with rejection sampling to embed detectable statistical patterns imperceptible to humans, and employing a soft counting mechanism, SimMark achieves robustness against paraphrasing attacks. Experimental results demonstrate that SimMark sets a new benchmark for robust watermarking of LLM-generated content, surpassing prior sentence-level watermarking techniques in robustness, sampling efficiency, and applicability across diverse domains, all while maintaining the text quality and fluency.
Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 22 of its 45 references that are in the map. First posted on arXiv 5 Feb 2025.
Builds on
22 of 45 references.
Closest ancestors · 7
Same direction, newest first
- 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
- 2024k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text17 Feb
- 2023Watermarking Conditional Text Generation for AI Detection: Unveiling Challenges and a Semantic-Aware Watermark Remedy25 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023Watermarking Text Generated by Black-Box Language Models14 May
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
- 2023Can AI-Generated Text be Reliably Detected?17 Mar
Other references · 15
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,767
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2020DeBERTa: Decoding-enhanced BERT with Disentangled Attentioncited by 2,157
- 2022Large Language Models Encode Clinical Knowledgecited by 1,807
- 2019PEGASUS: Pre-training with Extracted Gap-sentences for Abstractive Summarizationcited by 1,100
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2022One Embedder, Any Task: Instruction-Finetuned Text Embeddingscited by 329
- 2021BookSum: A Collection of Datasets for Long-form Narrative Summarizationcited by 184
- 2018Generating Informative and Diverse Conversational Responses via Adversarial Information Maximizationcited by 114
- 2018Abstractive Summarization of Reddit Posts with Multi-level Memory Networkscited by 102
- 2024Logits of API-Protected LLMs Leak Proprietary Informationcited by 38
Built on by
Citing papers per year: 2025: 5; 2026: 8.
13 papers.
Sort:
By area:
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraintscited by 14
- 2025Majority Bit-Aware Watermarking For Large Language Modelscited by 3
- 2026Distilling the Thought, Watermarking the Answer: A Principle Semantic Guided Watermark for Large Reasoning Modelscited by 3
- 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Modelcited by 3
- 2025VIDSTAMP: A Temporally-Aware Watermark for Ownership and Integrity in Video Diffusion Modelscited by 1
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustnesscited by 1
- 2026Global Sketch-Based Watermarking for Diffusion Language Modelscited by 1
- 2026DenMark: Robust Semantic Watermarking for Diffusion Language Modelscited by 1
- 2025LLM Watermark Evasion via Bias Inversioncited by 0
- 2025WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarkingcited by 0
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematizationcited by 0
- 2026Semantic Watermarking with Order-Robust Detection over Sub-sentence Unitscited by 0
- 2026Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoods29 Sep 2026
- 2026DenMark: Robust Semantic Watermarking for Diffusion Language Models13 Sep 2026
- 2026Semantic Watermarking with Order-Robust Detection over Sub-sentence Units27 Aug 2026
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization11 Jul 2026
- 2026Global Sketch-Based Watermarking for Diffusion Language Models3 Jun 2026
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness25 May 2026
- 2026A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Model12 Jan 2026
- 2026Distilling the Thought, Watermarking the Answer: A Principle Semantic Guided Watermark for Large Reasoning Models8 Jan 2026
- 2025WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking30 Nov 2025
- 2025LLM Watermark Evasion via Bias Inversion27 Sep 2025
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints25 Sep 2025
- 2025Majority Bit-Aware Watermarking For Large Language Models5 Aug 2025
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraintscited by 14
- 2025Majority Bit-Aware Watermarking For Large Language Modelscited by 3
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustnesscited by 1
- 2025LLM Watermark Evasion via Bias Inversioncited by 0
- 2025WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarkingcited by 0
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematizationcited by 0
- 2026Semantic Watermarking with Order-Robust Detection over Sub-sentence Unitscited by 0
- 2026Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoodscited by 0
- 2026Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoods29 Sep 2026
- 2026Semantic Watermarking with Order-Robust Detection over Sub-sentence Units27 Aug 2026
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization11 Jul 2026
- 2026SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness25 May 2026
- 2025WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking30 Nov 2025
- 2025LLM Watermark Evasion via Bias Inversion27 Sep 2025
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints25 Sep 2025
- 2025Majority Bit-Aware Watermarking For Large Language Models5 Aug 2025