SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Semantic-level watermarking (SWM) improves robustness against text modifications by treating sentences as the basic unit. However, robustness to paragraph-level paraphrasing remains difficult because such attacks globally disrupt watermark signals by changing sentence order. In this work, we propose SAMark, a self-anchored watermarking framework that removes the dependency on sentence order by establishing a step-independent green region in semantic space. To improve detectability, we introduce a multi-channel hyperbolic scoring mechanism that amplifies watermark signals while suppressing noise from weakly aligned candidates. We further propose a diversity-aware filtering strategy that combines hard filtering with soft regularization, extending beyond simple n-gram repetition filters to address semantic redundancy. Experimental results show that SAMark achieves up to 90.2% TP@FP1% under typical paragraph-level paraphrasing attacks, outperforming the strongest prior baseline by more than 30% on average, while maintaining generation quality competitive with unwatermarked text and breaking the robustness-quality trade-off that limits prior methods. Our code will be released at [this URL](https://github.com/Z1zs/SAMark).
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 36 of its 42 references that are in the map. First posted on arXiv 25 May 2026.
Builds on
36 of 42 references.
Closest ancestors · 30
Same direction, newest first
- 2025DMark: Order-Agnostic Watermarking for Diffusion Large Language Models3 Oct
- 2025PMark: Towards Robust and Distortion-free Semantic-level Watermarking with Channel Constraints25 Sep
- 2025SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders11 Aug
- 2025MorphMark: Flexible Adaptive Watermarking for Large Language Models14 May
- 2025SimMark: A Robust Sentence-Level Similarity-Based Watermarking Algorithm for Large Language Models5 Feb
- 2024Robust Multi-bit Text Watermark with LLM-based Paraphrasers4 Dec
- 2024A Watermark for Order-Agnostic Language Models17 Oct
- 2024PersonaMark: Personalized LLM watermarking for model protection and user attribution15 Sep
- 2024Bileve: Securing Text Provenance in Large Language Models Against Spoofing with Bi-level Signature4 Jun
- 2024Watermarking Language Models for Many Adaptive Users17 May
- 2024MarkLLM: An Open-Source Toolkit for LLM Watermarking16 May
- 2024An Entropy-based Text Watermarking Detection Method20 Mar
18 more
- 2024WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off6 Mar
- 2024k-SemStamp: A Clustering-Based Semantic Watermark for Detection of Machine-Generated Text17 Feb
- 2024Pseudorandom Error-Correcting Codes14 Feb
- 2024Provably Robust Multi-bit Watermarking for AI-generated Text30 Jan
- 2023Optimizing watermarks for large language models28 Dec
- 2023A Robust Semantics-based Watermark for Large Language Model against Paraphrasing15 Nov
- 2023Publicly-Detectable Watermarking for Language Models27 Oct
- 2023Unbiased Watermark for Large Language Models22 Sep
- 2023Advancing Beyond Identification: Multi-bit Watermark for Large Language Models1 Aug
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Models30 Jul
- 2023Towards Codable Watermarking for Injecting Multi-bits Information to LLMs29 Jul
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Three Bricks to Consolidate Watermarks for Large Language Models26 Jul
- 2023Watermarking Conditional Text Generation for AI Detection: Unveiling Challenges and a Semantic-Aware Watermark Remedy25 Jul
- 2023Provable Robust Watermarking for AI-Generated Text30 Jun
- 2023On the Reliability of Watermarks for Large Language Models7 Jun
- 2023Undetectable Watermarks for Language Models25 May
- 2023A Watermark for Large Language Models24 Jan
Other references · 6
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2021BookSum: A Collection of Datasets for Long-form Narrative Summarizationcited by 184
- 2023WatME: Towards Lossless Watermarking Through Lexical Redundancycited by 27
- 2025CoheMark: A Novel Sentence-Level Watermark for Enhanced Text Qualitycited by 19
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026Beyond Semantic Narrowing: Robust and Efficient LLM Watermarking with Hamming Neighborhoods
- 2023SemStamp: A Semantic Watermark with Paraphrastic Robustness for Text Generation
- 2026AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing
- 2025WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking
- 2024PostMark: A Robust Blackbox Watermark for Large Language Models
- 2025CATMark: A Context-Aware Thresholding Framework for Robust Cross-Task Watermarking in Large Language Models
- 2025Optimal Detection for Language Watermarks with Pseudorandom Collision
- 2025Learning to Watermark: A Selective Watermarking Framework for Large Language Models via Multi-Objective Optimization