Search papers, labs, and topics across Lattice.
This paper introduces L-VQVAE, a locally tokenized generative model designed to enhance the robustness of watermarking in multivariate time series against post-editing attacks. The authors identify that existing watermarking methods fail due to bidirectional drift in the null distribution caused by globally coupled re-encoding, leading to unreliable detection. Their approach, which utilizes a short contiguous window for token generation and combines logit-bias injection with robust re-encoding, demonstrates improved detection power and reduced false positives across multiple benchmarks in finance, energy, and neuroimaging.
Post-editing attacks can destabilize watermark detection, but L-VQVAE's localized approach ensures reliable provenance in generative models.
Watermarking is a central tool for provenance in generative models, yet its application to multivariate time series remains hindered by reliability failures under post-editing attacks. We show that existing detectors, which rely on globally coupled re-encoding, suffer from bidirectional drift of the null distribution: post-editing attacks can shift the z-score of non-watermarked samples in either direction, invalidating clean-calibrated thresholds. We argue that this instability is a property of the re-encoding, and that reliable detection requires each recovered unit to depend only on a bounded temporal neighborhood. Guided by this principle, we propose L-VQVAE, a generative model in which each discrete token is produced from a short contiguous window, and LVQMark, a watermarking method over this token space that combines logit-bias injection with robust re-encoding for attack-time detection. Experiments on four benchmarks spanning finance, energy, and neuroimaging show that our approach preserves generation quality while stabilizing both detection power and false-positive behavior under post-editing attacks.
