Salvato in:
Dettagli Bibliografici
Autori principali: Chang, Hongyan, Hassani, Hamed, Shokri, Reza
Natura: Preprint
Pubblicazione: 2024
Soggetti:
Accesso online:https://arxiv.org/abs/2407.14206
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866912220233859072
author Chang, Hongyan
Hassani, Hamed
Shokri, Reza
author_facet Chang, Hongyan
Hassani, Hamed
Shokri, Reza
contents Watermarking is a key technique for detecting AI-generated text. In this work, we study its vulnerabilities and introduce the Smoothing Attack, a novel watermark removal method. By leveraging the relationship between the model's confidence and watermark detectability, our attack selectively smoothes the watermarked content, erasing watermark traces while preserving text quality. We validate our attack on open-source models ranging from $1.3$B to $30$B parameters on $10$ different watermarks, demonstrating its effectiveness. Our findings expose critical weaknesses in existing watermarking schemes and highlight the need for stronger defenses.
format Preprint
id arxiv_https___arxiv_org_abs_2407_14206
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Watermark Smoothing Attacks against Language Models
Chang, Hongyan
Hassani, Hamed
Shokri, Reza
Machine Learning
Watermarking is a key technique for detecting AI-generated text. In this work, we study its vulnerabilities and introduce the Smoothing Attack, a novel watermark removal method. By leveraging the relationship between the model's confidence and watermark detectability, our attack selectively smoothes the watermarked content, erasing watermark traces while preserving text quality. We validate our attack on open-source models ranging from $1.3$B to $30$B parameters on $10$ different watermarks, demonstrating its effectiveness. Our findings expose critical weaknesses in existing watermarking schemes and highlight the need for stronger defenses.
title Watermark Smoothing Attacks against Language Models
topic Machine Learning
url https://arxiv.org/abs/2407.14206