ai-kunkun/Watermarking-arxiv-daily

Automatically Update Watermarking Papers Daily using Github Actions (Update Every 12th hours)

Python

28 commits

updated Sep 21, 2026

README

🛡️ Watermarking arXiv Daily

Automatically updated arXiv papers about digital watermarking, generative AI provenance, LLM watermarking, and model ownership.

Updated automatically from arXiv. Introduction shows the first figure found in each paper's arXiv HTML page.

Last updated: 2026-09-21 16:04 CST · Indexed: 342 unique papers

Today's additions · 2026-09-21

Papers first indexed during today's update, grouped by category.

Image and Video Watermarking · 1 new papers

What Breaks Local Watermarks? A Robustness Benchmark for Local Invisible Image Watermarking — 2026-09-15

Generative AI Watermarking · 1 new papers

DRIFT: Removing Diffusion Watermarks by Deflecting the Generative Trajectory — 2026-09-08

Text and LLM Watermarking · 5 new papers

MarkSec: Capability-Aware Evaluation of Adversarial Attacks Against LLM Watermarks — 2026-09-15
Predictive Likelihood Ratios for Language Model Watermark Detection — 2026-09-14
DenMark: Robust Semantic Watermarking for Diffusion Language Models — 2026-09-13
TripPattern: A Pattern-based Text Watermarking Method for Large Language Models — 2026-09-11
Watermarks Without Verification: AI Text Watermarking After the EU AI Act — 2026-09-09

Model Ownership and Fingerprinting · 3 new papers

Inference-Engine Fingerprinting Attacks are Practical: Exploring Model-Driven Environmental Discovery, Exploitation, and Escape — 2026-09-17
Fingerprinting Multimodal Large Language Models — 2026-09-17
Predictive Likelihood Ratios for Language Model Watermark Detection — 2026-09-14

Search scope and keywords

Image and Video Watermarking: image watermarking, video watermarking, digital image watermark, multimedia watermarking, invisible watermark
Generative AI Watermarking: generative AI watermarking, AI-generated content watermarking, diffusion model watermarking, diffusion watermark, latent watermarking
Text and LLM Watermarking: large language model watermarking, language model watermarking, LLM watermarking, text watermarking, watermarked text
Model Ownership and Fingerprinting: neural network watermarking, model watermarking, model fingerprinting, neural network fingerprinting, model ownership verification

Image and Video Watermarking

112 papers · newest first

Title & Authors	Venue/Year	Introduction	Links
What Breaks Local Watermarks? A Robustness Benchmark for Local Invisible Image Watermarking _{Kai Yao, Bence Szilágyi, Sebestyén Kamp et al.}	the ACM Digital Library 2026		Paper PDF `2609.16832`
One Prompt Is Enough: Watermark Laundering Through Foundation Image Models _{Jidong Yang, Qi Li, Wei Zong et al.}	arXiv · cs.CV 2026		Paper PDF `2609.01249`
What Limits Robustness in Deep Image Watermarking: An Analysis of Mechanisms and Their Scaling Across Capacities _{Marta Bistroń, Zbigniew Piotrowski}	arXiv · cs.CR 2026	—	Paper PDF `2609.01050`
Asymmetric Phase Coding Video Watermarking _{Guang Yang, Fengchen Liu}	arXiv · cs.CR 2026		Paper PDF `2608.29212`
Keyed Provenance Watermarking with Complementary Lattice-Based Secure Aggregation for Federated Learning _{Xinyun Liu, Zhi Lu, Yu Chen et al.}	arXiv · cs.CR 2026		Paper PDF `2608.20580`
Bit-Level Triangular Content-Aware Permutation for Fragile Image Watermarking: Zero False Positive Rate, Single-Bit Sensitivity, and Arbitrary Dimension Support _{Zahra Ghoraeian, Mohammad-Reza Sadeghi, Samaneh Mashhadi}	arXiv · cs.CR 2026		Paper PDF `2608.14800`
MarkNull: Model-Agnostic Watermark Removal in AI-Generated Images via On-Manifold Latent Manipulation _{Jie Cao, Qi Li, Zelin Zhang et al.}	the 35th USENIX Security Symposium (USENIX Security 2026) 2026		Paper PDF `2608.10166`
Signpost Watermarking: Joint Optimization for Visual Watermark Coexistence _{Shruti Agarwal, Vishal Asnani, John Collomosse}	arXiv · cs.CV 2026		Paper PDF `2608.10091`
SpreadMark: Robust Image Watermarking via Spread-Spectrum Embedding _{Wei Song, Yuxin Cao, Zhenchang Xing et al.}	arXiv · cs.CR 2026		Paper PDF `2608.03165`
SPFM-Net: Semantic-Prior-Guided Frequency-Constrained Mamba for Invisible Watermark Attack _{Chunpeng Wang, Yanan Shi, Zhiqiu Xia et al.}	arXiv · cs.CV 2026		Paper PDF `2607.27811`
FDDWAN: A Frequency-Decoupled Diffusion Network for Watermarking Attack _{Chunpeng Wang, Yuxin Li, Xiaoyu Wang et al.}	arXiv · cs.CV 2026		Paper PDF `2607.27800`
CASIAL: Geometric Distortion Robust Image Watermarking _{Yupeng Qiu, Han Fang, Ee-Chien Chang}	arXiv · cs.CV 2026		Paper PDF `2607.26729`
Beyond AI-Generated Labels: Watermarking, Co-Creation, and Conflation of AI-Generation with Disinformation _{Federico Germani, Giovanni Spitale}	arXiv · cs.CR 2026	—	Paper PDF `2607.13082`
FlowMark: Mask-Guided Video Watermarking _{Vishal Asnani, Shruti Agarwal, John Collomosse}	arXiv · cs.CV 2026		Paper PDF `2607.05261`
"Training robust watermarking model may hurt authentication!'' Exploring and Mitigating the Identity Leakage in Robust Watermarking _{Xinyu Zhang, Ziping Dong, Qingyu Liu et al.}	arXiv · cs.CR 2026		Paper PDF `2605.09646`
CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint _{Jiewei Lai, Lan Zhang, Chen Tang et al.}	arXiv · cs.CV 2026		Paper PDF `2605.01479`
Breaking Watermarks in the Frequency Domain: A Modulated Diffusion Attack Framework _{Chunpeng Wang, Binyan Qu, Xiaoyu Wang et al.}	arXiv · cs.CV 2026		Paper PDF `2604.22220`
ADD for Multi-Bit Image Watermarking _{An Luo, Jie Ding}	arXiv · stat.ML 2026		Paper PDF `2604.11491`
UniMark: Unified Adaptive Multi-bit Watermarking for Autoregressive Image Generators _{Yigit Yilmaz, Elena Petrova, Mehmet Kaya et al.}	arXiv · cs.CV 2026		Paper PDF `2604.11843`
ResGuard: Enhancing Robustness Against Known Original Attacks in Deep Watermarking _{Hanyi Wang, Han Fang, Yupeng Qiu et al.}	arXiv · cs.CV 2026		Paper PDF `2604.03693`
Understanding Semantic Perturbations on In-Processing Generative Image Watermarks _{Anirudh Nakra, Min Wu}	arXiv · cs.CV 2026		Paper PDF `2603.27513`
SAiW: Source-Attributable Invisible Watermarking for Proactive Deepfake Defense _{Bibek Das, Chandranath Adak, Soumi Chattopadhyay et al.}	arXiv · cs.AI 2026		Paper PDF `2603.23178`
Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking _{Qian Qi, Jiangyun Tang, Jim Lee et al.}	arXiv · eess.IV 2026	—	Paper PDF `2603.12949`
SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarking _{Zheng Gao, Yifan Yang, Xiaoyu Li et al.}	arXiv · cs.CV 2026		Paper PDF `2603.12749`
Attribution as Retrieval: Model-Agnostic AI-Generated Image Attribution _{Hongsong Wang, Renxi Cheng, Chaolei Han et al.}	CVPR 2026 2026		Paper PDF `2603.10583`
The Orthogonal Vulnerabilities of Generative AI Watermarks: A Comparative Empirical Benchmark of Spatial and Latent Provenance _{Jesse Yu, Nicholas Wei}	arXiv · cs.CR 2026	—	Paper PDF `2603.10323`
ShapeMark: Robust and Diversity-Preserving Watermarking for Diffusion Models _{Yuqi Qian, Yun Cao, Haocheng Fu et al.}	In Proceedings of the 34th ACM International Conference on Multimedia (MM 2026) 2026		Paper PDF `2603.09454`
AWPD: Frequency Shield Network for Agnostic Watermark Presence Detection _{Xiang Ao, Yilin Du, Zidan Wang et al.}	arXiv · cs.CV 2026		Paper PDF `2603.06723`
When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editing _{Fai Gu, Qiyu Tang, Te Wen et al.}	arXiv · cs.CR 2026	—	Paper PDF `2603.04696`
SIGMark: Scalable In-Generation Watermark with Blind Extraction for Video Diffusion _{Xinjie Zhu, Zijing Zhao, Hui Jin et al.}	ICLR 2026 2026		Paper PDF `2603.02882`
Authenticated Contradictions from Desynchronized Provenance and Watermarking _{Alexander Nemecek, Hengzhi He, Guang Cheng et al.}	CVPR 2026 Workshop Authenticity & Provenance in the Age of AI (APAI) 2026		Paper PDF `2603.02378`
Hide&Seek: Remove Image Watermarks with Negligible Cost via Pixel-wise Reconstruction _{Huajie Chen, Tianqing Zhu, Hailin Yang et al.}	arXiv · cs.CR 2026		Paper PDF `2603.01067`
SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Models _{Yang Yang, Xinze Zou, Zehua Ma et al.}	arXiv · cs.CV 2026		Paper PDF `2603.00194`
Attention to Neural Plagiarism: Diffusion Models Can Plagiarize Your Copyrighted Images! _{Zihang Zou, Boqing Gong, Liqiang Wang}	ICCV 2025 2025		Paper PDF `2603.00150`
Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarking _{Fan Guo, Jiyu Kang, Qi Ming et al.}	arXiv · cs.CR 2026	—	Paper PDF `2602.20680`
Decoupling Defense Strategies for Robust Image Watermarking _{Jiahui Chen, Zehang Deng, Zeyu Zhang et al.}	arXiv · cs.CV 2026		Paper PDF `2602.20053`
MarkSweep: A No-box Removal Attack on AI-Generated Image Watermarking via Noise Intensification and Frequency-aware Denoising _{Jie Cao, Zelin Zhang, Qi Li et al.}	arXiv · cs.CR 2026		Paper PDF `2602.15364`
WMVLM: Evaluating Diffusion Model Image Watermarking via Vision-Language Models _{Zijin Yang, Yu Sun, Kejiang Chen et al.}	arXiv · cs.CV 2026		Paper PDF `2601.21610`
DeMark: A Query-Free Black-Box Attack on Deepfake Watermarking Defenses _{Wei Song, Zhenchang Xing, Liming Zhu et al.}	arXiv · cs.CR 2026		Paper PDF `2601.16473`
NiMark: A Non-intrusive Watermarking Framework against Screen-shooting Attacks _{Yufeng Wu, Xin Liao, Baowei Wang et al.}	arXiv · eess.IV 2026		Paper PDF `2601.11978`
RAVEN: Erasing Invisible Watermarks via Novel View Synthesis _{Fahad Shamshad, Nils Lukas, Karthik Nandakumar}	arXiv · cs.CV 2026		Paper PDF `2601.08832`
MT-Mark: Rethinking Image Watermarking via Mutual-Teacher Collaboration with Adaptive Feature Modulation _{Fei Ge, Ying Huang, Jie Liu et al.}	arXiv · cs.CV 2025		Paper PDF `2512.19438`
WaTeRFlow: Watermark Temporal Robustness via Flow Consistency _{Utae Jeong, Sumin In, Hyunju Ryu et al.}	arXiv · cs.CV 2025		Paper PDF `2512.19048`
Pixel Seal: Adversarial-only training for invisible image and video watermarking _{Tomáš Souček, Pierre Fernandez, Hady Elsahar et al.}	arXiv · cs.CV 2025		Paper PDF `2512.16874`
Where is the Watermark? Interpretable Watermark Detection at the Block Level _{Maria Bulychev, Neil G. Marchant, Benjamin I. P. Rubinstein}	arXiv · cs.CV 2025		Paper PDF `2512.14994`
Security and Detectability Analysis of Unicode Text Watermarking Methods against Large Language Models _{Malte Hellmeier}	arXiv · cs.CR 2025		Paper PDF `2512.13325`
SPDMark: Selective Parameter Displacement for Robust Video Watermarking _{Samar Fares, Nurbek Tastan, Karthik Nandakumar}	arXiv · cs.CV 2025		Paper PDF `2512.12090`
SimuFreeMark: A Noise-Simulation-Free Robust Watermarking Against Image Editing _{Yichao Tang, Mingyang Li, Di Miao et al.}	arXiv · cs.CV 2025		Paper PDF `2511.11295`
On the Information-Theoretic Fragility of Robust Watermarking under Diffusion Editing _{Yunyi Ni, Ziyu Yang, Ze Niu et al.}	arXiv · cs.CR 2025	—	Paper PDF `2511.10933`
Robustness and Imperceptibility Analysis of Hybrid Spatial-Frequency Domain Image Watermarking _{Rizal Khoirul Anam}	arXiv · cs.MM 2025		Paper PDF `2511.10245`
Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks _{Wenkai Fu, Finn Carter, Yue Wang et al.}	arXiv · cs.CR 2025	—	Paper PDF `2511.05598`
T2SMark: Balancing Robustness and Diversity in Noise-as-Watermark for Diffusion Models _{Jindong Yang, Han Fang, Weiming Zhang et al.}	arXiv · cs.CV 2025		Paper PDF `2510.22366`
Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models _{Tomáš Souček, Sylvestre-Alvise Rebuffi, Pierre Fernandez et al.}	arXiv · cs.LG 2025		Paper PDF `2510.20468`
SynthID-Image: Image watermarking at internet scale _{Sven Gowal, Rudy Bunel, Florian Stimberg et al.}	arXiv · cs.CR 2025		Paper PDF `2510.09263`
SpecGuard: Spectral Projection-based Advanced Invisible Watermarking _{Inzamamul Alam, Md Tanvir Islam, Khan Muhammad et al.}	arXiv · cs.CV 2025		Paper PDF `2510.07302`
We Can Hide More Bits: The Unused Watermarking Capacity in Theory and in Practice _{Aleksandar Petrov, Pierre Fernandez, Tomáš Souček et al.}	arXiv · cs.CR 2025		Paper PDF `2510.12812`
Diffusion-Based Image Editing for Breaking Robust Watermarks _{Yunyi Ni, Finn Carter, Ze Niu et al.}	arXiv · cs.CV 2025	—	Paper PDF `2510.05978`
Fast, Secure, and High-Capacity Image Watermarking with Autoencoded Text Vectors _{Gautier Evennou, Vivien Chappelier, Ewa Kijak}	arXiv · cs.CR 2025		Paper PDF `2510.00799`
Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey _{Jie Cao, Qi Li, Zelin Zhang et al.}	arXiv · cs.CR 2025		Paper PDF `2510.02384`
Of-SemWat: High-payload text embedding for semantic watermarking of AI-generated images with arbitrary size _{Benedetta Tondi, Andrea Costanzo, Mauro Barni}	arXiv · cs.CR 2025		Paper PDF `2509.24823`
LoT-Pass: Long-term-robust Image Watermarking for Image to Video Generation _{Guanjie Wang, Zehua Ma, Han Fang et al.}	arXiv · cs.CV 2025		Paper PDF `2509.17773`
DINVMark: A Deep Invertible Network for Video Watermarking _{Jianbin Ji, Dawen Xu, Li Dong et al.}	arXiv · cs.CR 2025		Paper PDF `2509.17416`
An Efficient and Adaptive Watermark Detection System with Tile-based Error Correction _{Xinrui Zhong, Xinze Feng, Jingwei Zuo et al.}	arXiv · cs.DC 2025		Paper PDF `2509.02447`
First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge _{Fahad Shamshad, Tameem Bakr, Yahia Shaaban et al.}	arXiv · cs.CV 2025		Paper PDF `2508.21072`
Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design _{Yuhao Sun, Yihua Zhang, Gaowen Liu et al.}	arXiv · cs.CR 2025		Paper PDF `2508.10065`
Learning Generalizable and Efficient Image Watermarking via Hierarchical Two-Stage Optimization _{Ke Liu, Xuanhan Wang, Qilong Zhang et al.}	arXiv · cs.CV 2025		Paper PDF `2508.08667`
MaXsive: High-Capacity and Robust Training-Free Generative Image Watermarking in Diffusion Models _{Po-Yuan Mao, Cheng-Chang Tsai, Chun-Shien Lu}	arXiv · cs.CR 2025		Paper PDF `2507.21195`
TAG-WM: Tamper-Aware Generative Image Watermarking via Diffusion Inversion Sensitivity _{Yuzhuo Chen, Zehua Ma, Han Fang et al.}	arXiv · cs.MM 2025		Paper PDF `2506.23484`
Peccavi: Visual Paraphrase Attack Safe and Distortion Free Image Watermarking Technique for AI-Generated Images _{Shreyas Dixit, Ashhar Aziz, Shashwat Bajpai et al.}	arXiv · cs.CV 2025		Paper PDF `2506.22960`
BitMark: Watermarking Bitwise Autoregressive Image Generative Models _{Louis Kerner, Michel Meintz, Bihe Zhao et al.}	arXiv · cs.CV 2025		Paper PDF `2506.21209`
Dynamic Watermark Generation for Digital Images using Perimeter Gated SPAD Imager PUFs _{Md Sakibur Sajal, Marc Dandin}	MWSCAS 2025 Conference 2025		Paper PDF `2506.17134`
Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attack _{Siqi Hui, Yiren Song, Sanping Zhou et al.}	arXiv · cs.CR 2025		Paper PDF `2506.01011`
VideoMarkBench: Benchmarking Robustness of Video Watermarking _{Zhengyuan Jiang, Moyang Guo, Kecen Li et al.}	arXiv · cs.CR 2025	—	Paper PDF `2505.21620`
Training-Free Watermarking for Autoregressive Image Generation _{Yu Tong, Zihao Pan, Shuai Yang et al.}	arXiv · cs.CV 2025		Paper PDF `2505.14673`
Removing Watermarks with Partial Regeneration using Semantic Information _{Krti Tallam, John Kevin Cava, Caleb Geniesse et al.}	arXiv · cs.CV 2025		Paper PDF `2505.08234`
SSH-Net: A Self-Supervised and Hybrid Network for Noisy Image Watermark Removal _{Wenyang Liu, Jianjun Gao, Kim-Hui Yap}	arXiv · cs.MM 2025		Paper PDF `2505.05088`
GenPTW: Latent Image Watermarking for Provenance Tracing and Tamper Localization _{Zhenliang Gan, Chunya Liu, Yichao Tang et al.}	arXiv · cs.CR 2025		Paper PDF `2504.19567`
VideoMark: A Distortion-Free Robust Watermarking Framework for Video Diffusion Models _{Xuming Hu, Hanqian Li, Jungang Li et al.}	arXiv · cs.CR 2025		Paper PDF `2504.16359`
Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models _{Zijin Yang, Xin Zhang, Kejiang Chen et al.}	arXiv · cs.CV 2025		Paper PDF `2504.15026`
Saliency-Aware Diffusion Reconstruction for Effective Invisible Watermark Removal _{Inzamamul Alam, Md Tanvir Islam, Simon S. Woo}	The Web Conference 2025 2025	—	Paper PDF `2504.12809`
Mask Image Watermarking _{Runyi Hu, Jie Zhang, Shiqian Zhao et al.}	arXiv · cs.CV 2025		Paper PDF `2504.12739`
PT-Mark: Invisible Watermarking for Text-to-image Diffusion Models via Semantic-aware Pivotal Tuning _{Yaopeng Wang, Huiyu Xu, Zhibo Wang et al.}	arXiv · cs.CR 2025		Paper PDF `2504.10853`
RoSMM: A Robust and Secure Multi-Modal Watermarking Framework for Diffusion Models _{ZhongLi Fang, Yu Xie, Ping Chen}	arXiv · cs.MM 2025		Paper PDF `2504.02640`
Is Your Writing Being Mimicked by AI? Unveiling Imitation with Invisible Watermarks in Creative Writing _{Ziwei Zhang, Juan Wen, Wanli Peng et al.}	arXiv · cs.CR 2025		Paper PDF `2504.00035`
WMCopier: Forging Invisible Image Watermarks on Arbitrary Images _{Ziping Dong, Chao Shuai, Zhongjie Ba et al.}	arXiv · cs.CR 2025		Paper PDF `2503.22330`
Protecting Your Video Content: Disrupting Automated Video-based LLM Annotations _{Haitong Liu, Kuofeng Gao, Yang Bai et al.}	arXiv · cs.CV 2025		Paper PDF `2503.21824`
GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splatting _{Lijiang Li, Jinglu Wang, Xiang Ming et al.}	arXiv · cs.CV 2025		Paper PDF `2503.18718`
Text-Guided Image Invariant Feature Learning for Robust Image Watermarking _{Muhammad Ahtesham, Xin Zhong}	arXiv · cs.CV 2025		Paper PDF `2503.13805`
SEAL: Semantic Aware Image Watermarking _{Kasra Arabi, R. Teal Witter, Chinmay Hegde et al.}	arXiv · cs.LG 2025		Paper PDF `2503.12172`
Your Text Encoder Can Be An Object-Level Watermarking Controller _{Naresh Kumar Devulapally, Mingzhen Huang, Vishal Asnani et al.}	arXiv · cs.CV 2025		Paper PDF `2503.11945`
Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking _{Ziyi Wang, Songbai Tan, Gang Xu et al.}	arXiv · cs.MM 2025		Paper PDF `2503.11324`
Provenance Detection for AI-Generated Images: Combining Perceptual Hashing, Homomorphic Encryption, and AI Detection Models _{Shree Singhi, Aayan Yadav, Aayush Gupta et al.}	arXiv · cs.CV 2025	—	Paper PDF `2503.11195`
The NeRF Signature: Codebook-Aided Watermarking for Neural Radiance Fields _{Ziyuan Luo, Anderson Rocha, Boxin Shi et al.}	arXiv · cs.CV 2025		Paper PDF `2502.19125`
Deep Learning-based Dual Watermarking for Image Copyright Protection and Authentication _{Sudev Kumar Padhi, Archana Tiwari, Sk. Subidh Ali}	arXiv · cs.CR 2025		Paper PDF `2502.18501`
A Baseline Method for Removing Invisible Image Watermarks using Deep Image Prior _{Hengyue Liang, Taihui Li, Ju Sun}	arXiv · eess.IV 2025		Paper PDF `2502.13998`
Image Watermarking of Generative Diffusion Models _{Yunzhuo Chen, Jordan Vice, Naveed Akhtar et al.}	arXiv · eess.IV 2025		Paper PDF `2502.10465`
Fast In-Spectrum Graph Watermarks _{Jade Garcia Bourrée, Anne-Marie Kermarrec, Erwan Le Merrer et al.}	arXiv · cs.DS 2025		Paper PDF `2502.04182`
On the Coexistence and Ensembling of Watermarks _{Aleksandar Petrov, Shruti Agarwal, Philip H. S. Torr et al.}	arXiv · cs.CV 2025		Paper PDF `2501.17356`
SAT-LDM: Provably Generalizable Image Watermarking for Latent Diffusion Models with Self-Augmented Training _{Lu Zhang, Liang Zeng}	arXiv · cs.LG 2024		Paper PDF `2501.00463`
RoboSignature: Robust Signature and Watermarking on Network Attacks _{Aryaman Shaan, Garvit Banga, Raghav Mantri}	arXiv · cs.CR 2024	—	Paper PDF `2412.19834`
Invisible Watermarks: Attacks and Robustness _{Dongjun Hwang, Sungwon Woo, Tom Gao et al.}	arXiv · cs.CV 2024		Paper PDF `2412.12511`
SuperMark: Robust and Training-free Image Watermarking via Diffusion-based Super-Resolution _{Runyi Hu, Jie Zhang, Yiming Li et al.}	arXiv · cs.CV 2024		Paper PDF `2412.10049`
Video Seal: Open and Efficient Video Watermarking _{Pierre Fernandez, Hady Elsahar, I. Zeki Yalniz et al.}	arXiv · cs.MM 2024		Paper PDF `2412.09492`
LVMark: Robust Watermark for Latent Video Diffusion Models _{Youngdong Jang, MinHyuk Jang, JaeHyeok Lee et al.}	arXiv · cs.CV 2024		Paper PDF `2412.09122`
Hidden in the Noise: Two-Stage Robust Watermarking for Images _{Kasra Arabi, Benjamin Feuer, R. Teal Witter et al.}	arXiv · cs.CV 2024		Paper PDF `2412.04653`
The Efficacy of Transfer-based No-box Attacks on Image Watermarking: A Pragmatic Analysis _{Qilong Wu, Varun Chandrasekaran}	arXiv · cs.CR 2024		Paper PDF `2412.02576`
OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarking _{Xuanyu Zhang, Zecheng Tang, Zhipei Xu et al.}	arXiv · cs.CV 2024		Paper PDF `2412.01615`
Watermark Anything with Localized Messages _{Tom Sander, Pierre Fernandez, Alain Durmus et al.}	arXiv · cs.CV 2024		Paper PDF `2411.07231`
Ideal Pseudorandom Codes _{Omar Alrabiah, Prabhanjan Ananth, Miranda Christ et al.}	arXiv · cs.CR 2024	—	Paper PDF `2411.05947`
ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization _{Huayang Huang, Yu Wu, Qian Wang}	arXiv · cs.CV 2024		Paper PDF `2411.03862`
GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting _{Xiufeng Huang, Ruiqi Li, Yiu-ming Cheung et al.}	arXiv · cs.CV 2024		Paper PDF `2410.23718`
Shallow Diffuse: Robust and Invisible Watermarking through Low-Dimensional Subspaces in Diffusion Models _{Wenda Li, Huijie Zhang, Qing Qu}	arXiv · cs.LG 2024		Paper PDF `2410.21088`

