mlsanityData to 7 Oct 2026

WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking

arXiv 2512.00837 ↗First posted 30 Nov 2025cs.CLcited by 0

On the map: LLM safety and security → Watermarking generated content and models

Abstract (arXiv)

Watermarking acts as a critical safeguard in text generated by Large Language Models (LLMs). By embedding identifiable signals into model outputs, watermarking enables reliable attribution and enhances the security of machine-generated content. Existing approaches typically embed signals by manipulating token generation probabilities. Despite their effectiveness, these methods inherently face a trade-off between detectability and text quality: the signal strength and randomness required for robust watermarking tend to degrade the performance of downstream tasks. In this paper, we design a novel embedding scheme that controls seed pools to facilitate diverse parallel generation of watermarked text. Based on that scheme, we propose WaterSearch, a sentence-level, search-based watermarking framework adaptable to a wide range of existing methods. WaterSearch enhances text quality by jointly optimizing two key aspects: 1) distribution fidelity and 2) watermark signal characteristics. Furthermore, WaterSearch is complemented by a sentence-level detection method with strong attack robustness. We evaluate our method on three popular LLMs across ten diverse tasks. Extensive experiments demonstrate that our method achieves an average performance improvement of 51.01% over state-of-the-art baselines at a watermark detectability strength of 95%. In challenging scenarios such as short text generation and low-entropy output generation, our method yields performance gains of 47.78% and 36.47%, respectively. Moreover, under different attack senarios including insertion, synonym substitution and paraphrase attasks, WaterSearch maintains high detectability, further validating its robust anti-attack capabilities. Our code is available at hrefhttps://github.com/Yukang-Lin/WaterSearchhttps://github.com/Yukang-Lin/WaterSearch.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 32 of its 51 references that are in the map. First posted on arXiv 30 Nov 2025.

Builds on

32 of 51 references.

Closest ancestors · 18

Same direction, newest first

  1. 2025MorphMark: Flexible Adaptive Watermarking for Large Language Models14 May
  2. 2025SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models5 Feb
  3. 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
  4. 2024An Entropy-based Text Watermarking Detection Method20 Mar
  5. 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off6 Mar
  6. 2024k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text17 Feb
  7. 2023A Survey of Text Watermarking in the Era of Large Language Models13 Dec
  8. 2023Downstream Trade-offs of a Family of Text Watermarks16 Nov
  9. 2023WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models13 Nov
  10. 2023REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models18 Oct
  11. 2023Unbiased Watermark for Large Language Models22 Sep
  12. 2023Robust Distortion-free Watermarks for Language Models28 Jul
6 more
  1. 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
  2. 2023Provable Robust Watermarking for AI-Generated Text30 Jun
  3. 2023On the Reliability of Watermarks for Large Language Models7 Jun
  4. 2023Undetectable Watermarks for Language Models25 May
  5. 2023Who Wrote this Code? Watermarking for Code Generation24 May
  6. 2023A Watermark for Large Language Models24 Jan

Other references · 14

  1. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  3. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
  4. 2025Qwen3 Technical Reportcited by 8,195
  5. 2021Evaluating Large Language Models Trained on Codecited by 8,053
  6. 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,686
  7. 2019PEGASUS: Pre-training with Extracted Gap-sentences for Abstractive Summarizationcited by 1,100
  8. 2019ELI5: Long Form Question Answeringcited by 567
  9. 2019Multi-News: a Large-Scale Multi-Document Summarization Dataset and Abstractive Hierarchical Modelcited by 431
  10. 2021QMSum: A New Benchmark for Query-based Multi-domain Meeting Summarizationcited by 363
  11. 2023RepoBench: Benchmarking Repository-Level Code Auto-Completion Systemscited by 346
  12. 2023Foundation Models and Fair Usecited by 112
2 more
  1. 2023Disinformation Capabilities of Large Language Modelscited by 23
  2. 2024Evaluation of LLM Vulnerabilities to Being Misused for Personalized Disinformation Generationcited by 20

Built on by

Not cited yet.