mlsanityData to 14 Oct 2026

Analyzing and Evaluating Unbiased Language Model Watermark

arXiv 2509.24048 ↗First posted 28 Sep 2025cs.CRcited by 5

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Verifying the authenticity of AI-generated text has become increasingly important with the rapid advancement of large language models, and unbiased watermarking has emerged as a promising approach due to its ability to preserve output distribution without degrading quality. However, recent work reveals that unbiased watermarks can accumulate distributional bias over multiple generations and that existing robustness evaluations are inconsistent across studies. To address these issues, we introduce UWbench, the first open-source benchmark dedicated to the principled evaluation of unbiased watermarking methods. Our framework combines theoretical and empirical contributions: we propose a statistical metric to quantify multi-batch distribution drift, prove an impossibility result showing that no unbiased watermark can perfectly preserve the distribution under infinite queries, and develop a formal analysis of robustness against token-level modification attacks. Complementing this theory, we establish a three-axis evaluation protocol: unbiasedness, detectability, and robustness, and show that token modification attacks provide more stable robustness assessments than paraphrasing-based methods. Together, UWbench offers the community a standardized and reproducible platform for advancing the design and evaluation of unbiased watermarking algorithms.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 22 of its 29 references that are in the map. First posted on arXiv 28 Sep 2025.

Builds on

22 of 29 references.

Closest ancestors · 14

Same direction, newest first

  1. 2025Improved Unbiased Watermark for Large Language Models16 Feb
  2. 2024De-mark: Watermark Removal in Large Language Models17 Oct
  3. 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
  4. 2024Can Watermarks Survive Translation? On the Cross-lingual Consistency of Text Watermark for Large Language Models21 Feb
  5. 2023Mark My Words: Analyzing and Evaluating Language Model Watermarks1 Dec
  6. 2023WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models13 Nov
  7. 2023A Semantic Invariant Robust Watermark for Large Language Models10 Oct
  8. 2023Unbiased Watermark for Large Language Models22 Sep
  9. 2023An Unforgeable Publicly Verifiable Watermark for Large Language Models30 Jul
  10. 2023Robust Distortion-free Watermarks for Language Models28 Jul
  11. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  12. 2023On the Reliability of Watermarks for Large Language Models7 Jun
2 more
  1. 2023Undetectable Watermarks for Language Models25 May
  2. 2023A Watermark for Large Language Models24 Jan

Other references · 8

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  3. 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,893
  4. 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
  5. 2023Mistral 7Bcited by 3,164
  6. 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
  7. 2017Get To The Point: Summarization with Pointer-Generator Networkscited by 1,292
  8. 2020Multilingual Denoising Pre-training for Neural Machine Translationcited by 1,035

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 5.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025An Ensemble Framework for Unbiased Language Model Watermarking
  2. 2024Provably Robust Watermarks for Open-Source Language Models
  3. 2024Black-Box Detection of Language Model Watermarks
  4. 2024Debiasing Watermarks for Large Language Models via Maximal Coupling
  5. 2026Unforgeable Watermarks for Language Models via Robust Signatures
  6. 2025BiMark: Unbiased Multilayer Watermarking for Large Language Models
  7. 2026Auditing Cross-Lingual Fairness in Language Model Watermarking
  8. 2024Watermarking Language Models for Many Adaptive Users