{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T19:14:32Z","timestamp":1792782872917,"version":"4.5.0"},"reference-count":315,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2026,1,5]],"date-time":"2026-01-05T00:00:00Z","timestamp":1767571200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2026,1,20]],"date-time":"2026-01-20T00:00:00Z","timestamp":1768867200000},"content-version":"vor","delay-in-days":15,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62272196"],"award-info":[{"award-number":["62272196"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Guangzhou Basic and Applied Basic Research Foundation","award":["2024A04J9971"],"award-info":[{"award-number":["2024A04J9971"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Artif Intell Rev"],"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>With the rapid advancement and extensive application of artificial intelligence technology, large language models (LLMs) are extensively used to enhance production, creativity, learning, and work efficiency across various domains. However, the abuse of LLMs also poses potential harm to human society, such as intellectual property rights issues, academic misconduct, false content, and hallucinations. Relevant research has proposed the use of LLM watermarking to achieve IP protection for LLMs and traceability of multimedia data output by LLMs. To our knowledge, this is the first thorough review that investigates and analyzes LLM watermarking technology in detail. This review begins by recounting the history of traditional watermarking technology, then analyzes the current state of LLM watermarking research, and thoroughly examines the inheritance and relevance of these techniques. By analyzing their inheritance and relevance, this review can provide research with ideas for applying traditional digital watermarking techniques to LLM watermarking, to promote the cross-integration and innovation of watermarking technology. In addition, this review examines the pros and cons of LLM watermarking. Considering the current multimodal development trend of LLMs, it provides a detailed analysis of emerging multimodal LLM watermarking, such as visual and audio data, to offer more reference ideas for relevant research. This review delves into the challenges and future prospects of current watermarking technologies, offering valuable insights for future LLM watermarking research and applications.<\/jats:p>","DOI":"10.1007\/s10462-025-11474-6","type":"journal-article","created":{"date-parts":[[2026,1,5]],"date-time":"2026-01-05T16:38:11Z","timestamp":1767631091000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["Watermarking techniques for large language models: a survey"],"prefix":"10.1007","volume":"59","author":[{"given":"Yuqing","family":"Liang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiancheng","family":"Xiao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wensheng","family":"Gan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Philip S.","family":"Yu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,1,5]]},"reference":[{"key":"11474_CR1","unstructured":"1-More watermarker (2017) https:\/\/1-more-watermarker.en.softonic.com\/"},{"key":"11474_CR2","unstructured":"Aaronson S (2023) Watermarking of large language models, In: Large language models and transformers workshop at Simons Institute for the Theory of Computing"},{"key":"11474_CR3","doi-asserted-by":"crossref","unstructured":"Abdelbar AM, Abdelshahid S, Wunsch, DC (2005) Fuzzy PSO: a generalization of particle swarm optimization. In: Proceedings. 