Generative AI Watermarking

40 papers · newest first

Title & Authors	Venue/Year	Introduction	Links
DRIFT: Removing Diffusion Watermarks by Deflecting the Generative Trajectory _{Rui Bao, Zheng Gao, Xiaoyu Li et al.}	arXiv · cs.CR 2026		Paper PDF `2609.08213`
IRIS: Visual-Semantic Binding for Forgery-Resistant Watermarking of Diffusion Images _{Xiaoyan Feng, Zheng Gao, Tong Guan et al.}	arXiv · cs.CV 2026		Paper PDF `2608.03539`
FDDWAN: A Frequency-Decoupled Diffusion Network for Watermarking Attack _{Chunpeng Wang, Yuxin Li, Xiaoyu Wang et al.}	arXiv · cs.CV 2026		Paper PDF `2607.27800`
AnchorMark: Robust Diffusion Watermarking via Latent-Space Rotation Synchrony _{Yuqi Qian, Yun Cao, Haocheng Fu et al.}	arXiv · cs.CR 2026		Paper PDF `2607.27551`
Observation-Level Watermarking and Detection for Tabular Data _{Dongyu Cui, Xuan Bi}	arXiv · stat.ME 2026	—	Paper PDF `2607.10554`
BiSLW: Bi-Spectral Latent Watermarking for Generative Diffusion Models _{Aryan Pandit}	arXiv · cs.CV 2026		Paper PDF `2607.02643`
Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing _{Leyi Qi, Yiming Li, Siyuan Liang et al.}	the International Conference on Machine Learning (ICML) 2026 2026		Paper PDF `2605.29809`
LoRA-Key: User-Centric LoRA Watermarking for Text-to-Image Diffusion Models _{Yaopeng Wang, Qingliang Wang, Zhibo Wang et al.}	arXiv · cs.CR 2026		Paper PDF `2605.29569`
Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio _{Georgios Milis, Yubin Qin, Yihan Wu et al.}	ICML 2026 2026		Paper PDF `2605.25967`
Removing the Watermark Is Not Enough: Forensic Stealth in Generative-AI Watermark Removal _{Yevin Nikhel Goonatilake, Giuseppe Ateniese}	arXiv · cs.CR 2026		Paper PDF `2605.09203`
CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint _{Jiewei Lai, Lan Zhang, Chen Tang et al.}	arXiv · cs.CV 2026		Paper PDF `2605.01479`
Dual-Guard: Dual-Channel Latent Watermarking for Provenance and Tamper Localization in Diffusion Images _{JinFeng Xie, Chengfu Ou, Peipeng Yu et al.}	arXiv · cs.CR 2026		Paper PDF `2604.19090`
Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communication _{Yi Zhang, Hongbo Huang, Liang-Jie Zhang}	arXiv · cs.CV 2026		Paper PDF `2603.26167`
High-Fidelity Face Content Recovery via Tamper-Resilient Versatile Watermarking _{Peipeng Yu, Jinfeng Xie, Chengfu Ou et al.}	arXiv · cs.CV 2026		Paper PDF `2603.23940`
The Orthogonal Vulnerabilities of Generative AI Watermarks: A Comparative Empirical Benchmark of Spatial and Latent Provenance _{Jesse Yu, Nicholas Wei}	arXiv · cs.CR 2026	—	Paper PDF `2603.10323`
OSI: One-step Inversion Excels in Extracting Diffusion Watermarks _{Yuwei Chen, Zhenliang He, Jia Tang et al.}	arXiv · cs.CV 2026		Paper PDF `2602.09494`
ALIEN: Analytic Latent Watermarking for Controllable Generation _{Liangqi Lei, Keke Gai, Jing Yu et al.}	arXiv · eess.IV 2026		Paper PDF `2602.06101`
SemBind: Binding Diffusion Watermarks to Semantics Against Black-Box Forgery Attacks _{Xin Zhang, Zijin Yang, Kejiang Chen et al.}	arXiv · cs.CR 2026	—	Paper PDF `2601.20310`
Learning to Watermark in the Latent Space of Generative Models _{Sylvestre-Alvise Rebuffi, Tuan Tran, Valeriu Lacatusu et al.}	arXiv · cs.CV 2026		Paper PDF `2601.16140`
LR-DWM: Efficient Watermarking for Diffusion Language Models _{Ofek Raban, Ethan Fetaya, Gal Chechik}	arXiv · cs.CL 2026		Paper PDF `2601.12376`
SPDMark: Selective Parameter Displacement for Robust Video Watermarking _{Samar Fares, Nurbek Tastan, Karthik Nandakumar}	arXiv · cs.CV 2025		Paper PDF `2512.12090`
HMARK: Radioactive Multi-Bit Semantic-Latent Watermarking for Diffusion Models _{Kexin Li, Guozhen Ding, Ilya Grishchenko et al.}	arXiv · cs.CR 2025		Paper PDF `2512.00094`
OptMark: Robust Multi-bit Diffusion Watermarking via Inference Time Optimization _{Jiazheng Xing, Hai Ci, Hongbin Xu et al.}	arXiv · cs.CR 2025		Paper PDF `2508.21727`
MaXsive: High-Capacity and Robust Training-Free Generative Image Watermarking in Diffusion Models _{Po-Yuan Mao, Cheng-Chang Tsai, Chun-Shien Lu}	arXiv · cs.CR 2025		Paper PDF `2507.21195`
KGMark: A Diffusion Watermark for Knowledge Graphs _{Hongrui Peng, Haolang Lu, Yuanlong Yu et al.}	arXiv · cs.CR 2025		Paper PDF `2505.23873`
Forging and Removing Latent-Noise Diffusion Watermarks Using a Single Image _{Anubhav Jain, Yuya Kobayashi, Naoki Murata et al.}	arXiv · cs.CV 2025		Paper PDF `2504.20111`
Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models _{Zijin Yang, Xin Zhang, Kejiang Chen et al.}	arXiv · cs.CV 2025		Paper PDF `2504.15026`
Image Watermarking of Generative Diffusion Models _{Yunzhuo Chen, Jordan Vice, Naveed Akhtar et al.}	arXiv · eess.IV 2025		Paper PDF `2502.10465`
LVMark: Robust Watermark for Latent Video Diffusion Models _{Youngdong Jang, MinHyuk Jang, JaeHyeok Lee et al.}	arXiv · cs.CV 2024		Paper PDF `2412.09122`
Ideal Pseudorandom Codes _{Omar Alrabiah, Prabhanjan Ananth, Miranda Christ et al.}	arXiv · cs.CR 2024	—	Paper PDF `2411.05947`
Plug-and-Hide: Provable and Adjustable Diffusion Generative Steganography _{Jiahao Zhu, Zixuan Chen, Jiali Liu et al.}	arXiv · cs.CR 2024		Paper PDF `2409.04878`
Latent Watermarking of Audio Generative Models _{Robin San Roman, Pierre Fernandez, Antoine Deleforge et al.}	arXiv · cs.SD 2024		Paper PDF `2409.02915`
WMAdapter: Adding WaterMark Control to Latent Diffusion Models _{Hai Ci, Yiren Song, Pei Yang et al.}	arXiv · cs.CV 2024		Paper PDF `2406.08337`
RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification _{Hai Ci, Pei Yang, Yiren Song et al.}	arXiv · cs.CV 2024		Paper PDF `2404.14055`
Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models _{Zijin Yang, Kai Zeng, Kejiang Chen et al.}	arXiv · cs.CV 2024		Paper PDF `2404.04956`
Latent Watermark: Inject and Detect Watermarks in Latent Diffusion Space _{Zheling Meng, Bo Peng, Jing Dong}	arXiv · cs.CV 2024	—	Paper PDF `2404.00230`
ProMark: Proactive Diffusion Watermarking for Causal Attribution _{Vishal Asnani, John Collomosse, Tu Bui et al.}	CVPR 2024 2024		Paper PDF `2403.09914`
WAVES: Benchmarking the Robustness of Image Watermarks _{Bang An, Mucong Ding, Tahseen Rabbani et al.}	arXiv · cs.CV 2024		Paper PDF `2401.08573`
OVLA: Neural Network Ownership Verification using Latent Watermarks _{Feisi Fu, Wenchao Li}	arXiv · cs.CR 2023		Paper PDF `2306.13215`
ReDMark: Framework for Residual Diffusion Watermarking on Deep Networks _{Mahdi Ahmadi, Alireza Norouzi, S. M. Reza Soroushmehr et al.}	arXiv · cs.MM 2018	—	Paper PDF `1810.07248`

