Stylometric Watermarks for Large Language Models

Georg Niess, Roman Kern
5/14/2024
cs.CL

No confident code implementation found for this paper. 2 possible matches can be shown below.

Abstract

The rapid advancement of large language models (LLMs) has made it increasingly difficult to distinguish between text written by humans and machines. Addressing this, we propose a novel method for generating watermarks that strategically alters token probabilities during generation. Unlike previous works, this method uniquely employs linguistic features such as stylometry. Concretely, we introduce acrostica and sensorimotor norms to LLMs. Further, these features are parameterized by a key, which is updated every sentence. To compute this key, we use semantic zero shot classification, which enhances resilience. In our evaluation, we find that for three or more sentences, our method achieves a false positive and false negative rate of 0.02. For the case of a cyclic translation attack, we observe similar results for seven or more sentences. This research is of particular of interest for proprietary LLMs to facilitate accountability and prevent societal harm.

View on arXivView PDF

Code Implementations

No confident code match yet

We couldn't find an author-owned or strongly-evidenced community implementation for this paper. 2 weaker matches are hidden by default — verify before relying on them.

No code implementations found yet.

Know of an implementation? Let us know in the comments below!

Similar Papers

Cite this paper

@article{niess2024stylometric,
  title  = {Stylometric Watermarks for Large Language Models},
  author = {Georg Niess and Roman Kern},
  year   = {2024},
  eprint = {2405.08400},
  archivePrefix = {arXiv},
  url    = {http://arxiv.org/abs/2405.08400v1}
}

Add a badge to your README

Shows whether official code is linked for this paper.

Code of Paper badge
[![Code of Paper](https://codeofpaper.com/badge/2405.08400.svg)](https://codeofpaper.com/paper/2405.08400)

Discussion