arXiv:2605.16336cs.CRcs.AI2026-05中稿 · AAAI

给作业题加隐形指令,能自动识别学生抄大模型答案

On Seeding Watermarks to Detect Verbatim LLM Copy-Paste Responses

论文配图:On Seeding Watermarks to Detect Verbatim LLM Copy-Paste Responses
图 1 · 摘自论文原文
  • 在题目中嵌入不可见指令,模型复读时会留下痕迹
  • 支持主流平台复制粘贴,8类大模型均能触发水印
  • 工具开源透明,内置诚信提醒,适合教学使用

大语言模型让从中学到研究生阶段的学生都能快速生成作文、代码和答题内容。教育者关注的不是模型使用本身,而是学生将题目直接粘贴进聊天机器人并原样提交回答的行为。现有文本检测工具不可靠,且可能误伤非英语母语者;输出端水印又需模型方配合。本文提出一种由教师控制的输入端水印方案:在可见题目中嵌入不可见指令。若模型原样读取题目,会悄悄在回复中留下可识别的签名,暴露抄袭路径。我们设计了SteganoPrompt——一个单页无依赖的网页工具,将任意可打印ASCII字符编码至废弃的Unicode标签块(U+E0000–U+E007F)。编码后内容视觉不变,可跨Word、Google Docs、PDF、Markdown、Slack、邮件及主流教学系统传播,且被多数前沿模型正常分词。我们在八类大模型和典型教育渠道上验证了其有效性。为保障透明性,工具内嵌持续的学术诚信提醒,提供明确使用建议。工具已开源,许可为MIT,地址:https://ezharjan.github.io/SteganoPrompt/

原文摘要 · Abstract (English)

Large language models (LLMs) have made fluent essay writing, code drafting, and quiz answering instantly available to students at every level, from secondary school through graduate study. Many educators do not object to LLM use \emph{per~se}; what they need to detect is the case in which a student pastes the assignment prompt into a chatbot and submits the model's reply verbatim, without engaging with the work. Existing post-hoc AI-text detectors remain unreliable and have been shown to penalise non-native English writers, while output-side watermarks require cooperation from the model provider. We propose an alternative that the educator controls directly: an input-side watermark in which an invisible instruction is embedded inside the visible assignment prompt itself. An LLM that ingests the prompt verbatim quietly reads the hidden instruction and writes a tell-tale signature into its reply, exposing the copy-and-paste pathway specifically. We describe SteganoPrompt, a single-page, zero-dependency web tool that encodes an arbitrary printable-ASCII payload into the deprecated Unicode Tags block (\texttt{U+E0000}--\texttt{U+E007F}). The encoded string is visually identical to the original, survives common copy-paste channels (Word, Google Docs, PDF, Markdown, Slack, e-mail, the major learning-management systems), and is tokenized as ordinary text by most frontier models. We evaluate compliance across eight LLM families and a representative set of educational content channels. To keep deployment transparent, disclosure is built into the tool itself: every encoded brief also carries a brief, always-on academic-integrity reminder for the student, and we set out concrete guidance recommending for its disclosed, ethical use in the classroom. The tool is released under the MIT licence at https://ezharjan.github.io/SteganoPrompt/.

AI检测水印技术教育伦理

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。