Text and LLM Watermarking

116 papers · newest first

Title & Authors	Venue/Year	Introduction	Links
MarkSec: Capability-Aware Evaluation of Adversarial Attacks Against LLM Watermarks _{Kairong Li, Zhikun Zhang, Xiao Ren et al.}	arXiv · cs.CR 2026		Paper PDF `2609.16681`
Predictive Likelihood Ratios for Language Model Watermark Detection _{Li Ma}	arXiv · stat.ML 2026	—	Paper PDF `2609.15657`
DenMark: Robust Semantic Watermarking for Diffusion Language Models _{Tianhao Ma, Weihao Xuan, Dong-Dong Wu et al.}	arXiv · cs.CL 2026		Paper PDF `2609.14257`
TripPattern: A Pattern-based Text Watermarking Method for Large Language Models _{Sangjun Moon, Dasom Choi, Jingun Kwon et al.}	Findings of AACL-IJCNLP 2026 2026	—	Paper PDF `2609.12472`
Watermarks Without Verification: AI Text Watermarking After the EU AI Act _{Alexander Nemecek, Vipin Chaudhary, Erman Ayday}	arXiv · cs.CY 2026	—	Paper PDF `2609.09604`
WeaveMark: Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading _{Gang-Hyun Park, Ju-Hyeong Lee, Hee-Youl Kwak et al.}	arXiv · cs.CR 2026		Paper PDF `2609.02177`
WoE Wrote It? Watermarking Mixture-of-Experts LLMs for Black-Box Text Provenance _{Jona te Lintelo, Lichao Wu, Stjepan Picek}	arXiv · cs.CR 2026	—	Paper PDF `2608.29151`
Auditing Cross-Lingual Fairness in Language Model Watermarking _{Alexander Nemecek, Osama Zafar, Debargha Ganguly et al.}	arXiv · cs.CL 2026		Paper PDF `2608.20047`
Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks _{Xiaoyan Feng, Yanjun Zhang, He Zhang et al.}	arXiv · cs.CR 2026		Paper PDF `2608.12713`
WorldMark: A Plug-and-Play World Knowledge Interface for Cross-Host Language Model Watermarking _{Song Xiao, Yuqi Yuan, Yanshuo Zhang et al.}	arXiv · cs.CR 2026		Paper PDF `2608.06416`
DHMark: Public-Key Watermarking for LLM-Generated Text via Diffie-Hellman-Guided Rejection Sampling _{Haocheng Fu, Yuqi Qian, Luyao Wang et al.}	arXiv · cs.CR 2026		Paper PDF `2608.03093`
Efficient Online LLM Watermark Detection via Rao-Blackwellized E-Processes _{Lu Luo, Dandan Mo, Chengdong Xu et al.}	arXiv · stat.ML 2026		Paper PDF `2607.21958`
ChainMark: Model-Free LLM Watermarking with Closed-Form Calibration _{Chengheng Li-Chen, Kyuhee Kim}	arXiv · cs.CR 2026		Paper PDF `2607.18445`
SSTMark: Robust Training-Free Semantic-Level Speech Watermarking _{Kuan-Lin Chu, Jun-Cheng Chen, Chun-Shien Lu}	arXiv · cs.SD 2026		Paper PDF `2607.17592`
AI Watermark Evidence Fails Forensic Readiness: An Empirical Evaluation _{Saifur Rahman Tamim, Amir Labib Khan}	arXiv · cs.CR 2026		Paper PDF `2607.16010`
WaterMoE: Expert-Routing-based Watermarking for High Fidelity and Efficiency _{Z Sun, Q Jiang, S Sheng et al.}	arXiv · cs.CR 2026		Paper PDF `2607.13099`
Toward Stronger Code Watermarking: A Grammar-Driven Approach to Optimizing the Trade-off Between Quality and Detectability _{Licheng Yu, Aiwei Liu, Songze Li}	arXiv · cs.CR 2026		Paper PDF `2607.10210`
LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization _{Huy Phan, Kieu Dang, Ojaswi Dulal et al.}	arXiv · cs.CR 2026		Paper PDF `2607.10103`
Beyond Heuristic Tuning: Power-Calibrated LLM Watermarking _{Xiaopu Wang, Zelin He, Chengyuan Liu et al.}	arXiv · stat.ML 2026		Paper PDF `2607.05694`
Robust Text Watermarking for Large Language Models via Dual Semantic Embeddings _{Jonas Schäfer, Cezary Pilaszewicz, Gerhard Wunder}	Findings of EMNLP 2026 2026	—	Paper PDF `2606.31602`
CORE-BREW: LLR-Based Soft Decoding for Robust Multi-Bit LLM Watermarking _{Joeun Kim, HoEun Kim, Young-Sik Kim}	arXiv · cs.CR 2026		Paper PDF `2606.24163`
Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Text _{Sina Mansouri, Mohit Marvania, Abolfazl Safikhani}	the 43rd International Conference on Machine Learning (ICML 2026), Seoul, South Korea 2026		Paper PDF `2608.18102`
Linguistics-Aware Non-Distortionary LLM Watermarking _{Shinwoo Park, Hyejin Park, Hyeseon An et al.}	arXiv · cs.CL 2026		Paper PDF `2606.00613`
AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing _{Yuexin Li, Wenjie Qu, Linyu Wu et al.}	arXiv · cs.CR 2026		Paper PDF `2605.29434`
Blind PRNG Hijacking: An Undetectable Integrity-Preserving Attack Against LLM Watermarking _{Ziyang You, Huilong He, Xiaoke Yang et al.}	arXiv · cs.CR 2026		Paper PDF `2605.28632`
SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness _{Jiahao Huo, Wenjie Qu, Yibo Yan et al.}	arXiv · cs.CR 2026		Paper PDF `2605.25796`
Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection _{Kieu Dang, Phung Lai, NhatHai Phan et al.}	arXiv · cs.CR 2026	—	Paper PDF `2605.23175`
Marking the Wrong Symptoms: Evaluating LLM Watermarks in Medical Texts _{Melanie Rieff, Robin Staab, Thibaud Gloaguen et al.}	arXiv · cs.AI 2026		Paper PDF `2607.20462`
Covert Multi-bit LLM Watermarking: An Information Theory and Coding Approach _{Sidong Guo, Tyler Kann, Teodora Baluta et al.}	arXiv · cs.IT 2026		Paper PDF `2605.16709`
TextSeal: A Localized LLM Watermark for Provenance & Distillation Protection _{Tom Sander, Hongyan Chang, Tomáš Souček et al.}	arXiv · cs.CR 2026		Paper PDF `2605.12456`
Every Bit, Everywhere, All at Once: A Binomial Multibit LLM Watermark _{Thibaud Gloaguen, Robin Staab, Mark Vero et al.}	arXiv · cs.CR 2026		Paper PDF `2605.11653`
Making Open-Source Text LLM Watermarks Durable Against Merging _{Luisa Scharff, Thibaud Gloaguen, Robin Staab et al.}	arXiv · cs.CL 2026		Paper PDF `2607.20435`
Sequential Behavioral Watermarking for LLM Agents _{Hyeseon An, Shinwoo Park, Dongsu Kim et al.}	arXiv · cs.CR 2026		Paper PDF `2605.11036`
Vaporizer: Breaking Watermarking Schemes for Large Language Model Outputs _{Jonathan Hong Jin Ng, Anh Tu Ngo, Anupam Chattopadhyay}	arXiv · cs.CR 2026		Paper PDF `2605.07481`
Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks _{Mohd Ruhul Ameen, Akif Islam, Nadim Mahmud et al.}	arXiv · cs.CL 2026		Paper PDF `2605.05503`
SLAM: Structural Linguistic Activation Marking for Language Models _{Fabrice Harel-Canada, Amit Sahai}	arXiv · cs.CL 2026		Paper PDF `2605.05443`
SWAN: Semantic Watermarking with Abstract Meaning Representation _{Ziping Ye, Gourab Dey, Christos Christodoulopoulos et al.}	ACL 2026 Main 2026		Paper PDF `2605.04305`
LLM Output Detectability and Task Performance Can be Jointly Optimized _{Koshiro Saito, Ryuto Koike, Masahiro Kaneko et al.}	arXiv · cs.CL 2026	—	Paper PDF `2605.01350`
Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking _{Joeun Kim, HoEun Kim, Dongsup Jin et al.}	ICML 2026 2026		Paper PDF `2605.00348`
VOW: Verifiable and Oblivious Watermark Detection for Large Language Models _{Xiaokun Luan, Yihao Zhang, Pengcheng Su et al.}	arXiv · cs.CR 2026		Paper PDF `2604.27666`
SSG: Logit-Balanced Vocabulary Partitioning for LLM Watermarking _{Chenxi Gu, Xiaoning Du, John Grundy}	arXiv · cs.CR 2026		Paper PDF `2604.22438`
SIF: Semantically In-Distribution Fingerprints for Large Vision-Language Models _{Yifei Zhao, Qian Lou, Mengxin Zheng}	CVPR 2026 2026		Paper PDF `2604.17041`
RLSpoofer: A Lightweight Evaluator for LLM Watermark Spoofing Resilience _{Hanbo Huang, Xuan Gong, Yiran Zhang et al.}	arXiv · cs.CR 2026		Paper PDF `2604.11546`
Beyond A Fixed Seal: Adaptive Stealing Watermark in Large Language Models _{Shuhao Zhang, Yuli Chen, Jiale Han et al.}	arXiv · cs.CR 2026		Paper PDF `2604.10893`
XMark: Reliable Multi-Bit Watermarking for LLM-Generated Texts _{Jiahao Xu, Rui Hu, Olivera Kotevska et al.}	arXiv · cs.CL 2026		Paper PDF `2604.05242`
Rethinking LLM Watermark Detection in Black-Box Settings: A Non-Intrusive Third-Party Framework _{Zhuoshang Wang, Yubing Ren, Yanan Cao et al.}	ACL 2026 Findings 2026		Paper PDF `2603.14968`
On Google's SynthID-Text LLM Watermarking System: Theoretical Analysis and Empirical Validation _{Romina Omidi, Yun Dong, Binghui Wang}	arXiv · cs.CR 2026		Paper PDF `2603.03410`
Online LLM watermark detection via e-processes _{Weijie Su, Ruodu Wang, Zinan Zhao}	arXiv · stat.ME 2026		Paper PDF `2602.14286`
Overview of PAN 2026: Voight-Kampff Generative AI Detection, Text Watermarking, Multi-Author Writing Style Analysis, Generative Plagiarism Detection, and Reasoning Trajectory Detection _{Janek Bevendorff, Maik Fröbe, André Greiner-Petter et al.}	arXiv · cs.CL 2026	—	Paper PDF `2602.09147`
On Protecting Agentic Systems' Intellectual Property via Watermarking _{Liwen Wang, Zongjie Li, Yuchong Xie et al.}	arXiv · cs.AI 2026		Paper PDF `2602.08401`
ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport _{Atefeh Gilani, Sajani Vithana, Carol Xuan Long et al.}	arXiv · cs.LG 2026		Paper PDF `2602.07235`
A Unified Framework for LLM Watermarks _{Thibaud Gloaguen, Robin Staab, Nikola Jovanović et al.}	arXiv · cs.CR 2026		Paper PDF `2602.06754`
WorldCup Sampling for Multi-bit LLM Watermarking _{Yidan Wang, Yubing Ren, Yanan Cao et al.}	arXiv · cs.CL 2026		Paper PDF `2602.01752`
MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking _{Ya Jiang, Massieh Kordi Boroujeny, Surender Suresh Kumar et al.}	arXiv · cs.CR 2026		Paper PDF `2601.22246`
Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs _{Nghia T. Le, Alan Ritter, Kartik Goyal}	arXiv · cs.CR 2026		Paper PDF `2601.11629`
BanglaLorica: Design and Evaluation of a Robust Watermarking Algorithm for Large Language Models in Bangla Text Generation _{Amit Bin Tariqul, A N M Zahid Hossain Milkan, Sahab-Al-Chowdhury et al.}	arXiv · cs.CL 2026		Paper PDF `2601.04534`
How Good is Post-Hoc Watermarking With Language Model Rephrasing? _{Pierre Fernandez, Tom Sander, Hady Elsahar et al.}	arXiv · cs.CR 2025		Paper PDF `2512.16904`
DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack _{Hao Li, Yubing Ren, Yanan Cao et al.}	ACL 2026 Findings 2026		Paper PDF `2512.16182`
Security and Detectability Analysis of Unicode Text Watermarking Methods against Large Language Models _{Malte Hellmeier}	arXiv · cs.CR 2025		Paper PDF `2512.13325`
Improved Pseudorandom Codes from Permuted Puzzles _{Miranda Christ, Noah Golowich, Sam Gunn et al.}	arXiv · cs.CR 2025	—	Paper PDF `2512.08918`
MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking _{Yizhou Zhao, Zhiwei Steven Wu, Adam Block}	arXiv · cs.LG 2025		Paper PDF `2512.04044`
WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking _{Yukang Lin, Jiahao Shao, Shuoran Jiang et al.}	arXiv · cs.CL 2025		Paper PDF `2512.00837`
WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarking _{Shinwoo Park, Hyejin Park, Hyeseon Ahn et al.}	arXiv · cs.AI 2025		Paper PDF `2511.07863`
Adaptive Testing for Segmenting Watermarked Texts From Language Models _{Xingchi Li, Xiaochi Liu, Guanxun Li}	arXiv · stat.ML 2025		Paper PDF `2511.06645`
Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology _{Thomas Souverain}	arXiv · cs.CR 2025		Paper PDF `2511.03641`
PVMark: Enabling Public Verifiability for LLM Watermarking Schemes _{Haohua Duan, Liyao Xiang, Xin Zhang}	arXiv · cs.CR 2025		Paper PDF `2510.26274`
PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs _{Jiaqi Xue, Yifei Zhao, Mansour Al Ghanim et al.}	arXiv · cs.CR 2025		Paper PDF `2510.23891`
Optimal Detection for Language Watermarks with Pseudorandom Collision _{T. Tony Cai, Xiang Li, Qi Long et al.}	arXiv · math.ST 2025		Paper PDF `2510.22007`
A Reinforcement Learning Framework for Robust and Secure LLM Watermarking _{Li An, Yujian Liu, Yepeng Liu et al.}	arXiv · cs.CR 2025		Paper PDF `2510.21053`
Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption _{Yepeng Liu, Xuandong Zhao, Dawn Song et al.}	arXiv · cs.CR 2025		Paper PDF `2510.18333`
Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translation _{Asim Mohamed, Martin Gubri}	arXiv · cs.CL 2025	—	Paper PDF `2510.18019`
Watermark Robustness and Radioactivity May Be at Odds in Federated Learning _{Leixu Huang, Zedian Shao, Teodora Baluta}	arXiv · cs.CR 2025		Paper PDF `2510.17033`
EditMark: Watermarking Large Language Models based on Model Editing _{Shuai Li, Kejiang Chen, Jun Jiang et al.}	arXiv · cs.CR 2025		Paper PDF `2510.16367`
DITTO: A Spoofing Attack Framework on Watermarked LLMs via Knowledge Distillation _{Hyeseon An, Shinwoo Park, Suyeon Woo et al.}	EACL 2026 (Oral) 2026		Paper PDF `2510.10987`
A Linguistics-Aware LLM Watermarking via Syntactic Predictability _{Shinwoo Park, Hyejin Park, Hyeseon An et al.}	arXiv · cs.CL 2025		Paper PDF `2510.13829`
On the Empirical Power of Goodness-of-Fit Tests in Watermark Detection _{Weiqing He, Xiang Li, Tianqi Shang et al.}	NeurIPS 2025 as a spotlight 2025		Paper PDF `2510.03944`
PRIVMARK: Private Large Language Models Watermarking with MPC _{Thomas Fargues, Ye Dong, Tianwei Zhang et al.}	ICC 2026 2026		Paper PDF `2509.24624`
Analyzing and Evaluating Unbiased Language Model Watermark _{Yihan Wu, Xuehao Cui, Ruibo Chen et al.}	arXiv · cs.CR 2025		Paper PDF `2509.24048`
An Ensemble Framework for Unbiased Language Model Watermarking _{Yihan Wu, Ruibo Chen, Georgios Milis et al.}	arXiv · cs.CR 2025		Paper PDF `2509.24043`
LLM Watermark Evasion via Bias Inversion _{Jeongyeon Hwang, Sangdon Park, Jungseul Ok}	arXiv · cs.CR 2025		Paper PDF `2509.23019`
Fast segmentation of watermarked texts from large language models through an epidemic change-point framework _{Soham Bonnerjee, Subhrajyoty Roy, Sayar Karmakar}	arXiv · stat.ML 2025	—	Paper PDF `2509.21160`
RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks _{Hanbo Huang, Yiran Zhang, Hao Zheng et al.}	arXiv · cs.CR 2025		Paper PDF `2509.20924`
Character-Level Perturbations Disrupt LLM Watermarks _{Zhaoxi Zhang, Xiaomei Zhang, Yanjun Zhang et al.}	Network and Distributed System Security (NDSS) Symposium 2026 2026	—	Paper PDF `2509.09112`
Factuality Beyond Coherence: Evaluating LLM Watermarking Methods for Medical Texts _{Rochana Prih Hastuti, Rian Adam Rajagede, Mansour Al Ghanim et al.}	EMNLP 2025 Findings 2025		Paper PDF `2509.07755`
Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID _{Xia Han, Qi Li, Jianbing Ni et al.}	arXiv · cs.CR 2025		Paper PDF `2508.20228`
Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends _{Zhenhua Xu, Xubin Yue, Zhebo Wang et al.}	arXiv · cs.CR 2025		Paper PDF `2508.11548`
SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders _{Zhuohao Yu, Xingru Jiang, Weizheng Gu et al.}	arXiv · cs.CL 2025		Paper PDF `2508.08211`
VLA-Mark: A cross modal watermark for large vision-language alignment model _{Shuliang Liu, Qi Zheng, Jesse Jiaxi Xu et al.}	arXiv · cs.CV 2025		Paper PDF `2507.14067`
Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks _{Huanming Shen, Baizhou Huang, Xiaojun Wan}	arXiv · cs.CR 2025		Paper PDF `2507.06274`
CoreMark: Toward Robust and Universal Text Watermarking Technique _{Jiale Meng, Yiming Li, Zheming Lu et al.}	arXiv · cs.CV 2025		Paper PDF `2506.23066`
Optimal Estimation of Watermark Proportions in Hybrid AI-Human Texts _{Xiang Li, Garrett Wen, Weiqing He et al.}	arXiv · stat.ML 2025		Paper PDF `2506.22343`
BiMark: Unbiased Multilayer Watermarking for Large Language Models _{Xiaoyan Feng, He Zhang, Yanjun Zhang et al.}	arXiv · cs.CL 2025		Paper PDF `2506.21602`
Watermarking Autoregressive Image Generation _{Nikola Jovanović, Ismail Labiad, Tomáš Souček et al.}	arXiv · cs.LG 2025		Paper PDF `2506.16349`
Multi-use LLM Watermarking and the False Detection Problem _{Zihao Fu, Chris Russell}	arXiv · cs.CR 2025		Paper PDF `2506.15975`
LexiMark: Robust Watermarking via Lexical Substitutions to Enhance Membership Verification of an LLM's Textual Training Data _{Eyal German, Sagiv Antebi, Edan Habler et al.}	arXiv · cs.CL 2025		Paper PDF `2506.14474`
HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions _{Dor Tsur, Carol Xuan Long, Claudio Mayrink Verdun et al.}	arXiv · cs.CR 2025	—	Paper PDF `2506.06409`
StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models _{Ya Jiang, Chuxiong Wu, Massieh Kordi Boroujeny et al.}	arXiv · cs.CR 2025		Paper PDF `2506.05502`
Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking _{Tianle Gu, Zongqi Wang, Kexin Huang et al.}	arXiv · cs.CL 2025		Paper PDF `2505.14112`
Optimized Couplings for Watermarking Large Language Models _{Dor Tsur, Carol Xuan Long, Claudio Mayrink Verdun et al.}	ISIT25 2025		Paper PDF `2505.08878`
LLM-Text Watermarking based on Lagrange Interpolation _{Jarosław Janas, Paweł Morawiecki, Josef Pieprzyk}	arXiv · cs.CR 2025	—	Paper PDF `2505.05712`
Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks _{Yixin Cheng, Hongcheng Guo, Yangming Li et al.}	arXiv · cs.LG 2025		Paper PDF `2505.05190`
WaterDrum: Watermarking for Data-centric Unlearning Metric _{Xinyang Lu, Xinyuan Niu, Gregory Kang Ruey Lau et al.}	arXiv · cs.LG 2025		Paper PDF `2505.05064`
An End-to-End Model for Logits-Based Large Language Models Watermarking _{Kahim Wong, Jicheng Zhou, Jiantao Zhou et al.}	arXiv · cs.CR 2025		Paper PDF `2505.02344`
LLM Watermarking Using Mixtures and Statistical-to-Computational Gaps _{Pedro Abdalla, Roman Vershynin}	arXiv · cs.CR 2025	—	Paper PDF `2505.01484`
Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation _{Xin Yi, Yue Li, Shunfan Zheng et al.}	arXiv · cs.CL 2025		Paper PDF `2504.17480`
Watermarking Needs Input Repetition Masking _{David Khachaturov, Robert Mullins, Ilia Shumailov et al.}	arXiv · cs.LG 2025		Paper PDF `2504.12229`
Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learning _{Li An, Yujian Liu, Yepeng Liu et al.}	arXiv · cs.CR 2025		Paper PDF `2504.06575`
Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Models _{Fay Elhassan, Niccolò Ajroldi, Antonio Orvieto et al.}	arXiv · cs.LG 2025		Paper PDF `2504.06446`
Agent Guide: A Simple Agent Behavioral Watermarking Framework _{Kaibo Huang, Zipei Zhang, Zhongliang Yang et al.}	arXiv · cs.AI 2025		Paper PDF `2504.05871`
FontGuard: A Robust Font Watermarking Approach Leveraging Deep Font Knowledge _{Kahim Wong, Jicheng Zhou, Kemou Li et al.}	arXiv · cs.CV 2025		Paper PDF `2504.03128`
RoSMM: A Robust and Secure Multi-Modal Watermarking Framework for Diffusion Models _{ZhongLi Fang, Yu Xie, Ping Chen}	arXiv · cs.MM 2025		Paper PDF `2504.02640`
Is Your Writing Being Mimicked by AI? Unveiling Imitation with Invisible Watermarks in Creative Writing _{Ziwei Zhang, Juan Wen, Wanli Peng et al.}	arXiv · cs.CR 2025		Paper PDF `2504.00035`
CEFW: A Comprehensive Evaluation Framework for Watermark in Large Language Models _{Shuhao Zhang, Bo Cheng, Jiale Han et al.}	arXiv · cs.CR 2025		Paper PDF `2503.20802`
Breaking Distortion-free Watermarks in Large Language Models _{Shayleen Reynolds, Hengzhi He, Dung Daniel T. Ngo et al.}	arXiv · cs.CR 2025		Paper PDF `2502.18608`
Detecting Benchmark Contamination Through Watermarking _{Tom Sander, Pierre Fernandez, Saeed Mahloujifar et al.}	arXiv · cs.CR 2025		Paper PDF `2502.17259`
Evaluating the Robustness and Accuracy of Text Watermarking Under Real-World Cross-Lingual Manipulations _{Mansour Al Ghanim, Jiaqi Xue, Rochana Prih Hastuti et al.}	arXiv · cs.CL 2025		Paper PDF `2502.16699`

