arXiv:2504.05871cs.AI2025-04被引 7

通过行为概率偏移实现智能体水印,保障数字生态可追溯性。

Agent Guide: A Simple Agent Behavioral Watermarking Framework

  • 以行为层概率偏移替代令牌级修改,保持执行自然性。
  • 在社交平台测试中实现低误报率的水印可靠检测。
  • 适合用于识别恶意智能体与保护专有代理系统。

智能代理在社交媒体等数字生态系统中的广泛应用引发了可追溯性和责任归属问题,尤其在网络安全和数字内容保护领域。传统基于令牌级操作的大语言模型水印技术因行为难以分词及行为到动作转换中的信息丢失而难以适用。为此,我们提出 Agent Guide,一种新型行为水印框架,通过在高层决策(行为)层面引入概率偏置来嵌入水印,同时保持具体执行(动作)的自然性。该方法将代理行为解耦为行为(如收藏)与动作(如带特定标签收藏),并对行为概率分布施加水印引导偏置。采用基于 z-统计量的统计分析进行水印检测,确保多轮检测下的可靠性。在多种代理配置的社交媒体场景实验中,Agent Guide 实现了有效水印检测且误报率低。该框架为代理水印提供了实用且鲁棒的解决方案,适用于识别恶意代理和保护专有代理系统。

原文摘要 · Abstract (English)

The increasing deployment of intelligent agents in digital ecosystems, such as social media platforms, has raised significant concerns about traceability and accountability, particularly in cybersecurity and digital content protection. Traditional large language model (LLM) watermarking techniques, which rely on token-level manipulations, are ill-suited for agents due to the challenges of behavior tokenization and information loss during behavior-to-action translation. To address these issues, we propose Agent Guide, a novel behavioral watermarking framework that embeds watermarks by guiding the agent's high-level decisions (behavior) through probability biases, while preserving the naturalness of specific executions (action). Our approach decouples agent behavior into two levels, behavior (e.g., choosing to bookmark) and action (e.g., bookmarking with specific tags), and applies watermark-guided biases to the behavior probability distribution. We employ a z-statistic-based statistical analysis to detect the watermark, ensuring reliable extraction over multiple rounds. Experiments in a social media scenario with diverse agent profiles demonstrate that Agent Guide achieves effective watermark detection with a low false positive rate. Our framework provides a practical and robust solution for agent watermarking, with applications in identifying malicious agents and protecting proprietary agent systems.

智能体水印行为建模数字安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。