Search papers, labs, and topics across Lattice.
DuCodeMark, a novel dual-purpose watermarking method, protects code datasets by embedding ownership signals detectable in both source-code and decompilation tasks. It leverages language-specific style transformations on ASTs to create stealthy trigger-target pairs and injects repressible poisoned features into return-typed samples, which remain inactive during normal training but degrade performance upon watermark removal. Experiments across 72 settings show DuCodeMark achieves strong verifiability, high stealthiness, robustness against attacks, and a significant performance drop upon watermark removal.
Code dataset watermarking can be stealthy, robust, and effective across both source-code and decompilation tasks by injecting repressible poisoned features that only activate upon watermark removal.
The proliferation of large language models for code (CodeLMs) and open-source contributions has heightened concerns over unauthorized use of source code datasets. While watermarking provides a viable protection mechanism by embedding ownership signals, existing methods rely on detectable trigger-target patterns and are limited to source-code tasks, overlooking other scenarios such as decompilation tasks. In this paper, we propose DuCodeMark, a stealthy and robust dual-purpose watermarking method for code datasets that generalizes across both source-code tasks and decompilation tasks. DuCodeMark parses each code sample into an abstract syntax tree (AST), applies language-specific style transformations to construct stealthy trigger-target pairs, and injects repressible poisoned features into a subset of return-typed samples to enhance robustness against watermark removal or evasion. These features remain inactive during normal training but are activated upon watermark removal, degrading model performance. For verification, DuCodeMark employs a black-box method based on the independent-samples $t$-test. We conduct a comprehensive evaluation of DuCodeMark across 72 settings spanning two code tasks, two programming languages, three CodeLMs, and six decoding temperatures. The results demonstrate that it consistently achieves strong verifiability ($p < 0.05$), high stealthiness (suspicious rate $\leq$ 0.36), robustness against both watermark and poisoning attacks (recall $\leq$ 0.57), and a substantial drop in model performance upon watermark removal (Pass@1 drops by 28.6%), underscoring its practicality and resilience.