Model Ownership and Fingerprinting

108 papers · newest first

Title & Authors	Venue/Year	Introduction	Links
Inference-Engine Fingerprinting Attacks are Practical: Exploring Model-Driven Environmental Discovery, Exploitation, and Escape _{Sarah Radway, Andrew Cheng, Vijay Janapa Reddi et al.}	arXiv · cs.CR 2026		Paper PDF `2609.20614`
Fingerprinting Multimodal Large Language Models _{Chao Huang, Meng Tong, Kejiang Chen}	ACM Multimedia 2026 (MM '26) as an oral presentation 2026		Paper PDF `2609.20457`
Predictive Likelihood Ratios for Language Model Watermark Detection _{Li Ma}	arXiv · stat.ML 2026	—	Paper PDF `2609.15657`
Membership is Ownership: A Robust Ownership Verification Framework for Diffusion Models _{Feng Jiang, Zuobin Xiong, An Huang et al.}	the IEEE International Conference on Data Mining (ICDM) 2026 2026		Paper PDF `2608.28929`
Auditing Cross-Lingual Fairness in Language Model Watermarking _{Alexander Nemecek, Osama Zafar, Debargha Ganguly et al.}	arXiv · cs.CL 2026		Paper PDF `2608.20047`
Fingerprinting Text-to-Image Diffusion Models via Collapsed Generation _{Yuanmin Huang, Chen Chen, Geng Hong et al.}	arXiv · cs.CR 2026		Paper PDF `2608.11732`
WorldMark: A Plug-and-Play World Knowledge Interface for Cross-Host Language Model Watermarking _{Song Xiao, Yuqi Yuan, Yanshuo Zhang et al.}	arXiv · cs.CR 2026		Paper PDF `2608.06416`
Synchronization-Free Algebraic Fingerprints for Large Language Models: From Autoregressive to Diffusion Models _{Jaroslaw Janas, Josef Pieprzyk, Pawel Morawiecki}	arXiv · cs.CR 2026	—	Paper PDF `2607.16648`
modelDNA: Calibrated Lineage Verification and Merge Decomposition from Sampled Weight Fingerprints _{Muhammad Awais Bin Adil, Saad Aamir}	arXiv · cs.LG 2026	—	Paper PDF `2607.10617`
Large Language Models (LLMs) and Generative AI in Cybersecurity and Privacy: A Survey of Dual-Use Risks, AI-Generated Malware, Explainability, and Defensive Strategies _{Kiarash Ahi, Saeed Valizadeh}	IEEE 6th Silicon Valley Cybersecurity Conference (SVCC), San Francisco, CA, USA, 2025, pp. 1-10 2025		Paper PDF `2607.06963`
Cyclic Denoising Reveals Ultrastable Memories in Diffusion Models _{Rishabh Sharma, Stefano Martiniani}	arXiv · cs.LG 2026		Paper PDF `2606.24000`
What Your Model Threw Away and Why You'll Want It Back: Masking, Fingerprinting, and Privacy from Discarded Geometry _{Zachary P. Bradshaw}	arXiv · cs.LG 2026		Paper PDF `2607.13046`
Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Models _{Jianwei Fei, Yunshu Dai, Zhihua Xia et al.}	arXiv · cs.CV 2026		Paper PDF `2606.12977`
T2S: A Rehearsal-Based Approach for Extraction-Resistant Model Watermarking _{Jian-Ping Mei, Weibin Zhang, Ao Yao et al.}	ICASSP 2026 - 2026 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), Barcelona, Spain, 2026, pp. 13967-13971 2026		Paper PDF `2606.11698`
Characterizing Detectability in 3DGS Poisoning: A Stage-wise Benchmark _{Quoc-Anh Bui-Huynh, Thanh Duc Ngo, Xue Geng et al.}	arXiv · cs.CV 2026		Paper PDF `2606.03499`
Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing _{Leyi Qi, Yiming Li, Siyuan Liang et al.}	the International Conference on Machine Learning (ICML) 2026 2026		Paper PDF `2605.29809`
Findings of the Counter Turing Test: AI-Generated Image Detection _{Rajarshi Roy, Nasrin Imanpour, Ashhar Aziz et al.}	arXiv · cs.CV 2026		Paper PDF `2605.20787`
Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks _{Mohd Ruhul Ameen, Akif Islam, Nadim Mahmud et al.}	arXiv · cs.CL 2026		Paper PDF `2605.05503`
CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint _{Jiewei Lai, Lan Zhang, Chen Tang et al.}	arXiv · cs.CV 2026		Paper PDF `2605.01479`
The Surprising Universality of LLM Outputs: A Real-Time Verification Primitive _{Alex Bogdan, Adrian de Valois-Franklin}	arXiv · cs.CR 2026		Paper PDF `2604.25634`
AI Identification: An Integrated Framework for Sustainable Governance in Digital Enterprises _{Di Kevin Gao, Jingdao Chen, Shahram Rahimi}	arXiv · cs.CR 2026	—	Paper PDF `2604.10473`
StoryScope: Investigating idiosyncrasies in AI fiction _{Jenna Russell, Rishanth Rajendhran, Chau Minh Pham et al.}	arXiv · cs.CL 2026	—	Paper PDF `2604.03136`
Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communication _{Yi Zhang, Hongbo Huang, Liang-Jie Zhang}	arXiv · cs.CV 2026		Paper PDF `2603.26167`
IrisFP: Adversarial-Example-based Model Fingerprinting with Enhanced Uniqueness and Robustness _{Ziye Geng, Guang Yang, Yihang Chen et al.}	CVPR 2026 2026		Paper PDF `2603.24996`
LiteGuard: Efficient Task-Agnostic Model Fingerprinting with Enhanced Generalization _{Guang Yang, Ziye Geng, Yihang Chen et al.}	arXiv · cs.CR 2026		Paper PDF `2603.24982`
Functional Subspace Watermarking for Large Language Models _{Zikang Ding, Junhao Li, Suling Wu et al.}	arXiv · cs.CR 2026		Paper PDF `2603.18793`
Collaborative Threshold Watermarking _{Tameem Bakr, Anish Ambreth, Nils Lukas}	arXiv · cs.LG 2026	—	Paper PDF `2602.10765`
Origin Lens: A Privacy-First Mobile Framework for Cryptographic Image Provenance and AI Detection _{Alexander Loth, Dominique Conceicao Rosario, Peter Ebinger et al.}	ACM TheWebConf '26 Companion 2026		Paper PDF `2602.03423`
Lossless Copyright Protection via Intrinsic Model Fingerprinting _{Lingxiao Chen, Liqin Wang, Wei Lu et al.}	arXiv · cs.CR 2026		Paper PDF `2601.21252`
Learning to Watermark in the Latent Space of Generative Models _{Sylvestre-Alvise Rebuffi, Tuan Tran, Valeriu Lacatusu et al.}	arXiv · cs.CV 2026		Paper PDF `2601.16140`
Profiling German Text Simplification with Interpretable Model-Fingerprints _{Lars Klöser, Mika Beele, Bodo Kraft}	arXiv · cs.CL 2026		Paper PDF `2601.13050`
KinGuard: Hierarchical Kinship-Aware Fingerprinting to Defend Against Large Language Model Stealing _{Zhenhua Xu, Xiaoning Tian, Wenjun Zeng et al.}	arXiv · cs.CR 2026		Paper PDF `2601.12986`
Decoder Gradient Shields: A Family of Provable and High-Fidelity Methods Against Gradient-Based Box-Free Watermark Removal _{Haonan An, Guang Hua, Wei Du et al.}	arXiv · cs.CV 2026		Paper PDF `2601.11952`
Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs _{Nghia T. Le, Alan Ritter, Kartik Goyal}	arXiv · cs.CR 2026		Paper PDF `2601.11629`
DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack _{Hao Li, Yubing Ren, Yanan Cao et al.}	ACL 2026 Findings 2026		Paper PDF `2512.16182`
ComMark: Covert and Robust Black-Box Model Watermarking with Compressed Samples _{Yunfei Yang, Xiaojun Chen, Zhendong Zhao et al.}	arXiv · cs.CR 2025		Paper PDF `2512.15641`
SPDMark: Selective Parameter Displacement for Robust Video Watermarking _{Samar Fares, Nurbek Tastan, Karthik Nandakumar}	arXiv · cs.CV 2025		Paper PDF `2512.12090`
Smudged Fingerprints: A Systematic Evaluation of the Robustness of AI Image Fingerprints _{Kai Yao, Marc Juarez}	arXiv · cs.CV 2025		Paper PDF `2512.11771`
SEAL: Subspace-Anchored Watermarks for LLM Ownership _{Yanbo Dai, Zongjie Li, Zhenlan Ji et al.}	arXiv · cs.CR 2025		Paper PDF `2511.11356`
DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks _{Yunfei Yang, Xiaojun Chen, Yuexin Xuan et al.}	arXiv · cs.CR 2025		Paper PDF `2511.08985`
Class-feature Watermark: A Resilient Black-box Watermark Against Model Extraction Attacks _{Yaxin Xiao, Qingqing Ye, Zi Liang et al.}	arXiv · cs.CR 2025		Paper PDF `2511.07947`
Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption _{Yepeng Liu, Xuandong Zhao, Dawn Song et al.}	arXiv · cs.CR 2025		Paper PDF `2510.18333`
An Information Asymmetry Game for Trigger-based DNN Model Watermarking _{Chaoyue Huang, Gejian Zhao, Hanzhou Wu et al.}	IEEE International Symposium on Digital Forensics and Security (2026) 2026		Paper PDF `2510.14218`
Every Language Model Has a Forgery-Resistant Signature _{Matthew Finlayson, Xiang Ren, Swabha Swayamdipta}	arXiv · cs.CR 2025		Paper PDF `2510.14086`
The Hidden DNA of LLM-Generated JavaScript: Structural Patterns Enable High-Accuracy Authorship Attribution _{Norbert Tihanyi, Bilel Cherif, Richard A. Dubniczky et al.}	arXiv · cs.CR 2025		Paper PDF `2510.10493`
Are Robust LLM Fingerprints Adversarially Robust? _{Anshul Nasery, Edoardo Contente, Alkin Kaz et al.}	arXiv · cs.CR 2025		Paper PDF `2509.26598`
PRIVMARK: Private Large Language Models Watermarking with MPC _{Thomas Fargues, Ye Dong, Tianwei Zhang et al.}	ICC 2026 2026		Paper PDF `2509.24624`
Analyzing and Evaluating Unbiased Language Model Watermark _{Yihan Wu, Xuehao Cui, Ruibo Chen et al.}	arXiv · cs.CR 2025		Paper PDF `2509.24048`
An Ensemble Framework for Unbiased Language Model Watermarking _{Yihan Wu, Ruibo Chen, Georgios Milis et al.}	arXiv · cs.CR 2025		Paper PDF `2509.24043`
Zero-Shot Visual Deepfake Detection: Can AI Predict and Prevent Fake Content Before It's Created? _{Ayan Sar, Sampurna Roy, Tanupriya Choudhury et al.}	Foundations and Trends in Signal Processing (2025) 2025		Paper PDF `2509.18461`
Causal Fingerprints of AI Generative Models _{Hui Xu, Chi Liu, Congcong Zhu et al.}	arXiv · cs.CV 2025		Paper PDF `2509.15406`
Poison to Detect: Detection of Targeted Overfitting in Federated Learning _{Soumia Zohra El Mestari, Maciej Krzysztof Zuziak, Gabriele Lenzini}	Proceedings on Privacy Enhancing Technologies 2026(4), 480-506 2026		Paper PDF `2509.11974`
CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor _{Zhenhua Xu, Xixiang Zhao, Xubin Yue et al.}	arXiv · cs.CL 2025	$CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor$	Paper PDF `2509.09703`
From Construction to Injection: Edit-Based Fingerprints for Large Language Models _{Yue Li, Xin Yi, Dongsheng Shi et al.}	arXiv · cs.CL 2025		Paper PDF `2509.03122`
Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends _{Zhenhua Xu, Xubin Yue, Zhebo Wang et al.}	arXiv · cs.CR 2025		Paper PDF `2508.11548`
NWaaS: A Non-Intrusive and Privacy-Preserving Watermarking-as-a-Service System with Adaptive Resource Scheduling _{Haonan An, Qianyao Ren, Guang Hua et al.}	arXiv · cs.CR 2025		Paper PDF `2507.18036`
Removing Box-Free Watermarks for Image-to-Image Models via Query-Based Reverse Engineering _{Haonan An, Guang Hua, Hangcheng Cao et al.}	arXiv · cs.CR 2025		Paper PDF `2507.18034`
Hashed Watermark as a Filter: Defeating Forging and Overwriting Attacks in Weight-based Neural Network Watermarking _{Yuan Yao, Jin Song, Jian Jin}	arXiv · cs.CR 2025		Paper PDF `2507.11137`
Disappearing Ink: Obfuscation Breaks N-gram Code Watermarks in Theory and Practice _{Gehao Zhang, Eugene Bagdasarian, Juan Zhai et al.}	arXiv · cs.CR 2025		Paper PDF `2507.05512`
PPFL-RDSN: Privacy-Preserving Federated Learning-based Residual Dense Spatial Networks for Encrypted Lossy Image Reconstruction _{Peilin He, James Joshi}	2025 IEEE 7th International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA), pp. 21-31, 2025 2025		Paper PDF `2507.00230`
Radioactive Watermarks in Diffusion and Autoregressive Image Generative Models _{Michel Meintz, Jan Dubiński, Franziska Boenisch et al.}	arXiv · cs.LG 2025		Paper PDF `2506.23731`
Riemannian-Geometric Fingerprints of Generative Models _{Hae Jin Song, Laurent Itti}	arXiv · cs.LG 2025	—	Paper PDF `2506.22802`
Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features _{Linghui Zhu, Yiming Li, Haiqin Weng et al.}	arXiv · cs.CV 2025		Paper PDF `2507.00724`
Watermarking Autoregressive Image Generation _{Nikola Jovanović, Ismail Labiad, Tomáš Souček et al.}	arXiv · cs.LG 2025		Paper PDF `2506.16349`
Gradient-Based Model Fingerprinting for LLM Similarity Detection and Family Classification _{Zehao Wu, Yanjie Zhao, Haoyu Wang}	arXiv · cs.LG 2025		Paper PDF `2506.01631`
CHIP: Chameleon Hash-based Irreversible Passport for Robust Deep Model Ownership Verification and Active Usage Control _{Chaohui Xu, Qi Cui, Chip-Hong Chang}	arXiv · cs.CR 2025		Paper PDF `2505.24536`
MUSE: Model-Agnostic Tabular Watermarking via Multi-Sample Selection _{Liancheng Fang, Aiwei Liu, Henry Peng Zou et al.}	arXiv · cs.CR 2025		Paper PDF `2505.24267`
RAFP: Identifying LLM Lineages via Rare-Region Fingerprints _{Yun-Yun Tsai, Jia Hao Liang, Chuan Guo et al.}	arXiv · cs.LG 2025		Paper PDF `2505.12682`
An End-to-End Model for Logits-Based Large Language Models Watermarking _{Kahim Wong, Jicheng Zhou, Jiantao Zhou et al.}	arXiv · cs.CR 2025		Paper PDF `2505.02344`
Towards the Resistance of Neural Network Watermarking to Fine-tuning _{Ling Tang, Yuefeng Chen, Hui Xue et al.}	arXiv · cs.LG 2025		Paper PDF `2505.01007`
Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation _{Xin Yi, Yue Li, Shunfan Zheng et al.}	arXiv · cs.CL 2025		Paper PDF `2504.17480`
Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models _{Zijin Yang, Xin Zhang, Kejiang Chen et al.}	arXiv · cs.CV 2025		Paper PDF `2504.15026`
ImF: Implicit Fingerprint for Large Language Models _{Jiaxuan Wu, Wanli Peng, Hang Fu et al.}	arXiv · cs.CL 2025		Paper PDF `2503.21805`
Disrupting Model Merging: A Parameter-Level Defense Without Sacrificing Accuracy _{Wei Junhao, Yu Zhe, Sakuma Jun}	arXiv · cs.LG 2025		Paper PDF `2503.07661`
Decoder Gradient Shield: Provable and High-Fidelity Prevention of Gradient-Based Box-Free Watermark Removal _{Haonan An, Guang Hua, Zhengru Fang et al.}	arXiv · cs.CV 2025		Paper PDF `2502.20924`
Ten Challenging Problems in Federated Foundation Models _{Tao Fan, Hanlin Gu, Xuemei Cao et al.}	arXiv · cs.LG 2025		Paper PDF `2502.12176`
Dynamic watermarks in images generated by diffusion models _{Yunzhuo Chen, Naveed Akhtar, Nur Al Hasan Haldar et al.}	arXiv · cs.CV 2025		Paper PDF `2502.08927`
Image Watermarking of Generative Diffusion Models _{Yunzhuo Chen, Jordan Vice, Naveed Akhtar et al.}	arXiv · eess.IV 2025		Paper PDF `2502.10465`
Scalable Fingerprinting of Large Language Models _{Anshul Nasery, Jonathan Hayase, Creston Brooks et al.}	arXiv · cs.CR 2025		Paper PDF `2502.07760`
FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint _{Shuo Shao, Haozhe Zhu, Yiming Li et al.}	arXiv · cs.CR 2025		Paper PDF `2501.15509`
Validation of GPU Computation in Decentralized, Trustless Networks _{Eric Boniardi, Stanley Bishop, Alison Haire}	arXiv · cs.ET 2025		Paper PDF `2501.05374`
A Game Between the Defender and the Attacker for Trigger-based Black-box Model Watermarking _{Chaoyue Huang, Hanzhou Wu}	IEEE International Symposium on Digital Forensics and Security 2025 2025		Paper PDF `2501.01194`
Sample Correlation for Fingerprinting Deep Face Recognition _{Jiyang Guan, Jian Liang, Yanbo Wang et al.}	arXiv · cs.CV 2024		Paper PDF `2412.20768`
Queries, Representation & Detection: The Next 100 Model Fingerprinting Schemes _{Augustin Godinot, Erwan Le Merrer, Camilla Penzo et al.}	AAAI2025 Main Technical Track 2024		Paper PDF `2412.13021`
Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers _{Vaden Masrani, Mohammad Akbari, David Ming Xuan Yue et al.}	AAAI2025 2024		Paper PDF `2412.12563`
BlockDoor: Blocking Backdoor Based Watermarks in Deep Neural Networks _{Yi Hao Puah, Anh Tu Ngo, Nandish Chattopadhyay et al.}	arXiv · cs.CR 2024		Paper PDF `2412.12194`
Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors _{Satoru Koda, Ikuya Morikawa}	ECML-PKDD2025 2024		Paper PDF `2411.13047`
Watermarking Visual Concepts for Diffusion Models _{Liangqi Lei, Keke Gai, Jing Yu et al.}	arXiv · cs.CR 2024		Paper PDF `2411.11688`
A Novel Access Control and Privacy-Enhancing Approach for Models in Edge Computing _{Peihao Li}	arXiv · cs.CR 2024	—	Paper PDF `2411.03847`
OML: A Primitive for Reconciling Open Access with Owner Control in AI Model Distribution _{Zerui Cheng, Edoardo Contente, Ben Finch et al.}	arXiv · cs.AI 2024		Paper PDF `2411.03887`
DeepCore: Simple Fingerprint Construction for Differentiating Homologous and Piracy Models _{Haifeng Sun, Lan Zhang, Xiang-Yang Li}	ECML-PKDD 2025 2025		Paper PDF `2411.00380`
Harmless Backdoor-based Client-side Watermarking in Federated Learning _{Kaijing Luo, Ka-Ho Chow}	EuroSP 2025 2025		Paper PDF `2410.21179`
An Efficient Watermarking Method for Latent Diffusion Models via Low-Rank Adaptation and Dynamic Loss Weighting _{Dongdong Lin, Yue Li, Benedetta Tondi et al.}	Expert Systems with Applications. 331 (2026) 133172 2026		Paper PDF `2410.20202`
Aligned Datasets Improve Detection of Latent Diffusion-Generated Images _{Anirudh Sundara Rajan, Utkarsh Ojha, Jedidiah Schloesser et al.}	arXiv · cs.CV 2024		Paper PDF `2410.11835`
WAPITI: A Watermark for Finetuned Open-Source LLMs _{Lingjie Chen, Ruizhong Qiu, Siyu Yuan et al.}	arXiv · cs.CR 2024		Paper PDF `2410.06467`
Towards Understanding and Enhancing Security of Proof-of-Training for DNN Model Ownership Verification _{Yijia Chang, Hanrui Jiang, Chao Lin et al.}	arXiv · cs.CR 2024		Paper PDF `2410.04397`
Discovering Spoofing Attempts on Language Model Watermarks _{Thibaud Gloaguen, Nikola Jovanović, Robin Staab et al.}	arXiv · cs.CR 2024	—	Paper PDF `2410.02693`
Trigger-Based Fragile Model Watermarking for Image Transformation Networks _{Preston K. Robinette, Dung T. Nguyen, Samuel Sasaki et al.}	arXiv · cs.CR 2024		Paper PDF `2409.19442`
Protecting Copyright of Medical Pre-trained Language Models: Training-Free Backdoor Model Watermarking _{Cong Kong, Rui Xu, Weixi Chen et al.}	arXiv · cs.LG 2024		Paper PDF `2409.10570`
Fingerprint Vector: Enabling Scalable and Efficient Model Fingerprint Transfer via Vector Addition _{Zhenhua Xu, Qichen Liu, Zhebo Wang et al.}	arXiv · cs.CR 2024		Paper PDF `2409.08846`
Revisiting Black-Box Model Ownership Verification through Information Theory _{Aoting Hu, Yanzhi Chen, Renjie Xie et al.}	arXiv · cs.CR 2024		Paper PDF `2409.06130`
Plug-and-Hide: Provable and Adjustable Diffusion Generative Steganography _{Jiahao Zhu, Zixuan Chen, Jiali Liu et al.}	arXiv · cs.CR 2024		Paper PDF `2409.04878`
WaterMAS: Sharpness-Aware Maximization for Neural Network Watermarking _{Carl De Sousa Trias, Mihai Mitrea, Attilio Fiandrotti et al.}	arXiv · cs.LG 2024		Paper PDF `2409.03902`
Agentic Copyright Watermarking against Adversarial Evidence Forgery with Purification-Agnostic Curriculum Proxy Learning _{Erjin Bao, Ching-Chun Chang, Hanrui Wang et al.}	arXiv · cs.CV 2024		Paper PDF `2409.01541`
Are handcrafted filters helpful for attributing AI-generated images? _{Jialiang Li, Haoyue Wang, Sheng Li et al.}	arXiv · cs.CV 2024	—	Paper PDF `2407.14570`
Watermarking Recommender Systems _{Sixiao Zhang, Cheng Long, Wei Yuan et al.}	arXiv · cs.IR 2024		Paper PDF `2407.21034`
Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond _{Xuhong Wang, Haoyu Jiang, Yi Yu et al.}	arXiv · cs.CR 2024		Paper PDF `2407.11100`
GROOT: Generating Robust Watermark for Diffusion-Model-Based Audio Synthesis _{Weizhi Liu, Yue Li, Dongdong Lin et al.}	arXiv · cs.CR 2024		Paper PDF `2407.10471`

Automation

GitHub Actions runs once per day and can also be started manually from the Actions tab. The workflow uses the free arXiv API and does not call a paid AI service.

Inspired by liutaocode/Video-Generation-arxiv-daily.

Contributors

github-actions[bot]

25 commits

ai-kunkun

3 commits

Similar repos

hzy312/Awesome-LLM-Watermark

UP-TO-DATE LLM Watermark paper. 🔥🔥🔥

380

tongyu0924/Secure-Diffusion-Watermarking-Survey

A curated collection of papers on watermarking, attribution, and provenance in diffusion models.…

and-mill/Awesome-GenAI-Watermarking

A curated list of watermarking schemes for generative AI models

145

plll4zzx/Awesome-LLM-Watermark

A collection list for Large Language Model (LLM) Watermark

SaFo-Lab/Awesome-T2I-safety-Papers

List of T2I safety papers, updated daily, welcome to discuss using Discussions

Xianjun-Yang/Awesome_papers_on_LLMs_detection

The lastest paper about detection of LLM-generated text and code

292

facebookresearch/content-seal

Content Seal is a state-of-the-art framework for invisible, robust watermarking across all…

243

LKRCharon/LLM-Watermark-Attack-Papers

This repository is a curated collection of research papers, attack strategies, and tools related to…

Languages

Python

100.0%

ai-kunkun/Watermarking-arxiv-daily

Automatically Update Watermarking Papers Daily using Github Actions (Update Every 12th hours)

Python

28 commits

updated Sep 21, 2026

See the code

README

🛡️ Watermarking arXiv Daily

Automatically updated arXiv papers about digital watermarking, generative AI provenance, LLM watermarking, and model ownership.

