arXiv:2510.13829cs.CLcs.AI2025-10ACL被引 2

用语法可预测性实现可公开验证的中文生成水印。

A Linguistics-Aware LLM Watermarking via Syntactic Predictability

  • 根据词性序列建模语言不确定性,动态调节水印强度。
  • 在英文、中文、韩文上检测鲁棒性优于现有方法。
  • 无需模型日志即可验证,适合可信AI生态建设。

随着大语言模型快速发展,可靠的治理工具日益关键。公开可验证的水印对构建可信AI生态尤为必要。核心挑战在于保持文本质量与检测鲁棒性之间的平衡。现有方法依赖模型输出分布信号(如分词熵),但需访问模型日志,难以实现公开验证。本文提出STELA框架,将水印强度与语言固有的语法自由度对齐。该框架基于词性n元组建模语言不确定性,于语法约束强的上下文中减弱水印以保质量,在语言灵活性高的场景中增强水印以提升可检测性。检测器无需模型日志,支持公开验证。在涵盖分析型英语、孤立型中文和屈折型韩语的多语言实验中,STELA显著优于现有方法。代码已开源:https://github.com/Shinwoo-Park/stela_watermark。

原文摘要 · Abstract (English)

As large language models (LLMs) continue to advance rapidly, reliable governance tools have become critical. Publicly verifiable watermarking is particularly essential for fostering a trustworthy AI ecosystem. A central challenge persists: balancing text quality against detection robustness. Recent studies have sought to navigate this trade-off by leveraging signals from model output distributions (e.g., token-level entropy); however, their reliance on these model-specific signals presents a significant barrier to public verification, as the detection process requires access to the logits of the underlying model. We introduce STELA, a novel framework that aligns watermark strength with the linguistic degrees of freedom inherent in language. STELA dynamically modulates the signal using part-of-speech (POS) n-gram-modeled linguistic indeterminacy, weakening it in grammatically constrained contexts to preserve quality and strengthening it in contexts with greater linguistic flexibility to enhance detectability. Our detector operates without access to any model logits, thus facilitating publicly verifiable detection. Through extensive experiments on typologically diverse languages-analytic English, isolating Chinese, and agglutinative Korean-we show that STELA surpasses prior methods in detection robustness. Our code is available at https://github.com/Shinwoo-Park/stela_watermark.

水印自然语言可验证大模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。