arXiv:2608.06416cs.CRcs.AI2026-08

用外部知识增强文本水印,让生成内容更难被篡改

WorldMark: A Plug-and-Play World Knowledge Interface for Cross-Host Language Model Watermarking

论文配图:WorldMark: A Plug-and-Play World Knowledge Interface for Cross-Host Language Model Watermarking
图 1 · 摘自论文原文
  • 通过记忆图检索世界知识,生成词级显著性评分
  • 在C4数据集上提升三种水印方案的检测率,困惑度略降
  • 无需重训练或额外检测模型,适合各类水印系统接入

文本水印通过在解码过程中嵌入可统计检测的信号来追踪大模型生成内容的来源。现有方法均依赖局部词元统计信息,但在开放生成场景中,局部统计可能无法提供足够指导。本文提出WorldMark,一种即插即用接口,利用世界知识记忆(WKM)构建语义与情节知识的记忆图,将检索到的知识转化为词级知识显著性分数,并通过非对称知识调制(AKM)动态调整宿主水印强度。WorldMark无需重训练模型,也不引入额外检测端模型或参数。在主数据集C4上,完整接口在三种自适应强度宿主变体下均提升了干净及攻击后检测效果,同时略微降低困惑度。对C4和OpenGen的初步实验表明,直接记忆条件化可跨多种水印家族迁移,但缺乏显著性感知调制时可能不稳定。整体方案在主要协议下引入可忽略的计算开销。

原文摘要 · Abstract (English)

Watermarking traces the provenance of text produced by large language models by embedding statistically detectable signals during decoding. Existing schemes fall into logits-based, sampling-based, entropy-aware, and adaptive-strength families, yet all of them place watermark signals according to local token statistics. In the open-ended text-generation settings evaluated in this work, local statistics may provide insufficient guidance for placing robust watermark signals. We introduce WorldMark, a plug-and-play interface that uses World Knowledge Memory (WKM) to organize semantic and episodic knowledge in a memory graph, converts the retrieved knowledge into a token-level knowledge saliency score, and adjusts the strength of a host watermark through Asymmetric Knowledge Modulation (AKM). WorldMark requires no backbone retraining and introduces no additional detector-side model or parameter. On the primary C4 evaluation, the complete WorldMark interface improves clean and attacked detection across three adaptive-strength host variants while slightly reducing perplexity. Additional pilot experiments on C4 and OpenGen show that direct memory conditioning transfers across multiple watermark families but can be unstable without saliency-aware modulation. WorldMark requires no additional detector-side model or parameter and introduces negligible overhead under the primary protocol.

文本水印知识增强大模型安全即插即用

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。