Updated automatically from arXiv. Introduction shows the first figure found in each paper's arXiv HTML page.

Last updated: 2026-09-21 16:04 CST · Indexed: 342 unique papers

Today's additions · 2026-09-21

Papers first indexed during today's update, grouped by category.

Image and Video Watermarking · 1 new papers

What Breaks Local Watermarks? A Robustness Benchmark for Local Invisible Image Watermarking — 2026-09-15

Generative AI Watermarking · 1 new papers

DRIFT: Removing Diffusion Watermarks by Deflecting the Generative Trajectory — 2026-09-08

Text and LLM Watermarking · 5 new papers

MarkSec: Capability-Aware Evaluation of Adversarial Attacks Against LLM Watermarks — 2026-09-15
Predictive Likelihood Ratios for Language Model Watermark Detection — 2026-09-14
DenMark: Robust Semantic Watermarking for Diffusion Language Models — 2026-09-13
TripPattern: A Pattern-based Text Watermarking Method for Large Language Models — 2026-09-11
Watermarks Without Verification: AI Text Watermarking After the EU AI Act — 2026-09-09

Model Ownership and Fingerprinting · 3 new papers

Inference-Engine Fingerprinting Attacks are Practical: Exploring Model-Driven Environmental Discovery, Exploitation, and Escape — 2026-09-17
Fingerprinting Multimodal Large Language Models — 2026-09-17
Predictive Likelihood Ratios for Language Model Watermark Detection — 2026-09-14

Search scope and keywords

Image and Video Watermarking: image watermarking, video watermarking, digital image watermark, multimedia watermarking, invisible watermark
Generative AI Watermarking: generative AI watermarking, AI-generated content watermarking, diffusion model watermarking, diffusion watermark, latent watermarking
Text and LLM Watermarking: large language model watermarking, language model watermarking, LLM watermarking, text watermarking, watermarked text
Model Ownership and Fingerprinting: neural network watermarking, model watermarking, model fingerprinting, neural network fingerprinting, model ownership verification

Image and Video Watermarking

112 papers · newest first

Title & Authors	Venue/Year	Introduction	Links
What Breaks Local Watermarks? A Robustness Benchmark for Local Invisible Image Watermarking _{Kai Yao, Bence Szilágyi, Sebestyén Kamp et al.}	the ACM Digital Library 2026		Paper PDF `2609.16832`
One Prompt Is Enough: Watermark Laundering Through Foundation Image Models _{Jidong Yang, Qi Li, Wei Zong et al.}	arXiv · cs.CV 2026		Paper PDF `2609.01249`
What Limits Robustness in Deep Image Watermarking: An Analysis of Mechanisms and Their Scaling Across Capacities _{Marta Bistroń, Zbigniew Piotrowski}	arXiv · cs.CR 2026	—	Paper PDF `2609.01050`
Asymmetric Phase Coding Video Watermarking _{Guang Yang, Fengchen Liu}	arXiv · cs.CR 2026		Paper PDF `2608.29212`
Keyed Provenance Watermarking with Complementary Lattice-Based Secure Aggregation for Federated Learning _{Xinyun Liu, Zhi Lu, Yu Chen et al.}	arXiv · cs.CR 2026		Paper PDF `2608.20580`
Bit-Level Triangular Content-Aware Permutation for Fragile Image Watermarking: Zero False Positive Rate, Single-Bit Sensitivity, and Arbitrary Dimension Support _{Zahra Ghoraeian, Mohammad-Reza Sadeghi, Samaneh Mashhadi}	arXiv · cs.CR 2026		Paper PDF `2608.14800`
MarkNull: Model-Agnostic Watermark Removal in AI-Generated Images via On-Manifold Latent Manipulation _{Jie Cao, Qi Li, Zelin Zhang et al.}	the 35th USENIX Security Symposium (USENIX Security 2026) 2026		Paper PDF `2608.10166`
Signpost Watermarking: Joint Optimization for Visual Watermark Coexistence _{Shruti Agarwal, Vishal Asnani, John Collomosse}	arXiv · cs.CV 2026		Paper PDF `2608.10091`
SpreadMark: Robust Image Watermarking via Spread-Spectrum Embedding _{Wei Song, Yuxin Cao, Zhenchang Xing et al.}	arXiv · cs.CR 2026		Paper PDF `2608.03165`
SPFM-Net: Semantic-Prior-Guided Frequency-Constrained Mamba for Invisible Watermark Attack _{Chunpeng Wang, Yanan Shi, Zhiqiu Xia et al.}	arXiv · cs.CV 2026		Paper PDF `2607.27811`
FDDWAN: A Frequency-Decoupled Diffusion Network for Watermarking Attack _{Chunpeng Wang, Yuxin Li, Xiaoyu Wang et al.}	arXiv · cs.CV 2026		Paper PDF `2607.27800`
CASIAL: Geometric Distortion Robust Image Watermarking _{Yupeng Qiu, Han Fang, Ee-Chien Chang}	arXiv · cs.CV 2026		Paper PDF `2607.26729`
Beyond AI-Generated Labels: Watermarking, Co-Creation, and Conflation of AI-Generation with Disinformation _{Federico Germani, Giovanni Spitale}	arXiv · cs.CR 2026	—	Paper PDF `2607.13082`
FlowMark: Mask-Guided Video Watermarking _{Vishal Asnani, Shruti Agarwal, John Collomosse}	arXiv · cs.CV 2026		Paper PDF `2607.05261`
"Training robust watermarking model may hurt authentication!'' Exploring and Mitigating the Identity Leakage in Robust Watermarking _{Xinyu Zhang, Ziping Dong, Qingyu Liu et al.}	arXiv · cs.CR 2026		Paper PDF `2605.09646`
CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint _{Jiewei Lai, Lan Zhang, Chen Tang et al.}	arXiv · cs.CV 2026		Paper PDF `2605.01479`
Breaking Watermarks in the Frequency Domain: A Modulated Diffusion Attack Framework _{Chunpeng Wang, Binyan Qu, Xiaoyu Wang et al.}	arXiv · cs.CV 2026		Paper PDF `2604.22220`
ADD for Multi-Bit Image Watermarking _{An Luo, Jie Ding}	arXiv · stat.ML 2026		Paper PDF `2604.11491`
UniMark: Unified Adaptive Multi-bit Watermarking for Autoregressive Image Generators _{Yigit Yilmaz, Elena Petrova, Mehmet Kaya et al.}	arXiv · cs.CV 2026		Paper PDF `2604.11843`
ResGuard: Enhancing Robustness Against Known Original Attacks in Deep Watermarking _{Hanyi Wang, Han Fang, Yupeng Qiu et al.}	arXiv · cs.CV 2026		Paper PDF `2604.03693`
Understanding Semantic Perturbations on In-Processing Generative Image Watermarks _{Anirudh Nakra, Min Wu}	arXiv · cs.CV 2026		Paper PDF `2603.27513`
SAiW: Source-Attributable Invisible Watermarking for Proactive Deepfake Defense _{Bibek Das, Chandranath Adak, Soumi Chattopadhyay et al.}	arXiv · cs.AI 2026		Paper PDF `2603.23178`
Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking _{Qian Qi, Jiangyun Tang, Jim Lee et al.}	arXiv · eess.IV 2026	—	Paper PDF `2603.12949`
SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarking _{Zheng Gao, Yifan Yang, Xiaoyu Li et al.}	arXiv · cs.CV 2026		Paper PDF `2603.12749`
Attribution as Retrieval: Model-Agnostic AI-Generated Image Attribution _{Hongsong Wang, Renxi Cheng, Chaolei Han et al.}	CVPR 2026 2026		Paper PDF `2603.10583`
The Orthogonal Vulnerabilities of Generative AI Watermarks: A Comparative Empirical Benchmark of Spatial and Latent Provenance _{Jesse Yu, Nicholas Wei}	arXiv · cs.CR 2026	—	Paper PDF `2603.10323`
ShapeMark: Robust and Diversity-Preserving Watermarking for Diffusion Models _{Yuqi Qian, Yun Cao, Haocheng Fu et al.}	In Proceedings of the 34th ACM International Conference on Multimedia (MM 2026) 2026		Paper PDF `2603.09454`
AWPD: Frequency Shield Network for Agnostic Watermark Presence Detection _{Xiang Ao, Yilin Du, Zidan Wang et al.}	arXiv · cs.CV 2026		Paper PDF `2603.06723`
When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editing _{Fai Gu, Qiyu Tang, Te Wen et al.}	arXiv · cs.CR 2026	—	Paper PDF `2603.04696`
SIGMark: Scalable In-Generation Watermark with Blind Extraction for Video Diffusion _{Xinjie Zhu, Zijing Zhao, Hui Jin et al.}	ICLR 2026 2026		Paper PDF `2603.02882`
Authenticated Contradictions from Desynchronized Provenance and Watermarking _{Alexander Nemecek, Hengzhi He, Guang Cheng et al.}	CVPR 2026 Workshop Authenticity & Provenance in the Age of AI (APAI) 2026		Paper PDF `2603.02378`
Hide&Seek: Remove Image Watermarks with Negligible Cost via Pixel-wise Reconstruction _{Huajie Chen, Tianqing Zhu, Hailin Yang et al.}	arXiv · cs.CR 2026		Paper PDF `2603.01067`
SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Models _{Yang Yang, Xinze Zou, Zehua Ma et al.}	arXiv · cs.CV 2026		Paper PDF `2603.00194`
Attention to Neural Plagiarism: Diffusion Models Can Plagiarize Your Copyrighted Images! _{Zihang Zou, Boqing Gong, Liqiang Wang}	ICCV 2025 2025		Paper PDF `2603.00150`
Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarking _{Fan Guo, Jiyu Kang, Qi Ming et al.}	arXiv · cs.CR 2026	—	Paper PDF `2602.20680`
Decoupling Defense Strategies for Robust Image Watermarking _{Jiahui Chen, Zehang Deng, Zeyu Zhang et al.}	arXiv · cs.CV 2026		Paper PDF `2602.20053`
MarkSweep: A No-box Removal Attack on AI-Generated Image Watermarking via Noise Intensification and Frequency-aware Denoising _{Jie Cao, Zelin Zhang, Qi Li et al.}	arXiv · cs.CR 2026		Paper PDF `2602.15364`
WMVLM: Evaluating Diffusion Model Image Watermarking via Vision-Language Models _{Zijin Yang, Yu Sun, Kejiang Chen et al.}	arXiv · cs.CV 2026		Paper PDF `2601.21610`
DeMark: A Query-Free Black-Box Attack on Deepfake Watermarking Defenses _{Wei Song, Zhenchang Xing, Liming Zhu et al.}	arXiv · cs.CR 2026		Paper PDF `2601.16473`
NiMark: A Non-intrusive Watermarking Framework against Screen-shooting Attacks _{Yufeng Wu, Xin Liao, Baowei Wang et al.}	arXiv · eess.IV 2026		Paper PDF `2601.11978`
RAVEN: Erasing Invisible Watermarks via Novel View Synthesis _{Fahad Shamshad, Nils Lukas, Karthik Nandakumar}	arXiv · cs.CV 2026		Paper PDF `2601.08832`
MT-Mark: Rethinking Image Watermarking via Mutual-Teacher Collaboration with Adaptive Feature Modulation _{Fei Ge, Ying Huang, Jie Liu et al.}	arXiv · cs.CV 2025		Paper PDF `2512.19438`
WaTeRFlow: Watermark Temporal Robustness via Flow Consistency _{Utae Jeong, Sumin In, Hyunju Ryu et al.}	arXiv · cs.CV 2025		Paper PDF `2512.19048`
Pixel Seal: Adversarial-only training for invisible image and video watermarking _{Tomáš Souček, Pierre Fernandez, Hady Elsahar et al.}	arXiv · cs.CV 2025		Paper PDF `2512.16874`
Where is the Watermark? Interpretable Watermark Detection at the Block Level _{Maria Bulychev, Neil G. Marchant, Benjamin I. P. Rubinstein}	arXiv · cs.CV 2025		Paper PDF `2512.14994`
Security and Detectability Analysis of Unicode Text Watermarking Methods against Large Language Models _{Malte Hellmeier}	arXiv · cs.CR 2025		Paper PDF `2512.13325`
SPDMark: Selective Parameter Displacement for Robust Video Watermarking _{Samar Fares, Nurbek Tastan, Karthik Nandakumar}	arXiv · cs.CV 2025		Paper PDF `2512.12090`
SimuFreeMark: A Noise-Simulation-Free Robust Watermarking Against Image Editing _{Yichao Tang, Mingyang Li, Di Miao et al.}	arXiv · cs.CV 2025		Paper PDF `2511.11295`
On the Information-Theoretic Fragility of Robust Watermarking under Diffusion Editing _{Yunyi Ni, Ziyu Yang, Ze Niu et al.}	arXiv · cs.CR 2025	—	Paper PDF `2511.10933`
Robustness and Imperceptibility Analysis of Hybrid Spatial-Frequency Domain Image Watermarking _{Rizal Khoirul Anam}	arXiv · cs.MM 2025		Paper PDF `2511.10245`
Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks _{Wenkai Fu, Finn Carter, Yue Wang et al.}	arXiv · cs.CR 2025	—	Paper PDF `2511.05598`
T2SMark: Balancing Robustness and Diversity in Noise-as-Watermark for Diffusion Models _{Jindong Yang, Han Fang, Weiming Zhang et al.}	arXiv · cs.CV 2025		Paper PDF `2510.22366`
Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models _{Tomáš Souček, Sylvestre-Alvise Rebuffi, Pierre Fernandez et al.}	arXiv · cs.LG 2025		Paper PDF `2510.20468`
SynthID-Image: Image watermarking at internet scale _{Sven Gowal, Rudy Bunel, Florian Stimberg et al.}	arXiv · cs.CR 2025		Paper PDF `2510.09263`
SpecGuard: Spectral Projection-based Advanced Invisible Watermarking _{Inzamamul Alam, Md Tanvir Islam, Khan Muhammad et al.}	arXiv · cs.CV 2025		Paper PDF `2510.07302`
We Can Hide More Bits: The Unused Watermarking Capacity in Theory and in Practice _{Aleksandar Petrov, Pierre Fernandez, Tomáš Souček et al.}	arXiv · cs.CR 2025		Paper PDF `2510.12812`
Diffusion-Based Image Editing for Breaking Robust Watermarks _{Yunyi Ni, Finn Carter, Ze Niu et al.}	arXiv · cs.CV 2025	—	Paper PDF `2510.05978`
Fast, Secure, and High-Capacity Image Watermarking with Autoencoded Text Vectors _{Gautier Evennou, Vivien Chappelier, Ewa Kijak}	arXiv · cs.CR 2025		Paper PDF `2510.00799`
Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey _{Jie Cao, Qi Li, Zelin Zhang et al.}	arXiv · cs.CR 2025		Paper PDF `2510.02384`
Of-SemWat: High-payload text embedding for semantic watermarking of AI-generated images with arbitrary size _{Benedetta Tondi, Andrea Costanzo, Mauro Barni}	arXiv · cs.CR 2025		Paper PDF `2509.24823`
LoT-Pass: Long-term-robust Image Watermarking for Image to Video Generation _{Guanjie Wang, Zehua Ma, Han Fang et al.}	arXiv · cs.CV 2025		Paper PDF `2509.17773`
DINVMark: A Deep Invertible Network for Video Watermarking _{Jianbin Ji, Dawen Xu, Li Dong et al.}	arXiv · cs.CR 2025		Paper PDF `2509.17416`
An Efficient and Adaptive Watermark Detection System with Tile-based Error Correction _{Xinrui Zhong, Xinze Feng, Jingwei Zuo et al.}	arXiv · cs.DC 2025		Paper PDF `2509.02447`
First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge _{Fahad Shamshad, Tameem Bakr, Yahia Shaaban et al.}	arXiv · cs.CV 2025		Paper PDF `2508.21072`
Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design _{Yuhao Sun, Yihua Zhang, Gaowen Liu et al.}	arXiv · cs.CR 2025		Paper PDF `2508.10065`
Learning Generalizable and Efficient Image Watermarking via Hierarchical Two-Stage Optimization _{Ke Liu, Xuanhan Wang, Qilong Zhang et al.}	arXiv · cs.CV 2025		Paper PDF `2508.08667`
MaXsive: High-Capacity and Robust Training-Free Generative Image Watermarking in Diffusion Models _{Po-Yuan Mao, Cheng-Chang Tsai, Chun-Shien Lu}	arXiv · cs.CR 2025		Paper PDF `2507.21195`
TAG-WM: Tamper-Aware Generative Image Watermarking via Diffusion Inversion Sensitivity _{Yuzhuo Chen, Zehua Ma, Han Fang et al.}	arXiv · cs.MM 2025		Paper PDF `2506.23484`
Peccavi: Visual Paraphrase Attack Safe and Distortion Free Image Watermarking Technique for AI-Generated Images _{Shreyas Dixit, Ashhar Aziz, Shashwat Bajpai et al.}	arXiv · cs.CV 2025		Paper PDF `2506.22960`
BitMark: Watermarking Bitwise Autoregressive Image Generative Models _{Louis Kerner, Michel Meintz, Bihe Zhao et al.}	arXiv · cs.CV 2025		Paper PDF `2506.21209`
Dynamic Watermark Generation for Digital Images using Perimeter Gated SPAD Imager PUFs _{Md Sakibur Sajal, Marc Dandin}	MWSCAS 2025 Conference 2025		Paper PDF `2506.17134`
Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attack _{Siqi Hui, Yiren Song, Sanping Zhou et al.}	arXiv · cs.CR 2025		Paper PDF `2506.01011`
VideoMarkBench: Benchmarking Robustness of Video Watermarking _{Zhengyuan Jiang, Moyang Guo, Kecen Li et al.}	arXiv · cs.CR 2025	—	Paper PDF `2505.21620`
Training-Free Watermarking for Autoregressive Image Generation _{Yu Tong, Zihao Pan, Shuai Yang et al.}	arXiv · cs.CV 2025		Paper PDF `2505.14673`
Removing Watermarks with Partial Regeneration using Semantic Information _{Krti Tallam, John Kevin Cava, Caleb Geniesse et al.}	arXiv · cs.CV 2025		Paper PDF `2505.08234`
SSH-Net: A Self-Supervised and Hybrid Network for Noisy Image Watermark Removal _{Wenyang Liu, Jianjun Gao, Kim-Hui Yap}	arXiv · cs.MM 2025		Paper PDF `2505.05088`
GenPTW: Latent Image Watermarking for Provenance Tracing and Tamper Localization _{Zhenliang Gan, Chunya Liu, Yichao Tang et al.}	arXiv · cs.CR 2025		Paper PDF `2504.19567`
VideoMark: A Distortion-Free Robust Watermarking Framework for Video Diffusion Models _{Xuming Hu, Hanqian Li, Jungang Li et al.}	arXiv · cs.CR 2025		Paper PDF `2504.16359`
Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models _{Zijin Yang, Xin Zhang, Kejiang Chen et al.}	arXiv · cs.CV 2025		Paper PDF `2504.15026`
Saliency-Aware Diffusion Reconstruction for Effective Invisible Watermark Removal _{Inzamamul Alam, Md Tanvir Islam, Simon S. Woo}	The Web Conference 2025 2025	—	Paper PDF `2504.12809`
Mask Image Watermarking _{Runyi Hu, Jie Zhang, Shiqian Zhao et al.}	arXiv · cs.CV 2025		Paper PDF `2504.12739`
PT-Mark: Invisible Watermarking for Text-to-image Diffusion Models via Semantic-aware Pivotal Tuning _{Yaopeng Wang, Huiyu Xu, Zhibo Wang et al.}	arXiv · cs.CR 2025		Paper PDF `2504.10853`
RoSMM: A Robust and Secure Multi-Modal Watermarking Framework for Diffusion Models _{ZhongLi Fang, Yu Xie, Ping Chen}	arXiv · cs.MM 2025		Paper PDF `2504.02640`
Is Your Writing Being Mimicked by AI? Unveiling Imitation with Invisible Watermarks in Creative Writing _{Ziwei Zhang, Juan Wen, Wanli Peng et al.}	arXiv · cs.CR 2025		Paper PDF `2504.00035`
WMCopier: Forging Invisible Image Watermarks on Arbitrary Images _{Ziping Dong, Chao Shuai, Zhongjie Ba et al.}	arXiv · cs.CR 2025		Paper PDF `2503.22330`
Protecting Your Video Content: Disrupting Automated Video-based LLM Annotations _{Haitong Liu, Kuofeng Gao, Yang Bai et al.}	arXiv · cs.CV 2025		Paper PDF `2503.21824`
GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splatting _{Lijiang Li, Jinglu Wang, Xiang Ming et al.}	arXiv · cs.CV 2025		Paper PDF `2503.18718`
Text-Guided Image Invariant Feature Learning for Robust Image Watermarking _{Muhammad Ahtesham, Xin Zhong}	arXiv · cs.CV 2025		Paper PDF `2503.13805`
SEAL: Semantic Aware Image Watermarking _{Kasra Arabi, R. Teal Witter, Chinmay Hegde et al.}	arXiv · cs.LG 2025		Paper PDF `2503.12172`
Your Text Encoder Can Be An Object-Level Watermarking Controller _{Naresh Kumar Devulapally, Mingzhen Huang, Vishal Asnani et al.}	arXiv · cs.CV 2025		Paper PDF `2503.11945`
Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking _{Ziyi Wang, Songbai Tan, Gang Xu et al.}	arXiv · cs.MM 2025		Paper PDF `2503.11324`
Provenance Detection for AI-Generated Images: Combining Perceptual Hashing, Homomorphic Encryption, and AI Detection Models _{Shree Singhi, Aayan Yadav, Aayush Gupta et al.}	arXiv · cs.CV 2025	—	Paper PDF `2503.11195`
The NeRF Signature: Codebook-Aided Watermarking for Neural Radiance Fields _{Ziyuan Luo, Anderson Rocha, Boxin Shi et al.}	arXiv · cs.CV 2025		Paper PDF `2502.19125`
Deep Learning-based Dual Watermarking for Image Copyright Protection and Authentication _{Sudev Kumar Padhi, Archana Tiwari, Sk. Subidh Ali}	arXiv · cs.CR 2025		Paper PDF `2502.18501`
A Baseline Method for Removing Invisible Image Watermarks using Deep Image Prior _{Hengyue Liang, Taihui Li, Ju Sun}	arXiv · eess.IV 2025		Paper PDF `2502.13998`
Image Watermarking of Generative Diffusion Models _{Yunzhuo Chen, Jordan Vice, Naveed Akhtar et al.}	arXiv · eess.IV 2025		Paper PDF `2502.10465`
Fast In-Spectrum Graph Watermarks _{Jade Garcia Bourrée, Anne-Marie Kermarrec, Erwan Le Merrer et al.}	arXiv · cs.DS 2025		Paper PDF `2502.04182`
On the Coexistence and Ensembling of Watermarks _{Aleksandar Petrov, Shruti Agarwal, Philip H. S. Torr et al.}	arXiv · cs.CV 2025		Paper PDF `2501.17356`
SAT-LDM: Provably Generalizable Image Watermarking for Latent Diffusion Models with Self-Augmented Training _{Lu Zhang, Liang Zeng}	arXiv · cs.LG 2024		Paper PDF `2501.00463`
RoboSignature: Robust Signature and Watermarking on Network Attacks _{Aryaman Shaan, Garvit Banga, Raghav Mantri}	arXiv · cs.CR 2024	—	Paper PDF `2412.19834`
Invisible Watermarks: Attacks and Robustness _{Dongjun Hwang, Sungwon Woo, Tom Gao et al.}	arXiv · cs.CV 2024		Paper PDF `2412.12511`
SuperMark: Robust and Training-free Image Watermarking via Diffusion-based Super-Resolution _{Runyi Hu, Jie Zhang, Yiming Li et al.}	arXiv · cs.CV 2024		Paper PDF `2412.10049`
Video Seal: Open and Efficient Video Watermarking _{Pierre Fernandez, Hady Elsahar, I. Zeki Yalniz et al.}	arXiv · cs.MM 2024		Paper PDF `2412.09492`
LVMark: Robust Watermark for Latent Video Diffusion Models _{Youngdong Jang, MinHyuk Jang, JaeHyeok Lee et al.}	arXiv · cs.CV 2024		Paper PDF `2412.09122`
Hidden in the Noise: Two-Stage Robust Watermarking for Images _{Kasra Arabi, Benjamin Feuer, R. Teal Witter et al.}	arXiv · cs.CV 2024		Paper PDF `2412.04653`
The Efficacy of Transfer-based No-box Attacks on Image Watermarking: A Pragmatic Analysis _{Qilong Wu, Varun Chandrasekaran}	arXiv · cs.CR 2024		Paper PDF `2412.02576`
OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarking _{Xuanyu Zhang, Zecheng Tang, Zhipei Xu et al.}	arXiv · cs.CV 2024		Paper PDF `2412.01615`
Watermark Anything with Localized Messages _{Tom Sander, Pierre Fernandez, Alain Durmus et al.}	arXiv · cs.CV 2024		Paper PDF `2411.07231`
Ideal Pseudorandom Codes _{Omar Alrabiah, Prabhanjan Ananth, Miranda Christ et al.}	arXiv · cs.CR 2024	—	Paper PDF `2411.05947`
ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization _{Huayang Huang, Yu Wu, Qian Wang}	arXiv · cs.CV 2024		Paper PDF `2411.03862`
GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting _{Xiufeng Huang, Ruiqi Li, Yiu-ming Cheung et al.}	arXiv · cs.CV 2024		Paper PDF `2410.23718`
Shallow Diffuse: Robust and Invisible Watermarking through Low-Dimensional Subspaces in Diffusion Models _{Wenda Li, Huijie Zhang, Qing Qu}	arXiv · cs.LG 2024		Paper PDF `2410.21088`

