mlsanityData to 7 Oct 2026

Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking

arXiv 2505.14112 ↗First posted 20 May 2025cs.CL cs.CRcited by 5

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Logit-based LLM watermarking traces and verifies AI-generated content by maintaining green and red token lists and increasing the likelihood of green tokens during generation. However, it fails in low-entropy scenarios, where predictable outputs make green token selection difficult without disrupting natural text flow. Existing approaches address this by assuming access to the original LLM to calculate entropy and selectively watermark high-entropy tokens. However, these methods face two major challenges: (1) high computational costs and detection delays due to reliance on the original LLM, and (2) potential risks of model leakage. To address these limitations, we propose Invisible Entropy (IE), a watermarking paradigm designed to enhance both safety and efficiency. Instead of relying on the original LLM, IE introduces a lightweight feature extractor and an entropy tagger to predict whether the entropy of the next token is high or low. Furthermore, based on theoretical analysis, we develop a threshold navigator that adaptively sets entropy thresholds. It identifies a threshold where the watermark ratio decreases as the green token count increases, enhancing the naturalness of the watermarked text and improving detection robustness. Experiments on HumanEval and MBPP datasets demonstrate that IE reduces parameter size by 99% while achieving performance on par with state-of-the-art methods. Our work introduces a safe and efficient paradigm for low-entropy watermarking. https://github.com/Carol-gutianle/IE https://huggingface.co/datasets/Carol0110/IE-Tagger

Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 34 of its 54 references that are in the map. First posted on arXiv 20 May 2025.

Builds on

34 of 54 references.

Closest ancestors · 16

Same direction, newest first

  1. 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
  2. 2024CodeIP: A Grammar-Guided Multi-Bit Watermark for Large Language Models of Code24 Apr
  3. 2024An Entropy-based Text Watermarking Detection Method20 Mar
  4. 2024Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models28 Feb
  5. 2024k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text17 Feb
  6. 2023Optimizing watermarks for large language models28 Dec
  7. 2023On the Learnability of Watermarks for Language Models7 Dec
  8. 2023CodeMark: Imperceptible Watermarking for Code Datasets against Neural Code Completion Models28 Aug
  9. 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs29 Jul
  10. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  11. 2023Watermarking Conditional Text Generation for AI Detection: Unveiling Challenges and a Semantic-Aware Watermark Remedy25 Jul
  12. 2023Who Wrote this Code? Watermarking for Code Generation24 May
4 more
  1. 2023Watermarking Text Generated by Black-Box Language Models14 May
  2. 2023DeepTextMark: A Deep Learning-Driven Text Watermarking Approach for Identifying Large Language Model Generated Text9 May
  3. 2023Robust Multi-bit Natural Language Watermarking through Invariant Features3 May
  4. 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar

Other references · 18

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  3. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
  4. 2021Evaluating Large Language Models Trained on Codecited by 8,053
  5. 2021Program Synthesis with Large Language Modelscited by 3,509
  6. 2021SimCSE: Simple Contrastive Learning of Sentence Embeddingscited by 2,168
  7. 2023StarCoder: may the source be with you!cited by 790
  8. 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
  9. 2019Release Strategies and the Social Impacts of Language Modelscited by 505
  10. 2025SpatialVLA: Exploring Spatial Representations for Visual-Language-Action Modelcited by 502
  11. 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 490
  12. 2023LEVER: Learning to Verify Language-to-Code Generation with Executioncited by 228
6 more
  1. 2020Information Leakage in Embedding Modelscited by 199
  2. 2021CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoningcited by 39
  3. 2023WatME: Towards Lossless Watermarking Through Lexical Redundancycited by 22
  4. 2025EpiCoder: Encompassing Diversity and Complexity in Code Generationcited by 21
  5. 2025Think Small, Act Big: Primitive Prompt Learning for Lifelong Robot Manipulationcited by 13
  6. 2024Robust and Minimally Invasive Watermarking for EaaScited by 4

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 5.

5 papers.