Search papers, labs, and topics across Lattice.
This paper introduces SAMark, a novel text watermarking framework designed to be robust against paragraph-level paraphrasing attacks by creating a step-independent "green region" in semantic space, thus removing dependency on sentence order. To improve watermark detectability, they use a multi-channel hyperbolic scoring mechanism to amplify watermark signals and a diversity-aware filtering strategy to reduce semantic redundancy. Experiments demonstrate that SAMark achieves up to 90.2% TP@FP1% under paragraph-level paraphrasing, significantly outperforming existing methods while maintaining high generation quality.
Text watermarks can now survive even aggressive paragraph-level paraphrasing, thanks to a new self-anchoring technique that breaks the robustness-quality tradeoff.
Semantic-level watermarking (SWM) improves robustness against text modifications by treating sentences as the basic unit. However, robustness to paragraph-level paraphrasing remains difficult because such attacks globally disrupt watermark signals by changing sentence order. In this work, we propose SAMark, a self-anchored watermarking framework that removes the dependency on sentence order by establishing a step-independent green region in semantic space. To improve detectability, we introduce a multi-channel hyperbolic scoring mechanism that amplifies watermark signals while suppressing noise from weakly aligned candidates. We further propose a diversity-aware filtering strategy that combines hard filtering with soft regularization, extending beyond simple n-gram repetition filters to address semantic redundancy. Experimental results show that SAMark achieves up to 90.2% TP@FP1% under typical paragraph-level paraphrasing attacks, outperforming the strongest prior baseline by more than 30% on average, while maintaining generation quality competitive with unwatermarked text and breaking the robustness-quality trade-off that limits prior methods.
NUS