Generative AI Watermarking

40 papers · newest first

Title & Authors	Venue/Year	Introduction	Links
DRIFT: Removing Diffusion Watermarks by Deflecting the Generative Trajectory _{Rui Bao, Zheng Gao, Xiaoyu Li et al.}	arXiv · cs.CR 2026		Paper PDF `2609.08213`
IRIS: Visual-Semantic Binding for Forgery-Resistant Watermarking of Diffusion Images _{Xiaoyan Feng, Zheng Gao, Tong Guan et al.}	arXiv · cs.CV 2026		Paper PDF `2608.03539`
FDDWAN: A Frequency-Decoupled Diffusion Network for Watermarking Attack _{Chunpeng Wang, Yuxin Li, Xiaoyu Wang et al.}	arXiv · cs.CV 2026		Paper PDF `2607.27800`
AnchorMark: Robust Diffusion Watermarking via Latent-Space Rotation Synchrony _{Yuqi Qian, Yun Cao, Haocheng Fu et al.}	arXiv · cs.CR 2026		Paper PDF `2607.27551`
Observation-Level Watermarking and Detection for Tabular Data _{Dongyu Cui, Xuan Bi}	arXiv · stat.ME 2026	—	Paper PDF `2607.10554`
BiSLW: Bi-Spectral Latent Watermarking for Generative Diffusion Models _{Aryan Pandit}	arXiv · cs.CV 2026		Paper PDF `2607.02643`
Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing _{Leyi Qi, Yiming Li, Siyuan Liang et al.}	the International Conference on Machine Learning (ICML) 2026 2026		Paper PDF `2605.29809`
LoRA-Key: User-Centric LoRA Watermarking for Text-to-Image Diffusion Models _{Yaopeng Wang, Qingliang Wang, Zhibo Wang et al.}	arXiv · cs.CR 2026		Paper PDF `2605.29569`
Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio _{Georgios Milis, Yubin Qin, Yihan Wu et al.}	ICML 2026 2026		Paper PDF `2605.25967`
Removing the Watermark Is Not Enough: Forensic Stealth in Generative-AI Watermark Removal _{Yevin Nikhel Goonatilake, Giuseppe Ateniese}	arXiv · cs.CR 2026		Paper PDF `2605.09203`
CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint _{Jiewei Lai, Lan Zhang, Chen Tang et al.}	arXiv · cs.CV 2026		Paper PDF `2605.01479`
Dual-Guard: Dual-Channel Latent Watermarking for Provenance and Tamper Localization in Diffusion Images _{JinFeng Xie, Chengfu Ou, Peipeng Yu et al.}	arXiv · cs.CR 2026		Paper PDF `2604.19090`
Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communication _{Yi Zhang, Hongbo Huang, Liang-Jie Zhang}	arXiv · cs.CV 2026		Paper PDF `2603.26167`
High-Fidelity Face Content Recovery via Tamper-Resilient Versatile Watermarking _{Peipeng Yu, Jinfeng Xie, Chengfu Ou et al.}	arXiv · cs.CV 2026		Paper PDF `2603.23940`
The Orthogonal Vulnerabilities of Generative AI Watermarks: A Comparative Empirical Benchmark of Spatial and Latent Provenance _{Jesse Yu, Nicholas Wei}	arXiv · cs.CR 2026	—	Paper PDF `2603.10323`
OSI: One-step Inversion Excels in Extracting Diffusion Watermarks _{Yuwei Chen, Zhenliang He, Jia Tang et al.}	arXiv · cs.CV 2026		Paper PDF `2602.09494`
ALIEN: Analytic Latent Watermarking for Controllable Generation _{Liangqi Lei, Keke Gai, Jing Yu et al.}	arXiv · eess.IV 2026		Paper PDF `2602.06101`
SemBind: Binding Diffusion Watermarks to Semantics Against Black-Box Forgery Attacks _{Xin Zhang, Zijin Yang, Kejiang Chen et al.}	arXiv · cs.CR 2026	—	Paper PDF `2601.20310`
Learning to Watermark in the Latent Space of Generative Models _{Sylvestre-Alvise Rebuffi, Tuan Tran, Valeriu Lacatusu et al.}	arXiv · cs.CV 2026		Paper PDF `2601.16140`
LR-DWM: Efficient Watermarking for Diffusion Language Models _{Ofek Raban, Ethan Fetaya, Gal Chechik}	arXiv · cs.CL 2026		Paper PDF `2601.12376`
SPDMark: Selective Parameter Displacement for Robust Video Watermarking _{Samar Fares, Nurbek Tastan, Karthik Nandakumar}	arXiv · cs.CV 2025		Paper PDF `2512.12090`
HMARK: Radioactive Multi-Bit Semantic-Latent Watermarking for Diffusion Models _{Kexin Li, Guozhen Ding, Ilya Grishchenko et al.}	arXiv · cs.CR 2025		Paper PDF `2512.00094`
OptMark: Robust Multi-bit Diffusion Watermarking via Inference Time Optimization _{Jiazheng Xing, Hai Ci, Hongbin Xu et al.}	arXiv · cs.CR 2025		Paper PDF `2508.21727`
MaXsive: High-Capacity and Robust Training-Free Generative Image Watermarking in Diffusion Models _{Po-Yuan Mao, Cheng-Chang Tsai, Chun-Shien Lu}	arXiv · cs.CR 2025		Paper PDF `2507.21195`
KGMark: A Diffusion Watermark for Knowledge Graphs _{Hongrui Peng, Haolang Lu, Yuanlong Yu et al.}	arXiv · cs.CR 2025		Paper PDF `2505.23873`
Forging and Removing Latent-Noise Diffusion Watermarks Using a Single Image _{Anubhav Jain, Yuya Kobayashi, Naoki Murata et al.}	arXiv · cs.CV 2025		Paper PDF `2504.20111`
Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models _{Zijin Yang, Xin Zhang, Kejiang Chen et al.}	arXiv · cs.CV 2025		Paper PDF `2504.15026`
Image Watermarking of Generative Diffusion Models _{Yunzhuo Chen, Jordan Vice, Naveed Akhtar et al.}	arXiv · eess.IV 2025		Paper PDF `2502.10465`
LVMark: Robust Watermark for Latent Video Diffusion Models _{Youngdong Jang, MinHyuk Jang, JaeHyeok Lee et al.}	arXiv · cs.CV 2024		Paper PDF `2412.09122`
Ideal Pseudorandom Codes _{Omar Alrabiah, Prabhanjan Ananth, Miranda Christ et al.}	arXiv · cs.CR 2024	—	Paper PDF `2411.05947`
Plug-and-Hide: Provable and Adjustable Diffusion Generative Steganography _{Jiahao Zhu, Zixuan Chen, Jiali Liu et al.}	arXiv · cs.CR 2024		Paper PDF `2409.04878`
Latent Watermarking of Audio Generative Models _{Robin San Roman, Pierre Fernandez, Antoine Deleforge et al.}	arXiv · cs.SD 2024		Paper PDF `2409.02915`
WMAdapter: Adding WaterMark Control to Latent Diffusion Models _{Hai Ci, Yiren Song, Pei Yang et al.}	arXiv · cs.CV 2024		Paper PDF `2406.08337`
RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification _{Hai Ci, Pei Yang, Yiren Song et al.}	arXiv · cs.CV 2024		Paper PDF `2404.14055`
Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models _{Zijin Yang, Kai Zeng, Kejiang Chen et al.}	arXiv · cs.CV 2024		Paper PDF `2404.04956`
Latent Watermark: Inject and Detect Watermarks in Latent Diffusion Space _{Zheling Meng, Bo Peng, Jing Dong}	arXiv · cs.CV 2024	—	Paper PDF `2404.00230`
ProMark: Proactive Diffusion Watermarking for Causal Attribution _{Vishal Asnani, John Collomosse, Tu Bui et al.}	CVPR 2024 2024		Paper PDF `2403.09914`
WAVES: Benchmarking the Robustness of Image Watermarks _{Bang An, Mucong Ding, Tahseen Rabbani et al.}	arXiv · cs.CV 2024		Paper PDF `2401.08573`
OVLA: Neural Network Ownership Verification using Latent Watermarks _{Feisi Fu, Wenchao Li}	arXiv · cs.CR 2023		Paper PDF `2306.13215`
ReDMark: Framework for Residual Diffusion Watermarking on Deep Networks _{Mahdi Ahmadi, Alireza Norouzi, S. M. Reza Soroushmehr et al.}	arXiv · cs.MM 2018	—	Paper PDF `1810.07248`

