arXiv:2502.12710cs.CRcs.AI2025-02中稿 · and published in t…被引 4

用特殊空格隐藏信息,让AI生成文本难被识别。

Innamark: A Whitespace Replacement Information-Hiding Method

  • 用视觉相似的Unicode空格替换原文空格,不改内容也不增字符。
  • 在百万级维基文章测试中,水印难以察觉且抗干扰能力强。
  • 适合需要隐蔽标记的场景,如版权保护或防伪检测。

大型语言模型(LLMs)近年来广受欢迎,人类撰写的文本与模型生成的文本已难以区分。信息隐藏技术如数字水印或隐写术可通过嵌入不易察觉的信息来帮助区分。然而,现有方法如基于语言或格式的方案会改变语义,或无法应用于纯无格式文本。本文提出一种名为Innamark的新方法,可在足够长的原始文本中隐藏任意字节编码序列。该方法以Kotlin实现,提供命令行工具和网页界面。通过将常规空格替换为视觉相似的Unicode空格,方案保持原文语义不变且字符数不变。我们设计了包含可配置压缩、加密、哈希和纠错功能的密文结构。在100万篇维基文章的数据集上对十种算法进行实验对比,结果表明Innamark在多种应用中具有鲁棒性,且水印对人眼不可见。论文还讨论了嵌入容量与鲁棒性的局限,并提出了未来改进方向。

原文摘要 · Abstract (English)

Large language models (LLMs) have gained significant popularity in recent years. Differentiating between a text written by a human and one generated by an LLM has become almost impossible. Information-hiding techniques such as digital watermarking or steganography can help by embedding information inside text in a form that is unlikely to be noticed. However, existing techniques, such as linguistic-based or format-based methods, change the semantics or cannot be applied to pure, unformatted text. In this paper, we introduce a novel method for information hiding called Innamark, which can conceal any byte-encoded sequence within a sufficiently long cover text. This method is implemented as a multi-platform library using the Kotlin programming language, which is accompanied by a command-line tool and a web interface. By substituting conventional whitespace characters with visually similar Unicode whitespace characters, our proposed scheme preserves the semantics of the cover text without changing the number of characters. Furthermore, we propose a specified structure for secret messages that enables configurable compression, encryption, hashing, and error correction. An experimental benchmark comparison on a dataset of 1 000 000 Wikipedia articles compares ten algorithms. The results demonstrate the robustness of our proposed Innamark method in various applications and the imperceptibility of its watermarks to humans. We discuss the limits to the embedding capacity and robustness of the algorithm and how these could be addressed in future work.

信息隐藏水印AI检测

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。