用语义结构嵌入水印,防改写更可靠。
SWAN: Semantic Watermarking with Abstract Meaning Representation

- 在句子语义结构层直接嵌入水印签名
- 对改写文本的检测准确率提升13.9个百分点
- 无需训练,仅靠提示词即可实现水印注入
我们提出SWAN(基于抽象意义表示的语义水印),一种将水印签名嵌入句子语义结构的新框架。与传统通过调整生成时词元选择偏好编码水印的方法不同,SWAN在抽象意义表示(AMR)层面直接嵌入签名。由于签名位于语义结构层级,任何保持语义不变的改写都会自动保留水印。SWAN无需训练:通过提示大模型生成符合指定AMR模板且语境连贯的句子来注入水印;检测则使用现成的AMR解析器结合简单的一比例z检验。在RealNews基准上的实证评估显示,SWAN在未修改的水印文本上达到当前最优检测性能,同时显著提升对改写的鲁棒性,检测AUC相比先前方法最高提升13.9个百分点。结果表明,将水印锚定在AMR语义结构中,是一种简单、有效、基于提示词的鲁棒文本溯源验证方法,为语义级水印研究开辟新路径。
原文摘要 · Abstract (English)
We introduce SWAN (Semantic Watermarking with Abstract Meaning Representation), a novel framework that embeds watermark signatures into the semantic structure of a sentence using Abstract Meaning Representation (AMR). In contrast to existing watermarking methods, which typically encode signatures by adjusting token selection preferences during text generation, SWAN embeds the signature directly in the sentence's semantic representation. As the signature is encoded at the semantic structure level, any paraphrase that preserves meaning automatically preserves the signature. SWAN is training-free: watermark injection is achieved by prompting an LLM to generate sentences guided by a selected AMR template while maintaining contextual coherence, and detection uses an off-the-shelf AMR parser followed by a simple one-proportion z-test. Empirical evaluation on the RealNews benchmark shows SWAN matches state-of-the-art detection performance on unaltered watermarked text, while significantly improving robustness against paraphrasing, increasing detection AUC by up to 13.9 percentage points compared to prior methods. These results demonstrate that SWAN's approach of anchoring watermarks in AMR semantic structures provides a simple, effective, and prompt-based method for robust text provenance verification under paraphrasing, opening new avenues for semantic-level watermarking research.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。