Text and LLM Watermarking

116 papers · newest first

Title & Authors	Venue/Year	Introduction	Links
MarkSec: Capability-Aware Evaluation of Adversarial Attacks Against LLM Watermarks _{Kairong Li, Zhikun Zhang, Xiao Ren et al.}	arXiv · cs.CR 2026		Paper PDF `2609.16681`
Predictive Likelihood Ratios for Language Model Watermark Detection _{Li Ma}	arXiv · stat.ML 2026	—	Paper PDF `2609.15657`
DenMark: Robust Semantic Watermarking for Diffusion Language Models _{Tianhao Ma, Weihao Xuan, Dong-Dong Wu et al.}	arXiv · cs.CL 2026		Paper PDF `2609.14257`
TripPattern: A Pattern-based Text Watermarking Method for Large Language Models _{Sangjun Moon, Dasom Choi, Jingun Kwon et al.}	Findings of AACL-IJCNLP 2026 2026	—	Paper PDF `2609.12472`
Watermarks Without Verification: AI Text Watermarking After the EU AI Act _{Alexander Nemecek, Vipin Chaudhary, Erman Ayday}	arXiv · cs.CY 2026	—	Paper PDF `2609.09604`
WeaveMark: Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading _{Gang-Hyun Park, Ju-Hyeong Lee, Hee-Youl Kwak et al.}	arXiv · cs.CR 2026		Paper PDF `2609.02177`
WoE Wrote It? Watermarking Mixture-of-Experts LLMs for Black-Box Text Provenance _{Jona te Lintelo, Lichao Wu, Stjepan Picek}	arXiv · cs.CR 2026	—	Paper PDF `2608.29151`
Auditing Cross-Lingual Fairness in Language Model Watermarking _{Alexander Nemecek, Osama Zafar, Debargha Ganguly et al.}	arXiv · cs.CL 2026		Paper PDF `2608.20047`
Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks _{Xiaoyan Feng, Yanjun Zhang, He Zhang et al.}	arXiv · cs.CR 2026		Paper PDF `2608.12713`
WorldMark: A Plug-and-Play World Knowledge Interface for Cross-Host Language Model Watermarking _{Song Xiao, Yuqi Yuan, Yanshuo Zhang et al.}	arXiv · cs.CR 2026		Paper PDF `2608.06416`
DHMark: Public-Key Watermarking for LLM-Generated Text via Diffie-Hellman-Guided Rejection Sampling _{Haocheng Fu, Yuqi Qian, Luyao Wang et al.}	arXiv · cs.CR 2026		Paper PDF `2608.03093`
Efficient Online LLM Watermark Detection via Rao-Blackwellized E-Processes _{Lu Luo, Dandan Mo, Chengdong Xu et al.}	arXiv · stat.ML 2026		Paper PDF `2607.21958`
ChainMark: Model-Free LLM Watermarking with Closed-Form Calibration _{Chengheng Li-Chen, Kyuhee Kim}	arXiv · cs.CR 2026		Paper PDF `2607.18445`
SSTMark: Robust Training-Free Semantic-Level Speech Watermarking _{Kuan-Lin Chu, Jun-Cheng Chen, Chun-Shien Lu}	arXiv · cs.SD 2026		Paper PDF `2607.17592`
AI Watermark Evidence Fails Forensic Readiness: An Empirical Evaluation _{Saifur Rahman Tamim, Amir Labib Khan}	arXiv · cs.CR 2026		Paper PDF `2607.16010`
WaterMoE: Expert-Routing-based Watermarking for High Fidelity and Efficiency _{Z Sun, Q Jiang, S Sheng et al.}	arXiv · cs.CR 2026		Paper PDF `2607.13099`
Toward Stronger Code Watermarking: A Grammar-Driven Approach to Optimizing the Trade-off Between Quality and Detectability _{Licheng Yu, Aiwei Liu, Songze Li}	arXiv · cs.CR 2026		Paper PDF `2607.10210`
LLM Watermarking as Big Data Provenance: A Deployment-Oriented Systematization _{Huy Phan, Kieu Dang, Ojaswi Dulal et al.}	arXiv · cs.CR 2026		Paper PDF `2607.10103`
Beyond Heuristic Tuning: Power-Calibrated LLM Watermarking _{Xiaopu Wang, Zelin He, Chengyuan Liu et al.}	arXiv · stat.ML 2026		Paper PDF `2607.05694`
Robust Text Watermarking for Large Language Models via Dual Semantic Embeddings _{Jonas Schäfer, Cezary Pilaszewicz, Gerhard Wunder}	Findings of EMNLP 2026 2026	—	Paper PDF `2606.31602`
CORE-BREW: LLR-Based Soft Decoding for Robust Multi-Bit LLM Watermarking _{Joeun Kim, HoEun Kim, Young-Sik Kim}	arXiv · cs.CR 2026		Paper PDF `2606.24163`
Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Text _{Sina Mansouri, Mohit Marvania, Abolfazl Safikhani}	the 43rd International Conference on Machine Learning (ICML 2026), Seoul, South Korea 2026		Paper PDF `2608.18102`
Linguistics-Aware Non-Distortionary LLM Watermarking _{Shinwoo Park, Hyejin Park, Hyeseon An et al.}	arXiv · cs.CL 2026		Paper PDF `2606.00613`
AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing _{Yuexin Li, Wenjie Qu, Linyu Wu et al.}	arXiv · cs.CR 2026		Paper PDF `2605.29434`
Blind PRNG Hijacking: An Undetectable Integrity-Preserving Attack Against LLM Watermarking _{Ziyang You, Huilong He, Xiaoke Yang et al.}	arXiv · cs.CR 2026		Paper PDF `2605.28632`
SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness _{Jiahao Huo, Wenjie Qu, Yibo Yan et al.}	arXiv · cs.CR 2026		Paper PDF `2605.25796`
Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection _{Kieu Dang, Phung Lai, NhatHai Phan et al.}	arXiv · cs.CR 2026	—	Paper PDF `2605.23175`
Marking the Wrong Symptoms: Evaluating LLM Watermarks in Medical Texts _{Melanie Rieff, Robin Staab, Thibaud Gloaguen et al.}	arXiv · cs.AI 2026		Paper PDF `2607.20462`
Covert Multi-bit LLM Watermarking: An Information Theory and Coding Approach _{Sidong Guo, Tyler Kann, Teodora Baluta et al.}	arXiv · cs.IT 2026		Paper PDF `2605.16709`
TextSeal: A Localized LLM Watermark for Provenance & Distillation Protection _{Tom Sander, Hongyan Chang, Tomáš Souček et al.}	arXiv · cs.CR 2026		Paper PDF `2605.12456`
Every Bit, Everywhere, All at Once: A Binomial Multibit LLM Watermark _{Thibaud Gloaguen, Robin Staab, Mark Vero et al.}	arXiv · cs.CR 2026		Paper PDF `2605.11653`
Making Open-Source Text LLM Watermarks Durable Against Merging _{Luisa Scharff, Thibaud Gloaguen, Robin Staab et al.}	arXiv · cs.CL 2026		Paper PDF `2607.20435`
Sequential Behavioral Watermarking for LLM Agents _{Hyeseon An, Shinwoo Park, Dongsu Kim et al.}	arXiv · cs.CR 2026		Paper PDF `2605.11036`
Vaporizer: Breaking Watermarking Schemes for Large Language Model Outputs _{Jonathan Hong Jin Ng, Anh Tu Ngo, Anupam Chattopadhyay}	arXiv · cs.CR 2026		Paper PDF `2605.07481`
Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks _{Mohd Ruhul Ameen, Akif Islam, Nadim Mahmud et al.}	arXiv · cs.CL 2026		Paper PDF `2605.05503`
SLAM: Structural Linguistic Activation Marking for Language Models _{Fabrice Harel-Canada, Amit Sahai}	arXiv · cs.CL 2026		Paper PDF `2605.05443`
SWAN: Semantic Watermarking with Abstract Meaning Representation _{Ziping Ye, Gourab Dey, Christos Christodoulopoulos et al.}	ACL 2026 Main 2026		Paper PDF `2605.04305`
LLM Output Detectability and Task Performance Can be Jointly Optimized _{Koshiro Saito, Ryuto Koike, Masahiro Kaneko et al.}	arXiv · cs.CL 2026	—	Paper PDF `2605.01350`
Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking _{Joeun Kim, HoEun Kim, Dongsup Jin et al.}	ICML 2026 2026		Paper PDF `2605.00348`
VOW: Verifiable and Oblivious Watermark Detection for Large Language Models _{Xiaokun Luan, Yihao Zhang, Pengcheng Su et al.}	arXiv · cs.CR 2026		Paper PDF `2604.27666`
SSG: Logit-Balanced Vocabulary Partitioning for LLM Watermarking _{Chenxi Gu, Xiaoning Du, John Grundy}	arXiv · cs.CR 2026		Paper PDF `2604.22438`
SIF: Semantically In-Distribution Fingerprints for Large Vision-Language Models _{Yifei Zhao, Qian Lou, Mengxin Zheng}	CVPR 2026 2026		Paper PDF `2604.17041`
RLSpoofer: A Lightweight Evaluator for LLM Watermark Spoofing Resilience _{Hanbo Huang, Xuan Gong, Yiran Zhang et al.}	arXiv · cs.CR 2026		Paper PDF `2604.11546`
Beyond A Fixed Seal: Adaptive Stealing Watermark in Large Language Models _{Shuhao Zhang, Yuli Chen, Jiale Han et al.}	arXiv · cs.CR 2026		Paper PDF `2604.10893`
XMark: Reliable Multi-Bit Watermarking for LLM-Generated Texts _{Jiahao Xu, Rui Hu, Olivera Kotevska et al.}	arXiv · cs.CL 2026		Paper PDF `2604.05242`
Rethinking LLM Watermark Detection in Black-Box Settings: A Non-Intrusive Third-Party Framework _{Zhuoshang Wang, Yubing Ren, Yanan Cao et al.}	ACL 2026 Findings 2026		Paper PDF `2603.14968`
On Google's SynthID-Text LLM Watermarking System: Theoretical Analysis and Empirical Validation _{Romina Omidi, Yun Dong, Binghui Wang}	arXiv · cs.CR 2026		Paper PDF `2603.03410`
Online LLM watermark detection via e-processes _{Weijie Su, Ruodu Wang, Zinan Zhao}	arXiv · stat.ME 2026		Paper PDF `2602.14286`
Overview of PAN 2026: Voight-Kampff Generative AI Detection, Text Watermarking, Multi-Author Writing Style Analysis, Generative Plagiarism Detection, and Reasoning Trajectory Detection _{Janek Bevendorff, Maik Fröbe, André Greiner-Petter et al.}	arXiv · cs.CL 2026	—	Paper PDF `2602.09147`
On Protecting Agentic Systems' Intellectual Property via Watermarking _{Liwen Wang, Zongjie Li, Yuchong Xie et al.}	arXiv · cs.AI 2026		Paper PDF `2602.08401`
ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport _{Atefeh Gilani, Sajani Vithana, Carol Xuan Long et al.}	arXiv · cs.LG 2026		Paper PDF `2602.07235`
A Unified Framework for LLM Watermarks _{Thibaud Gloaguen, Robin Staab, Nikola Jovanović et al.}	arXiv · cs.CR 2026		Paper PDF `2602.06754`
WorldCup Sampling for Multi-bit LLM Watermarking _{Yidan Wang, Yubing Ren, Yanan Cao et al.}	arXiv · cs.CL 2026		Paper PDF `2602.01752`
MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking _{Ya Jiang, Massieh Kordi Boroujeny, Surender Suresh Kumar et al.}	arXiv · cs.CR 2026		Paper PDF `2601.22246`
Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs _{Nghia T. Le, Alan Ritter, Kartik Goyal}	arXiv · cs.CR 2026		Paper PDF `2601.11629`
BanglaLorica: Design and Evaluation of a Robust Watermarking Algorithm for Large Language Models in Bangla Text Generation _{Amit Bin Tariqul, A N M Zahid Hossain Milkan, Sahab-Al-Chowdhury et al.}	arXiv · cs.CL 2026		Paper PDF `2601.04534`
How Good is Post-Hoc Watermarking With Language Model Rephrasing? _{Pierre Fernandez, Tom Sander, Hady Elsahar et al.}	arXiv · cs.CR 2025		Paper PDF `2512.16904`
DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack _{Hao Li, Yubing Ren, Yanan Cao et al.}	ACL 2026 Findings 2026		Paper PDF `2512.16182`
Security and Detectability Analysis of Unicode Text Watermarking Methods against Large Language Models _{Malte Hellmeier}	arXiv · cs.CR 2025		Paper PDF `2512.13325`
Improved Pseudorandom Codes from Permuted Puzzles _{Miranda Christ, Noah Golowich, Sam Gunn et al.}	arXiv · cs.CR 2025	—	Paper PDF `2512.08918`
MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking _{Yizhou Zhao, Zhiwei Steven Wu, Adam Block}	arXiv · cs.LG 2025		Paper PDF `2512.04044`
WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking _{Yukang Lin, Jiahao Shao, Shuoran Jiang et al.}	arXiv · cs.CL 2025		Paper PDF `2512.00837`
WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarking _{Shinwoo Park, Hyejin Park, Hyeseon Ahn et al.}	arXiv · cs.AI 2025		Paper PDF `2511.07863`
Adaptive Testing for Segmenting Watermarked Texts From Language Models _{Xingchi Li, Xiaochi Liu, Guanxun Li}	arXiv · stat.ML 2025		Paper PDF `2511.06645`
Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology _{Thomas Souverain}	arXiv · cs.CR 2025		Paper PDF `2511.03641`
PVMark: Enabling Public Verifiability for LLM Watermarking Schemes _{Haohua Duan, Liyao Xiang, Xin Zhang}	arXiv · cs.CR 2025		Paper PDF `2510.26274`
PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs _{Jiaqi Xue, Yifei Zhao, Mansour Al Ghanim et al.}	arXiv · cs.CR 2025		Paper PDF `2510.23891`
Optimal Detection for Language Watermarks with Pseudorandom Collision _{T. Tony Cai, Xiang Li, Qi Long et al.}	arXiv · math.ST 2025		Paper PDF `2510.22007`
A Reinforcement Learning Framework for Robust and Secure LLM Watermarking _{Li An, Yujian Liu, Yepeng Liu et al.}	arXiv · cs.CR 2025		Paper PDF `2510.21053`
Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption _{Yepeng Liu, Xuandong Zhao, Dawn Song et al.}	arXiv · cs.CR 2025		Paper PDF `2510.18333`
Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translation _{Asim Mohamed, Martin Gubri}	arXiv · cs.CL 2025	—	Paper PDF `2510.18019`
Watermark Robustness and Radioactivity May Be at Odds in Federated Learning _{Leixu Huang, Zedian Shao, Teodora Baluta}	arXiv · cs.CR 2025		Paper PDF `2510.17033`
EditMark: Watermarking Large Language Models based on Model Editing _{Shuai Li, Kejiang Chen, Jun Jiang et al.}	arXiv · cs.CR 2025		Paper PDF `2510.16367`
DITTO: A Spoofing Attack Framework on Watermarked LLMs via Knowledge Distillation _{Hyeseon An, Shinwoo Park, Suyeon Woo et al.}	EACL 2026 (Oral) 2026		Paper PDF `2510.10987`
A Linguistics-Aware LLM Watermarking via Syntactic Predictability _{Shinwoo Park, Hyejin Park, Hyeseon An et al.}	arXiv · cs.CL 2025		Paper PDF `2510.13829`
On the Empirical Power of Goodness-of-Fit Tests in Watermark Detection _{Weiqing He, Xiang Li, Tianqi Shang et al.}	NeurIPS 2025 as a spotlight 2025		Paper PDF `2510.03944`
PRIVMARK: Private Large Language Models Watermarking with MPC _{Thomas Fargues, Ye Dong, Tianwei Zhang et al.}	ICC 2026 2026		Paper PDF `2509.24624`
Analyzing and Evaluating Unbiased Language Model Watermark _{Yihan Wu, Xuehao Cui, Ruibo Chen et al.}	arXiv · cs.CR 2025		Paper PDF `2509.24048`
An Ensemble Framework for Unbiased Language Model Watermarking _{Yihan Wu, Ruibo Chen, Georgios Milis et al.}	arXiv · cs.CR 2025		Paper PDF `2509.24043`
LLM Watermark Evasion via Bias Inversion _{Jeongyeon Hwang, Sangdon Park, Jungseul Ok}	arXiv · cs.CR 2025		Paper PDF `2509.23019`
Fast segmentation of watermarked texts from large language models through an epidemic change-point framework _{Soham Bonnerjee, Subhrajyoty Roy, Sayar Karmakar}	arXiv · stat.ML 2025	—	Paper PDF `2509.21160`
RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks _{Hanbo Huang, Yiran Zhang, Hao Zheng et al.}	arXiv · cs.CR 2025		Paper PDF `2509.20924`
Character-Level Perturbations Disrupt LLM Watermarks _{Zhaoxi Zhang, Xiaomei Zhang, Yanjun Zhang et al.}	Network and Distributed System Security (NDSS) Symposium 2026 2026	—	Paper PDF `2509.09112`
Factuality Beyond Coherence: Evaluating LLM Watermarking Methods for Medical Texts _{Rochana Prih Hastuti, Rian Adam Rajagede, Mansour Al Ghanim et al.}	EMNLP 2025 Findings 2025		Paper PDF `2509.07755`
Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID _{Xia Han, Qi Li, Jianbing Ni et al.}	arXiv · cs.CR 2025		Paper PDF `2508.20228`
Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends _{Zhenhua Xu, Xubin Yue, Zhebo Wang et al.}	arXiv · cs.CR 2025		Paper PDF `2508.11548`
SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders _{Zhuohao Yu, Xingru Jiang, Weizheng Gu et al.}	arXiv · cs.CL 2025		Paper PDF `2508.08211`
VLA-Mark: A cross modal watermark for large vision-language alignment model _{Shuliang Liu, Qi Zheng, Jesse Jiaxi Xu et al.}	arXiv · cs.CV 2025		Paper PDF `2507.14067`
Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks _{Huanming Shen, Baizhou Huang, Xiaojun Wan}	arXiv · cs.CR 2025		Paper PDF `2507.06274`
CoreMark: Toward Robust and Universal Text Watermarking Technique _{Jiale Meng, Yiming Li, Zheming Lu et al.}	arXiv · cs.CV 2025		Paper PDF `2506.23066`
Optimal Estimation of Watermark Proportions in Hybrid AI-Human Texts _{Xiang Li, Garrett Wen, Weiqing He et al.}	arXiv · stat.ML 2025		Paper PDF `2506.22343`
BiMark: Unbiased Multilayer Watermarking for Large Language Models _{Xiaoyan Feng, He Zhang, Yanjun Zhang et al.}	arXiv · cs.CL 2025		Paper PDF `2506.21602`
Watermarking Autoregressive Image Generation _{Nikola Jovanović, Ismail Labiad, Tomáš Souček et al.}	arXiv · cs.LG 2025		Paper PDF `2506.16349`
Multi-use LLM Watermarking and the False Detection Problem _{Zihao Fu, Chris Russell}	arXiv · cs.CR 2025		Paper PDF `2506.15975`
LexiMark: Robust Watermarking via Lexical Substitutions to Enhance Membership Verification of an LLM's Textual Training Data _{Eyal German, Sagiv Antebi, Edan Habler et al.}	arXiv · cs.CL 2025		Paper PDF `2506.14474`
HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions _{Dor Tsur, Carol Xuan Long, Claudio Mayrink Verdun et al.}	arXiv · cs.CR 2025	—	Paper PDF `2506.06409`
StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models _{Ya Jiang, Chuxiong Wu, Massieh Kordi Boroujeny et al.}	arXiv · cs.CR 2025		Paper PDF `2506.05502`
Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking _{Tianle Gu, Zongqi Wang, Kexin Huang et al.}	arXiv · cs.CL 2025		Paper PDF `2505.14112`
Optimized Couplings for Watermarking Large Language Models _{Dor Tsur, Carol Xuan Long, Claudio Mayrink Verdun et al.}	ISIT25 2025		Paper PDF `2505.08878`
LLM-Text Watermarking based on Lagrange Interpolation _{Jarosław Janas, Paweł Morawiecki, Josef Pieprzyk}	arXiv · cs.CR 2025	—	Paper PDF `2505.05712`
Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks _{Yixin Cheng, Hongcheng Guo, Yangming Li et al.}	arXiv · cs.LG 2025		Paper PDF `2505.05190`
WaterDrum: Watermarking for Data-centric Unlearning Metric _{Xinyang Lu, Xinyuan Niu, Gregory Kang Ruey Lau et al.}	arXiv · cs.LG 2025		Paper PDF `2505.05064`
An End-to-End Model for Logits-Based Large Language Models Watermarking _{Kahim Wong, Jicheng Zhou, Jiantao Zhou et al.}	arXiv · cs.CR 2025		Paper PDF `2505.02344`
LLM Watermarking Using Mixtures and Statistical-to-Computational Gaps _{Pedro Abdalla, Roman Vershynin}	arXiv · cs.CR 2025	—	Paper PDF `2505.01484`
Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation _{Xin Yi, Yue Li, Shunfan Zheng et al.}	arXiv · cs.CL 2025		Paper PDF `2504.17480`
Watermarking Needs Input Repetition Masking _{David Khachaturov, Robert Mullins, Ilia Shumailov et al.}	arXiv · cs.LG 2025		Paper PDF `2504.12229`
Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learning _{Li An, Yujian Liu, Yepeng Liu et al.}	arXiv · cs.CR 2025		Paper PDF `2504.06575`
Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Models _{Fay Elhassan, Niccolò Ajroldi, Antonio Orvieto et al.}	arXiv · cs.LG 2025		Paper PDF `2504.06446`
Agent Guide: A Simple Agent Behavioral Watermarking Framework _{Kaibo Huang, Zipei Zhang, Zhongliang Yang et al.}	arXiv · cs.AI 2025		Paper PDF `2504.05871`
FontGuard: A Robust Font Watermarking Approach Leveraging Deep Font Knowledge _{Kahim Wong, Jicheng Zhou, Kemou Li et al.}	arXiv · cs.CV 2025		Paper PDF `2504.03128`
RoSMM: A Robust and Secure Multi-Modal Watermarking Framework for Diffusion Models _{ZhongLi Fang, Yu Xie, Ping Chen}	arXiv · cs.MM 2025		Paper PDF `2504.02640`
Is Your Writing Being Mimicked by AI? Unveiling Imitation with Invisible Watermarks in Creative Writing _{Ziwei Zhang, Juan Wen, Wanli Peng et al.}	arXiv · cs.CR 2025		Paper PDF `2504.00035`
CEFW: A Comprehensive Evaluation Framework for Watermark in Large Language Models _{Shuhao Zhang, Bo Cheng, Jiale Han et al.}	arXiv · cs.CR 2025		Paper PDF `2503.20802`
Breaking Distortion-free Watermarks in Large Language Models _{Shayleen Reynolds, Hengzhi He, Dung Daniel T. Ngo et al.}	arXiv · cs.CR 2025		Paper PDF `2502.18608`
Detecting Benchmark Contamination Through Watermarking _{Tom Sander, Pierre Fernandez, Saeed Mahloujifar et al.}	arXiv · cs.CR 2025		Paper PDF `2502.17259`
Evaluating the Robustness and Accuracy of Text Watermarking Under Real-World Cross-Lingual Manipulations _{Mansour Al Ghanim, Jiaqi Xue, Rochana Prih Hastuti et al.}	arXiv · cs.CL 2025		Paper PDF `2502.16699`