2005 IEEE international joint conference on neural networks, 2005, pp 1086\u20131091. IEEE","DOI":"10.1109\/IJCNN.2005.1556004"},{"key":"11474_CR4","doi-asserted-by":"crossref","unstructured":"Abdelnabi S, Fritz M (2021). Adversarial watermarking transformer: towards tracing text provenance with data hiding. In: Symposium on security and privacy, pp 121\u2013140. IEEE","DOI":"10.1109\/SP40001.2021.00083"},{"key":"11474_CR5","doi-asserted-by":"crossref","first-page":"125","DOI":"10.1016\/j.jksuci.2016.12.004","volume":"31","author":"J Abraham","year":"2019","unstructured":"Abraham J, Paul V (2019) An imperceptible spatial domain color image watermarking scheme. J King Saud Univ-Comput Inf Sci 31:125\u2013133","journal-title":"J King Saud Univ-Comput Inf Sci"},{"key":"11474_CR6","unstructured":"Achiam J, Adler S, Agarwal S, Ahmad L, Akkaya I, Aleman FL, Almeida D, Altenschmidt J, Altman S, Anadkat S, et\u00a0al (2023). GPT-4 technical report. arXiv preprint arXiv:2303.08774"},{"key":"11474_CR7","doi-asserted-by":"crossref","unstructured":"Adelani DI, Mai H, Fang F, Nguyen HH, Yamagishi J, Echizen I (2020). Generating sentiment-preserving fake online reviews using neural language models and their human-and machine-based detection, In: The 34th international conference on advanced information networking and applications, pp 1341\u20131354. Springer","DOI":"10.1007\/978-3-030-44041-1_114"},{"key":"11474_CR8","doi-asserted-by":"crossref","unstructured":"Agrwal SL, Yadav A, Kumar U, Gupta SK (2016) Improved invisible watermarking technique using IWT-DCT. In: 5th international conference on reliability. IEEE, Infocom technologies and optimization (trends and future directions), pp 283\u2013285","DOI":"10.1109\/ICRITO.2016.7784966"},{"key":"11474_CR9","doi-asserted-by":"crossref","first-page":"1701","DOI":"10.1007\/s10489-020-01903-0","volume":"51","author":"SBB Ahmadi","year":"2021","unstructured":"Ahmadi SBB, Zhang G, Rabbani M, Boukela L, Jelodar H (2021) An intelligent and blind dual color image watermarking for authentication and copyright protection. Appl Intell 51:1701\u20131732","journal-title":"Appl Intell"},{"key":"11474_CR10","doi-asserted-by":"crossref","unstructured":"Ahmed N, Rao KR, Ahmed N, Rao KR (1975). Walsh-hadamard transform. Orthogonal Transf Digital Signal Process , 99\u2013152","DOI":"10.1007\/978-3-642-45450-9_6"},{"key":"11474_CR11","doi-asserted-by":"crossref","first-page":"23457","DOI":"10.1007\/s11042-020-10251-7","volume":"80","author":"\u015eY Altay","year":"2021","unstructured":"Altay \u015eY, Uluta\u015f G (2021) Self-adaptive step firefly algorithm based robust watermarking method in DWT-SVD domain. Multimed Tools Appl 80:23457\u201323484","journal-title":"Multimed Tools Appl"},{"key":"11474_CR12","unstructured":"Anil R, Dai AM, Firat O, Johnson M, Lepikhin D, Passos A, Shakeri S, Taropa E, Bailey P, Chen Z et\u00a0al (2023) PaLM 2 technical report. arXiv preprint arXiv:2305.10403"},{"key":"11474_CR13","first-page":"194","volume":"3","author":"O Aramoon","year":"2021","unstructured":"Aramoon O, Chen PY, Qu G (2021) Don\u2019t forget to sign the gradients! Mach Learn Syst 3:194\u2013207","journal-title":"Mach Learn Syst"},{"key":"11474_CR14","volume":"68","author":"JA Artiles","year":"2022","unstructured":"Artiles JA, Chaves DP, Pimentel C (2022) Robust image watermarking algorithm using chaotic sequences. J Inf Secur Appl 68:103219","journal-title":"J Inf Secur Appl"},{"key":"11474_CR15","unstructured":"Bansal A, Chiang PY, Curry MJ, Jain R, Wigington C, Manjunatha V, Dickerson JP, Goldstein T (2022). Certified neural network watermarks with randomized smoothing. In: