Optimal Detection for Language Watermarks with Pseudorandom Collision

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Cai, T. Tony, Li, Xiang, Long, Qi, Su, Weijie J., Wen, Garrett G.
Format: Preprint
Veröffentlicht: 2025
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866918297074663424
author Cai, T. Tony
Li, Xiang
Long, Qi
Su, Weijie J.
Wen, Garrett G.
author_facet Cai, T. Tony
Li, Xiang
Long, Qi
Su, Weijie J.
Wen, Garrett G.
contents Text watermarking plays a crucial role in ensuring the traceability and accountability of large language model (LLM) outputs and mitigating misuse. While promising, most existing methods assume perfect pseudorandomness. In practice, repetition in generated text induces collisions that create structured dependence, compromising Type I error control and invalidating standard analyses. We introduce a statistical framework that captures this structure through a hierarchical two-layer partition. At its core is the concept of minimal units -- the smallest groups treatable as independent across units while permitting dependence within. Using minimal units, we define a non-asymptotic efficiency measure and cast watermark detection as a minimax hypothesis testing problem. Applied to Gumbel-max and inverse-transform watermarks, our framework produces closed-form optimal rules. It explains why discarding repeated statistics often improves performance and shows that within-unit dependence must be addressed unless degenerate. Both theory and experiments confirm improved detection power with rigorous Type I error control. These results provide the first principled foundation for watermark detection under imperfect pseudorandomness, offering both theoretical insight and practical guidance for reliable tracing of model outputs.
format Preprint
id arxiv_https___arxiv_org_abs_2510_22007
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Optimal Detection for Language Watermarks with Pseudorandom Collision
Cai, T. Tony
Li, Xiang
Long, Qi
Su, Weijie J.
Wen, Garrett G.
Statistics Theory
Computation and Language
Cryptography and Security
Machine Learning
Text watermarking plays a crucial role in ensuring the traceability and accountability of large language model (LLM) outputs and mitigating misuse. While promising, most existing methods assume perfect pseudorandomness. In practice, repetition in generated text induces collisions that create structured dependence, compromising Type I error control and invalidating standard analyses. We introduce a statistical framework that captures this structure through a hierarchical two-layer partition. At its core is the concept of minimal units -- the smallest groups treatable as independent across units while permitting dependence within. Using minimal units, we define a non-asymptotic efficiency measure and cast watermark detection as a minimax hypothesis testing problem. Applied to Gumbel-max and inverse-transform watermarks, our framework produces closed-form optimal rules. It explains why discarding repeated statistics often improves performance and shows that within-unit dependence must be addressed unless degenerate. Both theory and experiments confirm improved detection power with rigorous Type I error control. These results provide the first principled foundation for watermark detection under imperfect pseudorandomness, offering both theoretical insight and practical guidance for reliable tracing of model outputs.
title Optimal Detection for Language Watermarks with Pseudorandom Collision
topic Statistics Theory
Computation and Language
Cryptography and Security
Machine Learning
url https://arxiv.org/abs/2510.22007