Model Ownership and Fingerprinting

108 papers · newest first

Title & Authors	Venue/Year	Introduction	Links
Inference-Engine Fingerprinting Attacks are Practical: Exploring Model-Driven Environmental Discovery, Exploitation, and Escape _{Sarah Radway, Andrew Cheng, Vijay Janapa Reddi et al.}	arXiv · cs.CR 2026		Paper PDF `2609.20614`
Fingerprinting Multimodal Large Language Models _{Chao Huang, Meng Tong, Kejiang Chen}	ACM Multimedia 2026 (MM '26) as an oral presentation 2026		Paper PDF `2609.20457`
Predictive Likelihood Ratios for Language Model Watermark Detection _{Li Ma}	arXiv · stat.ML 2026	—	Paper PDF `2609.15657`
Membership is Ownership: A Robust Ownership Verification Framework for Diffusion Models _{Feng Jiang, Zuobin Xiong, An Huang et al.}	the IEEE International Conference on Data Mining (ICDM) 2026 2026		Paper PDF `2608.28929`
Auditing Cross-Lingual Fairness in Language Model Watermarking _{Alexander Nemecek, Osama Zafar, Debargha Ganguly et al.}	arXiv · cs.CL 2026		Paper PDF `2608.20047`
Fingerprinting Text-to-Image Diffusion Models via Collapsed Generation _{Yuanmin Huang, Chen Chen, Geng Hong et al.}	arXiv · cs.CR 2026		Paper PDF `2608.11732`
WorldMark: A Plug-and-Play World Knowledge Interface for Cross-Host Language Model Watermarking _{Song Xiao, Yuqi Yuan, Yanshuo Zhang et al.}	arXiv · cs.CR 2026		Paper PDF `2608.06416`
Synchronization-Free Algebraic Fingerprints for Large Language Models: From Autoregressive to Diffusion Models _{Jaroslaw Janas, Josef Pieprzyk, Pawel Morawiecki}	arXiv · cs.CR 2026	—	Paper PDF `2607.16648`
modelDNA: Calibrated Lineage Verification and Merge Decomposition from Sampled Weight Fingerprints _{Muhammad Awais Bin Adil, Saad Aamir}	arXiv · cs.LG 2026	—	Paper PDF `2607.10617`
Large Language Models (LLMs) and Generative AI in Cybersecurity and Privacy: A Survey of Dual-Use Risks, AI-Generated Malware, Explainability, and Defensive Strategies _{Kiarash Ahi, Saeed Valizadeh}	IEEE 6th Silicon Valley Cybersecurity Conference (SVCC), San Francisco, CA, USA, 2025, pp. 1-10 2025		Paper PDF `2607.06963`
Cyclic Denoising Reveals Ultrastable Memories in Diffusion Models _{Rishabh Sharma, Stefano Martiniani}	arXiv · cs.LG 2026		Paper PDF `2606.24000`
What Your Model Threw Away and Why You'll Want It Back: Masking, Fingerprinting, and Privacy from Discarded Geometry _{Zachary P. Bradshaw}	arXiv · cs.LG 2026		Paper PDF `2607.13046`
Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Models _{Jianwei Fei, Yunshu Dai, Zhihua Xia et al.}	arXiv · cs.CV 2026		Paper PDF `2606.12977`
T2S: A Rehearsal-Based Approach for Extraction-Resistant Model Watermarking _{Jian-Ping Mei, Weibin Zhang, Ao Yao et al.}	ICASSP 2026 - 2026 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), Barcelona, Spain, 2026, pp. 13967-13971 2026		Paper PDF `2606.11698`
Characterizing Detectability in 3DGS Poisoning: A Stage-wise Benchmark _{Quoc-Anh Bui-Huynh, Thanh Duc Ngo, Xue Geng et al.}	arXiv · cs.CV 2026		Paper PDF `2606.03499`
Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing _{Leyi Qi, Yiming Li, Siyuan Liang et al.}	the International Conference on Machine Learning (ICML) 2026 2026		Paper PDF `2605.29809`
Findings of the Counter Turing Test: AI-Generated Image Detection _{Rajarshi Roy, Nasrin Imanpour, Ashhar Aziz et al.}	arXiv · cs.CV 2026		Paper PDF `2605.20787`
Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks _{Mohd Ruhul Ameen, Akif Islam, Nadim Mahmud et al.}	arXiv · cs.CL 2026		Paper PDF `2605.05503`
CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint _{Jiewei Lai, Lan Zhang, Chen Tang et al.}	arXiv · cs.CV 2026		Paper PDF `2605.01479`
The Surprising Universality of LLM Outputs: A Real-Time Verification Primitive _{Alex Bogdan, Adrian de Valois-Franklin}	arXiv · cs.CR 2026		Paper PDF `2604.25634`
AI Identification: An Integrated Framework for Sustainable Governance in Digital Enterprises _{Di Kevin Gao, Jingdao Chen, Shahram Rahimi}	arXiv · cs.CR 2026	—	Paper PDF `2604.10473`
StoryScope: Investigating idiosyncrasies in AI fiction _{Jenna Russell, Rishanth Rajendhran, Chau Minh Pham et al.}	arXiv · cs.CL 2026	—	Paper PDF `2604.03136`
Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communication _{Yi Zhang, Hongbo Huang, Liang-Jie Zhang}	arXiv · cs.CV 2026		Paper PDF `2603.26167`
IrisFP: Adversarial-Example-based Model Fingerprinting with Enhanced Uniqueness and Robustness _{Ziye Geng, Guang Yang, Yihang Chen et al.}	CVPR 2026 2026		Paper PDF `2603.24996`
LiteGuard: Efficient Task-Agnostic Model Fingerprinting with Enhanced Generalization _{Guang Yang, Ziye Geng, Yihang Chen et al.}	arXiv · cs.CR 2026		Paper PDF `2603.24982`
Functional Subspace Watermarking for Large Language Models _{Zikang Ding, Junhao Li, Suling Wu et al.}	arXiv · cs.CR 2026		Paper PDF `2603.18793`
Collaborative Threshold Watermarking _{Tameem Bakr, Anish Ambreth, Nils Lukas}	arXiv · cs.LG 2026	—	Paper PDF `2602.10765`
Origin Lens: A Privacy-First Mobile Framework for Cryptographic Image Provenance and AI Detection _{Alexander Loth, Dominique Conceicao Rosario, Peter Ebinger et al.}	ACM TheWebConf '26 Companion 2026		Paper PDF `2602.03423`
Lossless Copyright Protection via Intrinsic Model Fingerprinting _{Lingxiao Chen, Liqin Wang, Wei Lu et al.}	arXiv · cs.CR 2026		Paper PDF `2601.21252`
Learning to Watermark in the Latent Space of Generative Models _{Sylvestre-Alvise Rebuffi, Tuan Tran, Valeriu Lacatusu et al.}	arXiv · cs.CV 2026		Paper PDF `2601.16140`
Profiling German Text Simplification with Interpretable Model-Fingerprints _{Lars Klöser, Mika Beele, Bodo Kraft}	arXiv · cs.CL 2026		Paper PDF `2601.13050`
KinGuard: Hierarchical Kinship-Aware Fingerprinting to Defend Against Large Language Model Stealing _{Zhenhua Xu, Xiaoning Tian, Wenjun Zeng et al.}	arXiv · cs.CR 2026		Paper PDF `2601.12986`
Decoder Gradient Shields: A Family of Provable and High-Fidelity Methods Against Gradient-Based Box-Free Watermark Removal _{Haonan An, Guang Hua, Wei Du et al.}	arXiv · cs.CV 2026		Paper PDF `2601.11952`
Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs _{Nghia T. Le, Alan Ritter, Kartik Goyal}	arXiv · cs.CR 2026		Paper PDF `2601.11629`
DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack _{Hao Li, Yubing Ren, Yanan Cao et al.}	ACL 2026 Findings 2026		Paper PDF `2512.16182`
ComMark: Covert and Robust Black-Box Model Watermarking with Compressed Samples _{Yunfei Yang, Xiaojun Chen, Zhendong Zhao et al.}	arXiv · cs.CR 2025		Paper PDF `2512.15641`
SPDMark: Selective Parameter Displacement for Robust Video Watermarking _{Samar Fares, Nurbek Tastan, Karthik Nandakumar}	arXiv · cs.CV 2025		Paper PDF `2512.12090`
Smudged Fingerprints: A Systematic Evaluation of the Robustness of AI Image Fingerprints _{Kai Yao, Marc Juarez}	arXiv · cs.CV 2025		Paper PDF `2512.11771`
SEAL: Subspace-Anchored Watermarks for LLM Ownership _{Yanbo Dai, Zongjie Li, Zhenlan Ji et al.}	arXiv · cs.CR 2025		Paper PDF `2511.11356`
DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks _{Yunfei Yang, Xiaojun Chen, Yuexin Xuan et al.}	arXiv · cs.CR 2025		Paper PDF `2511.08985`
Class-feature Watermark: A Resilient Black-box Watermark Against Model Extraction Attacks _{Yaxin Xiao, Qingqing Ye, Zi Liang et al.}	arXiv · cs.CR 2025		Paper PDF `2511.07947`
Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption _{Yepeng Liu, Xuandong Zhao, Dawn Song et al.}	arXiv · cs.CR 2025		Paper PDF `2510.18333`
An Information Asymmetry Game for Trigger-based DNN Model Watermarking _{Chaoyue Huang, Gejian Zhao, Hanzhou Wu et al.}	IEEE International Symposium on Digital Forensics and Security (2026) 2026		Paper PDF `2510.14218`
Every Language Model Has a Forgery-Resistant Signature _{Matthew Finlayson, Xiang Ren, Swabha Swayamdipta}	arXiv · cs.CR 2025		Paper PDF `2510.14086`
The Hidden DNA of LLM-Generated JavaScript: Structural Patterns Enable High-Accuracy Authorship Attribution _{Norbert Tihanyi, Bilel Cherif, Richard A. Dubniczky et al.}	arXiv · cs.CR 2025		Paper PDF `2510.10493`
Are Robust LLM Fingerprints Adversarially Robust? _{Anshul Nasery, Edoardo Contente, Alkin Kaz et al.}	arXiv · cs.CR 2025		Paper PDF `2509.26598`
PRIVMARK: Private Large Language Models Watermarking with MPC _{Thomas Fargues, Ye Dong, Tianwei Zhang et al.}	ICC 2026 2026		Paper PDF `2509.24624`
Analyzing and Evaluating Unbiased Language Model Watermark _{Yihan Wu, Xuehao Cui, Ruibo Chen et al.}	arXiv · cs.CR 2025		Paper PDF `2509.24048`
An Ensemble Framework for Unbiased Language Model Watermarking _{Yihan Wu, Ruibo Chen, Georgios Milis et al.}	arXiv · cs.CR 2025		Paper PDF `2509.24043`
Zero-Shot Visual Deepfake Detection: Can AI Predict and Prevent Fake Content Before It's Created? _{Ayan Sar, Sampurna Roy, Tanupriya Choudhury et al.}	Foundations and Trends in Signal Processing (2025) 2025		Paper PDF `2509.18461`
Causal Fingerprints of AI Generative Models _{Hui Xu, Chi Liu, Congcong Zhu et al.}	arXiv · cs.CV 2025		Paper PDF `2509.15406`
Poison to Detect: Detection of Targeted Overfitting in Federated Learning _{Soumia Zohra El Mestari, Maciej Krzysztof Zuziak, Gabriele Lenzini}	Proceedings on Privacy Enhancing Technologies 2026(4), 480-506 2026		Paper PDF `2509.11974`
CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor _{Zhenhua Xu, Xixiang Zhao, Xubin Yue et al.}	arXiv · cs.CL 2025	$CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor$	Paper PDF `2509.09703`
From Construction to Injection: Edit-Based Fingerprints for Large Language Models _{Yue Li, Xin Yi, Dongsheng Shi et al.}	arXiv · cs.CL 2025		Paper PDF `2509.03122`
Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends _{Zhenhua Xu, Xubin Yue, Zhebo Wang et al.}	arXiv · cs.CR 2025		Paper PDF `2508.11548`
NWaaS: A Non-Intrusive and Privacy-Preserving Watermarking-as-a-Service System with Adaptive Resource Scheduling _{Haonan An, Qianyao Ren, Guang Hua et al.}	arXiv · cs.CR 2025		Paper PDF `2507.18036`
Removing Box-Free Watermarks for Image-to-Image Models via Query-Based Reverse Engineering _{Haonan An, Guang Hua, Hangcheng Cao et al.}	arXiv · cs.CR 2025		Paper PDF `2507.18034`
Hashed Watermark as a Filter: Defeating Forging and Overwriting Attacks in Weight-based Neural Network Watermarking _{Yuan Yao, Jin Song, Jian Jin}	arXiv · cs.CR 2025		Paper PDF `2507.11137`
Disappearing Ink: Obfuscation Breaks N-gram Code Watermarks in Theory and Practice _{Gehao Zhang, Eugene Bagdasarian, Juan Zhai et al.}	arXiv · cs.CR 2025		Paper PDF `2507.05512`
PPFL-RDSN: Privacy-Preserving Federated Learning-based Residual Dense Spatial Networks for Encrypted Lossy Image Reconstruction _{Peilin He, James Joshi}	2025 IEEE 7th International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA), pp. 21-31, 2025 2025		Paper PDF `2507.00230`
Radioactive Watermarks in Diffusion and Autoregressive Image Generative Models _{Michel Meintz, Jan Dubiński, Franziska Boenisch et al.}	arXiv · cs.LG 2025		Paper PDF `2506.23731`
Riemannian-Geometric Fingerprints of Generative Models _{Hae Jin Song, Laurent Itti}	arXiv · cs.LG 2025	—	Paper PDF `2506.22802`
Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features _{Linghui Zhu, Yiming Li, Haiqin Weng et al.}	arXiv · cs.CV 2025		Paper PDF `2507.00724`
Watermarking Autoregressive Image Generation _{Nikola Jovanović, Ismail Labiad, Tomáš Souček et al.}	arXiv · cs.LG 2025		Paper PDF `2506.16349`
Gradient-Based Model Fingerprinting for LLM Similarity Detection and Family Classification _{Zehao Wu, Yanjie Zhao, Haoyu Wang}	arXiv · cs.LG 2025		Paper PDF `2506.01631`
CHIP: Chameleon Hash-based Irreversible Passport for Robust Deep Model Ownership Verification and Active Usage Control _{Chaohui Xu, Qi Cui, Chip-Hong Chang}	arXiv · cs.CR 2025		Paper PDF `2505.24536`
MUSE: Model-Agnostic Tabular Watermarking via Multi-Sample Selection _{Liancheng Fang, Aiwei Liu, Henry Peng Zou et al.}	arXiv · cs.CR 2025		Paper PDF `2505.24267`
RAFP: Identifying LLM Lineages via Rare-Region Fingerprints _{Yun-Yun Tsai, Jia Hao Liang, Chuan Guo et al.}	arXiv · cs.LG 2025		Paper PDF `2505.12682`
An End-to-End Model for Logits-Based Large Language Models Watermarking _{Kahim Wong, Jicheng Zhou, Jiantao Zhou et al.}	arXiv · cs.CR 2025		Paper PDF `2505.02344`
Towards the Resistance of Neural Network Watermarking to Fine-tuning _{Ling Tang, Yuefeng Chen, Hui Xue et al.}	arXiv · cs.LG 2025		Paper PDF `2505.01007`
Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation _{Xin Yi, Yue Li, Shunfan Zheng et al.}	arXiv · cs.CL 2025		Paper PDF `2504.17480`
Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models _{Zijin Yang, Xin Zhang, Kejiang Chen et al.}	arXiv · cs.CV 2025		Paper PDF `2504.15026`
ImF: Implicit Fingerprint for Large Language Models _{Jiaxuan Wu, Wanli Peng, Hang Fu et al.}	arXiv · cs.CL 2025		Paper PDF `2503.21805`
Disrupting Model Merging: A Parameter-Level Defense Without Sacrificing Accuracy _{Wei Junhao, Yu Zhe, Sakuma Jun}	arXiv · cs.LG 2025		Paper PDF `2503.07661`
Decoder Gradient Shield: Provable and High-Fidelity Prevention of Gradient-Based Box-Free Watermark Removal _{Haonan An, Guang Hua, Zhengru Fang et al.}	arXiv · cs.CV 2025		Paper PDF `2502.20924`
Ten Challenging Problems in Federated Foundation Models _{Tao Fan, Hanlin Gu, Xuemei Cao et al.}	arXiv · cs.LG 2025		Paper PDF `2502.12176`
Dynamic watermarks in images generated by diffusion models _{Yunzhuo Chen, Naveed Akhtar, Nur Al Hasan Haldar et al.}	arXiv · cs.CV 2025		Paper PDF `2502.08927`
Image Watermarking of Generative Diffusion Models _{Yunzhuo Chen, Jordan Vice, Naveed Akhtar et al.}	arXiv · eess.IV 2025		Paper PDF `2502.10465`
Scalable Fingerprinting of Large Language Models _{Anshul Nasery, Jonathan Hayase, Creston Brooks et al.}	arXiv · cs.CR 2025		Paper PDF `2502.07760`
FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint _{Shuo Shao, Haozhe Zhu, Yiming Li et al.}	arXiv · cs.CR 2025		Paper PDF `2501.15509`
Validation of GPU Computation in Decentralized, Trustless Networks _{Eric Boniardi, Stanley Bishop, Alison Haire}	arXiv · cs.ET 2025		Paper PDF `2501.05374`
A Game Between the Defender and the Attacker for Trigger-based Black-box Model Watermarking _{Chaoyue Huang, Hanzhou Wu}	IEEE International Symposium on Digital Forensics and Security 2025 2025		Paper PDF `2501.01194`
Sample Correlation for Fingerprinting Deep Face Recognition _{Jiyang Guan, Jian Liang, Yanbo Wang et al.}	arXiv · cs.CV 2024		Paper PDF `2412.20768`
Queries, Representation & Detection: The Next 100 Model Fingerprinting Schemes _{Augustin Godinot, Erwan Le Merrer, Camilla Penzo et al.}	AAAI2025 Main Technical Track 2024		Paper PDF `2412.13021`
Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers _{Vaden Masrani, Mohammad Akbari, David Ming Xuan Yue et al.}	AAAI2025 2024		Paper PDF `2412.12563`
BlockDoor: Blocking Backdoor Based Watermarks in Deep Neural Networks _{Yi Hao Puah, Anh Tu Ngo, Nandish Chattopadhyay et al.}	arXiv · cs.CR 2024		Paper PDF `2412.12194`
Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors _{Satoru Koda, Ikuya Morikawa}	ECML-PKDD2025 2024		Paper PDF `2411.13047`
Watermarking Visual Concepts for Diffusion Models _{Liangqi Lei, Keke Gai, Jing Yu et al.}	arXiv · cs.CR 2024		Paper PDF `2411.11688`
A Novel Access Control and Privacy-Enhancing Approach for Models in Edge Computing _{Peihao Li}	arXiv · cs.CR 2024	—	Paper PDF `2411.03847`
OML: A Primitive for Reconciling Open Access with Owner Control in AI Model Distribution _{Zerui Cheng, Edoardo Contente, Ben Finch et al.}	arXiv · cs.AI 2024		Paper PDF `2411.03887`
DeepCore: Simple Fingerprint Construction for Differentiating Homologous and Piracy Models _{Haifeng Sun, Lan Zhang, Xiang-Yang Li}	ECML-PKDD 2025 2025		Paper PDF `2411.00380`
Harmless Backdoor-based Client-side Watermarking in Federated Learning _{Kaijing Luo, Ka-Ho Chow}	EuroSP 2025 2025		Paper PDF `2410.21179`
An Efficient Watermarking Method for Latent Diffusion Models via Low-Rank Adaptation and Dynamic Loss Weighting _{Dongdong Lin, Yue Li, Benedetta Tondi et al.}	Expert Systems with Applications. 331 (2026) 133172 2026		Paper PDF `2410.20202`
Aligned Datasets Improve Detection of Latent Diffusion-Generated Images _{Anirudh Sundara Rajan, Utkarsh Ojha, Jedidiah Schloesser et al.}	arXiv · cs.CV 2024		Paper PDF `2410.11835`
WAPITI: A Watermark for Finetuned Open-Source LLMs _{Lingjie Chen, Ruizhong Qiu, Siyu Yuan et al.}	arXiv · cs.CR 2024		Paper PDF `2410.06467`
Towards Understanding and Enhancing Security of Proof-of-Training for DNN Model Ownership Verification _{Yijia Chang, Hanrui Jiang, Chao Lin et al.}	arXiv · cs.CR 2024		Paper PDF `2410.04397`
Discovering Spoofing Attempts on Language Model Watermarks _{Thibaud Gloaguen, Nikola Jovanović, Robin Staab et al.}	arXiv · cs.CR 2024	—	Paper PDF `2410.02693`
Trigger-Based Fragile Model Watermarking for Image Transformation Networks _{Preston K. Robinette, Dung T. Nguyen, Samuel Sasaki et al.}	arXiv · cs.CR 2024		Paper PDF `2409.19442`
Protecting Copyright of Medical Pre-trained Language Models: Training-Free Backdoor Model Watermarking _{Cong Kong, Rui Xu, Weixi Chen et al.}	arXiv · cs.LG 2024		Paper PDF `2409.10570`
Fingerprint Vector: Enabling Scalable and Efficient Model Fingerprint Transfer via Vector Addition _{Zhenhua Xu, Qichen Liu, Zhebo Wang et al.}	arXiv · cs.CR 2024		Paper PDF `2409.08846`
Revisiting Black-Box Model Ownership Verification through Information Theory _{Aoting Hu, Yanzhi Chen, Renjie Xie et al.}	arXiv · cs.CR 2024		Paper PDF `2409.06130`
Plug-and-Hide: Provable and Adjustable Diffusion Generative Steganography _{Jiahao Zhu, Zixuan Chen, Jiali Liu et al.}	arXiv · cs.CR 2024		Paper PDF `2409.04878`
WaterMAS: Sharpness-Aware Maximization for Neural Network Watermarking _{Carl De Sousa Trias, Mihai Mitrea, Attilio Fiandrotti et al.}	arXiv · cs.LG 2024		Paper PDF `2409.03902`
Agentic Copyright Watermarking against Adversarial Evidence Forgery with Purification-Agnostic Curriculum Proxy Learning _{Erjin Bao, Ching-Chun Chang, Hanrui Wang et al.}	arXiv · cs.CV 2024		Paper PDF `2409.01541`
Are handcrafted filters helpful for attributing AI-generated images? _{Jialiang Li, Haoyue Wang, Sheng Li et al.}	arXiv · cs.CV 2024	—	Paper PDF `2407.14570`
Watermarking Recommender Systems _{Sixiao Zhang, Cheng Long, Wei Yuan et al.}	arXiv · cs.IR 2024		Paper PDF `2407.21034`
Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond _{Xuhong Wang, Haoyu Jiang, Yi Yu et al.}	arXiv · cs.CR 2024		Paper PDF `2407.11100`
GROOT: Generating Robust Watermark for Diffusion-Model-Based Audio Synthesis _{Weizhi Liu, Yue Li, Dongdong Lin et al.}	arXiv · cs.CR 2024		Paper PDF `2407.10471`

Automation

GitHub Actions runs once per day and can also be started manually from the Actions tab. The workflow uses the free arXiv API and does not call a paid AI service.

Inspired by liutaocode/Video-Generation-arxiv-daily.

Similar repos

hzy312/Awesome-LLM-Watermark

UP-TO-DATE LLM Watermark paper. 🔥🔥🔥

380

tongyu0924/Secure-Diffusion-Watermarking-Survey

A curated collection of papers on watermarking, attribution, and provenance in diffusion models.…

and-mill/Awesome-GenAI-Watermarking

A curated list of watermarking schemes for generative AI models

145

plll4zzx/Awesome-LLM-Watermark

A collection list for Large Language Model (LLM) Watermark

SaFo-Lab/Awesome-T2I-safety-Papers

List of T2I safety papers, updated daily, welcome to discuss using Discussions

Xianjun-Yang/Awesome_papers_on_LLMs_detection

The lastest paper about detection of LLM-generated text and code

292

facebookresearch/content-seal

Content Seal is a state-of-the-art framework for invisible, robust watermarking across all…

243

LKRCharon/LLM-Watermark-Attack-Papers

This repository is a curated collection of research papers, attack strategies, and tools related to…

Contributors

github-actions[bot]

25 commits

ai-kunkun

3 commits

Languages

Python

100.0%

ai-kunkun/Watermarking-arxiv-daily

README

🛡️ Watermarking arXiv Daily

Categories

Today's additions · 2026-09-21

Image and Video Watermarking

Generative AI Watermarking

Text and LLM Watermarking

Model Ownership and Fingerprinting

Automation

Contributors

Similar repos

Languages

ai-kunkun/Watermarking-arxiv-daily

README

🛡️ Watermarking arXiv Daily

Categories

Today's additions · 2026-09-21

Image and Video Watermarking

Generative AI Watermarking

Text and LLM Watermarking

Model Ownership and Fingerprinting

Automation

Similar repos

Contributors

Languages