International conference on machine learning, PMLR, pp 1450\u20131465"},{"key":"11474_CR16","doi-asserted-by":"crossref","first-page":"23","DOI":"10.1109\/TMM.2004.840594","volume":"7","author":"M Barni","year":"2005","unstructured":"Barni M, Bartolini F, Checcacci N (2005) Watermarking of MPEG-4 video objects. IEEE Trans Multimed 7:23\u201332","journal-title":"IEEE Trans Multimed"},{"key":"11474_CR17","doi-asserted-by":"crossref","unstructured":"Barni M, Bartolini F, Cappellini V, Piva A (1997). Robust watermarking of still images for copyright protection. In: 13th international conference on digital signal processing, IEEE, pp 499\u2013502","DOI":"10.1109\/ICDSP.1997.628384"},{"key":"11474_CR18","doi-asserted-by":"crossref","unstructured":"Beltagy I, Lo K, Cohan A (2019). SciBERT: a pretrained language model for scientific text. In: EMNLP\/IJCNLP, pp 3615\u20133620","DOI":"10.18653\/v1\/D19-1371"},{"key":"11474_CR19","doi-asserted-by":"crossref","unstructured":"Beuve N, Hamidouche W, D\u00e9forges O (2023). Waterlo: Protect images from deepfakes using localized semi-fragile watermark, In: The IEEE\/CVF International conference on computer vision, pp 393\u2013402","DOI":"10.1109\/ICCVW60793.2023.00046"},{"key":"11474_CR20","doi-asserted-by":"crossref","first-page":"183","DOI":"10.1007\/s11042-019-07941-2","volume":"79","author":"P Bhinder","year":"2020","unstructured":"Bhinder P, Jindal N, Singh K (2020) An improved robust image-adaptive watermarking with two watermarks using statistical decoder. Multimed Tools Appl 79:183\u2013217","journal-title":"Multimed Tools Appl"},{"key":"11474_CR21","doi-asserted-by":"crossref","first-page":"1267","DOI":"10.1109\/5.771077","volume":"87","author":"JA Bloom","year":"1999","unstructured":"Bloom JA, Cox IJ, Kalker T, Linnartz JP, Miller ML, Traw CBS (1999) Copy protection for dvd video. Proc IEEE 87:1267\u20131276","journal-title":"Proc IEEE"},{"key":"11474_CR22","doi-asserted-by":"crossref","DOI":"10.3389\/fdata.2021.729663","volume":"4","author":"F Boenisch","year":"2021","unstructured":"Boenisch F (2021) A systematic review on model watermarking for neural networks. Front Big Data 4:729663","journal-title":"Front Big Data"},{"key":"11474_CR23","unstructured":"Boroujeny MK, Jiang Y, Zeng K, Mark B (2024). Multi-bit distortion-free watermarking for large language models. arXiv preprint arXiv:2402.16578"},{"key":"11474_CR24","unstructured":"Borra S, Lakshmi H, Dey N, Ashour AS, Shi F (2017). Digital image watermarking tools: state-of-the-art. In: Information technology and intelligent transportation systems, pp 450\u2013459. IOS Press"},{"key":"11474_CR25","doi-asserted-by":"crossref","first-page":"1351","DOI":"10.1109\/72.548164","volume":"7","author":"AG Bors","year":"1996","unstructured":"Bors AG, Pitas I (1996) Median radial basis function neural network. IEEE Trans Neural Netw 7:1351\u20131364","journal-title":"IEEE Trans Neural Netw"},{"key":"11474_CR26","doi-asserted-by":"crossref","first-page":"68","DOI":"10.1016\/S0019-9958(60)90287-4","volume":"3","author":"RC Bose","year":"1960","unstructured":"Bose RC, Ray-Chaudhuri DK (1960) On a class of error correcting binary group codes. Inf Control 3:68\u201379","journal-title":"Inf Control"},{"key":"11474_CR27","doi-asserted-by":"crossref","first-page":"86","DOI":"10.1038\/scientificamerican0689-86","volume":"260","author":"RN Bracewell","year":"1989","unstructured":"Bracewell RN (1989) The fourier transform. Sci Am 260:86\u201395","journal-title":"Sci Am"},{"key":"11474_CR28","unstructured":"Brassil J, Low S, Maxemchuk N, O\u2019Gorman L (1995). Hiding information in document