A Visual Semantic Adaptive Watermark grounded by Prefix-Tuning for Large Vision-Language Model
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 1 more
Abstract (arXiv)
Watermarking has emerged as a pivotal solution for content traceability and intellectual property protection in Large Vision-Language Models (LVLMs). However, vision-agnostic watermarks introduce visually irrelevant tokens and disrupt visual grounding by enforcing indiscriminate pseudo-random biases, while some semantic-aware methods incur prohibitive inference latency due to rejection sampling. In this paper, we propose the VIsual Semantic Adaptive Watermark (VISA-Mark), a novel framework that embeds detectable signals while strictly preserving visual fidelity. Our approach employs a lightweight, efficiently trained prefix-tuner to extract dynamic Visual-Evidence Weights, which quantify the evidentiary support for candidate tokens based on the visual input. These weights guide an adaptive vocabulary partitioning and logits perturbation mechanism, concentrating watermark strength specifically on visually-supported tokens. By actively aligning the watermark with visual evidence, VISA-Mark effectively maintains visual fidelity. Empirical results confirm that VISA-Mark outperforms conventional methods with a 7.8% improvement in visual consistency (Chair-I) and superior semantic fidelity. The framework maintains highly competitive detection accuracy (96.88% AUC) and robust attack resilience (99.3%) without sacrificing inference efficiency, effectively establishing a new standard for reliability-preserving multimodal watermarking.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 66 of its 76 references that are in the map. First posted on arXiv 12 Jan 2026.
Builds on
66 of 76 references.
Closest ancestors · 3
Same direction, newest first
- 2025VLA-Mark: A cross modal watermark for large vision-language alignment model18 Jul
- 2025SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning18 Feb
- 2023Watermarking Vision-Language Pre-trained Models for Multi-modal Embedding as a Service10 Nov
Other references · 63
- 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,915
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,795
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,234
- 2023Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyondcited by 2,224
- 2022Few-Shot Parameter-Efficient Fine-Tuning is Better and Cheaper than In-Context Learningcited by 896
- 2023A Watermark for Large Language Modelscited by 725
- 2021P-Tuning v2: Prompt Tuning Can Be Comparable to Fine-tuning Universally Across Scales and Taskscited by 689
- 2025Kimi-VL Technical Reportcited by 388
- 2023Robust Distortion-free Watermarks for Language Modelscited by 320
- 2023Visual-Language Prompt Tuning with Knowledge-guided Context Optimizationcited by 308
- 2024Mitigating Hallucinations in Large Vision-Language Models with Instruction Contrastive Decodingcited by 203
38 more
- 2024Imitate, Explore, and Self-Improve: A Reproduction Report on Slow-thinking Reasoning Systemscited by 164
- 2023Who Wrote this Code? Watermarking for Code Generationcited by 141
- 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 130
- 2023A Semantic Invariant Robust Watermark for Large Language Modelscited by 112
- 2023A Survey of Text Watermarking in the Era of Large Language Modelscited by 112
- 2023Unbiased Watermark for Large Language Modelscited by 111
- 2023A Picture is Worth More Than 77 Text Tokens: Evaluating CLIP-Style Models on Dense Captionscited by 108
- 2024MarkLLM: An Open-Source Toolkit for LLM Watermarkingcited by 95
- 2023Protecting Language Generation Models via Invisible Watermarkingcited by 90
- 2023Robust Multi-bit Natural Language Watermarking through Invariant Featurescited by 82
- 2023REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Modelscited by 78
- 2024An Entropy-based Text Watermarking Detection Methodcited by 75
- 2025Skywork R1V: Pioneering Multimodal Reasoning with Chain-of-Thoughtcited by 69
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Modelscited by 65
- 2023A Resilient and Accessible Distribution-Preserving Watermark for Large Language Modelscited by 56
- 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMscited by 54
- 2025Skywork R1V2: Multimodal Hybrid Reinforcement Learning for Reasoningcited by 49
- 2024Provably Robust Multi-bit Watermarking for AI-generated Textcited by 47
- 2023ArGue: Attribute-Guided Prompt Tuning for Vision-Language Modelscited by 39
- 2024Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Modelscited by 34
- 2024Can Watermarks Survive Translation? On the Cross-lingual Consistency of Text Watermark for Large Language Modelscited by 33
- 2022HiURE: Hierarchical Exemplar Contrastive Learning for Unsupervised Relation Extractioncited by 32
- 2023WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Modelscited by 32
- 2024Bypassing LLM Watermarks with Color-Aware Substitutionscited by 28
- 2023WatME: Towards Lossless Watermarking Through Lexical Redundancycited by 27
- 2023From Text to Source: Results in Detecting Large Language Model-Generated Contentcited by 26
- 2024Revisiting the Robustness of Watermarking to Paraphrasing Attackscited by 25
- 2025MorphMark: Flexible Adaptive Watermarking for Large Language Modelscited by 24
- 2025RTV-Bench: Benchmarking MLLM Continuous Perception, Understanding and Reasoning through Real-Time Videocited by 21
- 2024Debiasing Watermarks for Large Language Models via Maximal Couplingcited by 19
- 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Qualitycited by 19
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraintscited by 16
- 2022On Robust Prefix-Tuning for Text Classificationcited by 15
- 2025SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Modelscited by 15
- 2024De-mark: Watermark Removal in Large Language Modelscited by 14
- 2025Towards Watermarking of Open-Source LLMscited by 13
- 2025Do BERT-Like Bidirectional Models Still Perform Better on Text Classification in the Era of LLMs?cited by 10
- 2024Watermarking Language Models through Language Modelscited by 8
50 most cited of 63 All 63 (JSON)
Built on by
Citing papers per year: 2026: 3.
3 papers.
- 2026AndroTMem: From Interaction Trajectories to Anchored Memory in Long-Horizon GUI Agentscited by 10
- 2026Decoding by Perturbation: Mitigating MLLM Hallucinations via Dynamic Textual Perturbationcited by 3
- 2026Debias in Text, Believe Your Eyes: Text-Anchored Cross-Modal Transfer for Visual Counter-Commonsense Reasoningcited by 1
- 2026Debias in Text, Believe Your Eyes: Text-Anchored Cross-Modal Transfer for Visual Counter-Commonsense Reasoning7 Aug 2026
- 2026Decoding by Perturbation: Mitigating MLLM Hallucinations via Dynamic Textual Perturbation14 Apr 2026
- 2026AndroTMem: From Interaction Trajectories to Anchored Memory in Long-Horizon GUI Agents19 Mar 2026
Similar, not cited
Close in wording, no citation either way
- 2026AGMark: Attention-Guided Dynamic Watermarking for Large Vision-Language Models
- 2026IRIS: Visual-Semantic Binding for Forgery-Resistant Watermarking of Diffusion Images
- 2025Removing Watermarks with Partial Regeneration using Semantic Information
- 2026Visually Legible but Adversarial: Watermark-Constrained Attacks on End-to-End VLMs for Document Understanding
- 2026Understanding Semantic Perturbations on In-Processing Generative Image Watermarks
- 2026Breaking Semantic-Aware Watermarks via LLM-Guided Coherence-Preserving Semantic Injection
- 2026Signature filtering: a lightweight enhancement for statistical watermark detection in large language models
- 2026FeatMark: Feature-level Watermark Protection against Mimicry Attacks with Diffusion Models