Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Logit-based LLM watermarking traces and verifies AI-generated content by maintaining green and red token lists and increasing the likelihood of green tokens during generation. However, it fails in low-entropy scenarios, where predictable outputs make green token selection difficult without disrupting natural text flow. Existing approaches address this by assuming access to the original LLM to calculate entropy and selectively watermark high-entropy tokens. However, these methods face two major challenges: (1) high computational costs and detection delays due to reliance on the original LLM, and (2) potential risks of model leakage. To address these limitations, we propose Invisible Entropy (IE), a watermarking paradigm designed to enhance both safety and efficiency. Instead of relying on the original LLM, IE introduces a lightweight feature extractor and an entropy tagger to predict whether the entropy of the next token is high or low. Furthermore, based on theoretical analysis, we develop a threshold navigator that adaptively sets entropy thresholds. It identifies a threshold where the watermark ratio decreases as the green token count increases, enhancing the naturalness of the watermarked text and improving detection robustness. Experiments on HumanEval and MBPP datasets demonstrate that IE reduces parameter size by 99% while achieving performance on par with state-of-the-art methods. Our work introduces a safe and efficient paradigm for low-entropy watermarking. https://github.com/Carol-gutianle/IE https://huggingface.co/datasets/Carol0110/IE-Tagger
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 34 of its 54 references that are in the map. First posted on arXiv 20 May 2025.
Builds on
34 of 54 references.
Closest ancestors · 16
Same direction, newest first
- 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
- 2024CodeIP: A Grammar-Guided Multi-Bit Watermark for Large Language Models of Code24 Apr
- 2024An Entropy-based Text Watermarking Detection Method20 Mar
- 2024Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models28 Feb
- 2024k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text17 Feb
- 2023Optimizing watermarks for large language models28 Dec
- 2023On the Learnability of Watermarks for Language Models7 Dec
- 2023CodeMark: Imperceptible Watermarking for Code Datasets against Neural Code Completion Models28 Aug
- 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs29 Jul
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Watermarking Conditional Text Generation for AI Detection: Unveiling Challenges and a Semantic-Aware Watermark Remedy25 Jul
- 2023Who Wrote this Code? Watermarking for Code Generation24 May
4 more
- 2023Watermarking Text Generated by Black-Box Language Models14 May
- 2023DeepTextMark: A Deep Learning-Driven Text Watermarking Approach for Identifying Large Language Model Generated Text9 May
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Features3 May
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense23 Mar
Other references · 18
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2021Program Synthesis with Large Language Modelscited by 3,509
- 2021SimCSE: Simple Contrastive Learning of Sentence Embeddingscited by 2,168
- 2023StarCoder: may the source be with you!cited by 790
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
- 2019Release Strategies and the Social Impacts of Language Modelscited by 505
- 2025SpatialVLA: Exploring Spatial Representations for Visual-Language-Action Modelcited by 502
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 490
- 2023LEVER: Learning to Verify Language-to-Code Generation with Executioncited by 228
6 more
- 2020Information Leakage in Embedding Modelscited by 199
- 2021CoProtector: Protect Open-Source Code against Unauthorized Training Usage with Data Poisoningcited by 39
- 2023WatME: Towards Lossless Watermarking Through Lexical Redundancycited by 22
- 2025EpiCoder: Encompassing Diversity and Complexity in Code Generationcited by 21
- 2025Think Small, Act Big: Primitive Prompt Learning for Lifelong Robot Manipulationcited by 13
- 2024Robust and Minimally Invasive Watermarking for EaaScited by 4
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026Watermarking Should Be Treated as a Monitoring Primitivecited by 2
- 2026AGMark: Attention-Guided Dynamic Watermarking for Large Vision-Language Modelscited by 1
- 2026Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputscited by 0
- 2026QuantileMark: A Message-Symmetric Multi-bit Watermark for LLMscited by 0
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematizationcited by 0
- 2026LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization11 Jul 2026
- 2026Watermarking Should Be Treated as a Monitoring Primitive13 May 2026
- 2026QuantileMark: A Message-Symmetric Multi-bit Watermark for LLMs15 Apr 2026
- 2026AGMark: Attention-Guided Dynamic Watermarking for Large Vision-Language Models10 Feb 2026
- 2026Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs14 Jan 2026