images. In: International conference on information sciences and systems, Citeseer, pp 482\u2013489"},{"key":"11474_CR29","first-page":"1877","volume":"33","author":"T Brown","year":"2020","unstructured":"Brown T, Mann B, Ryder N, Subbiah M, Kaplan JD, Dhariwal P, Neelakantan A, Shyam P, Sastry G, Askell A et al (2020). Language models are few-shot learners. Adv Neural Inf Process Syst 33:1877\u20131901","journal-title":"Adv Neural Inf Process Syst"},{"key":"11474_CR30","doi-asserted-by":"crossref","first-page":"57","DOI":"10.1145\/276609.276620","volume":"41","author":"D Brutzman","year":"1998","unstructured":"Brutzman D (1998). The virtual reality modeling language and java. Commun ACM 41:57\u201364","journal-title":"Commun ACM"},{"key":"11474_CR31","doi-asserted-by":"crossref","unstructured":"Bui T, Agarwal S, Yu N, Collomosse J (2023). RoSteALS: Robust steganography using autoencoder latent space, In: The IEEE\/CVF conference on computer vision and pattern recognition, pp 933\u2013942","DOI":"10.1109\/CVPRW59228.2023.00100"},{"key":"11474_CR32","unstructured":"Cai Z, Liu S, Wang H, Zhong H, Li X (2024). Towards better statistical understanding of watermarking llms. arXiv preprint arXiv:2403.13027"},{"key":"11474_CR33","doi-asserted-by":"crossref","first-page":"1329","DOI":"10.1109\/78.839980","volume":"48","author":"C Candan","year":"2000","unstructured":"Candan C, Kutay MA, Ozaktas HM (2000) The discrete fractional fourier transform. IEEE Trans Signal Process 48:1329\u20131337","journal-title":"IEEE Trans Signal Process"},{"key":"11474_CR34","first-page":"193","volume-title":"5th IEEE International Conference on Trust","author":"X Cao","year":"2023","unstructured":"Cao X, Li X, Jadav D, Wu Y, Chen Z, Zeng C, Wei W (2023) Invisible watermarking for audio generation diffusion models. In: 5th IEEE international conference on trust, Privacy and security in intelligent systems and applications. IEEE, pp 193\u2013202"},{"key":"11474_CR35","doi-asserted-by":"crossref","first-page":"1795","DOI":"10.3390\/math9151795","volume":"9","author":"M Cedillo-Hernandez","year":"2021","unstructured":"Cedillo-Hernandez M, Cedillo-Hernandez A, Garcia-Ugalde FJ (2021) Improving DFT-based image watermarking using particle swarm optimization algorithm. Mathematics 9:1795","journal-title":"Mathematics"},{"key":"11474_CR36","doi-asserted-by":"crossref","unstructured":"Cer D, Yang Y, Kong SY, Hua N, Limtiaco N, John RS, Constant N, Guajardo-Cespedes M, Yuan S, Tar C et al (2018) Universal sentence encoder for english. The Conference on Empirical Methods in Natural Language Processing: System Demonstrations. pp 169\u2013174","DOI":"10.18653\/v1\/D18-2029"},{"key":"11474_CR37","unstructured":"Chakraborty A, Xing D, Liu Y, Srivastava A (2022) DynaMarks: Defending against deep learning model extraction using dynamic watermarking. arXiv preprint arXiv:2207.13321"},{"key":"11474_CR38","unstructured":"Chang J, Brantley K, Ramamurthy R, Misra D, Sun W (2023) Learning to generate better than your LLM. In: NeurIPS workshop on instruction tuning and instruction following"},{"key":"11474_CR39","doi-asserted-by":"crossref","unstructured":"Charette L, Chu L, Chen Y, Pei J, Wang L, Zhang Y (2022) IN: Cosine model watermarking against ensemble distillation. In: The AAAI conference on artificial intelligence, pp 9512\u20139520","DOI":"10.1609\/aaai.v36i9.21184"},{"key":"11474_CR40","doi-asserted-by":"crossref","unstructured":"Charikar MS (2002) Similarity estimation techniques from rounding algorithms, In: The thiry-fourth annual ACM symposium on theory of computing, pp 380\u2013388","DOI":"10.1145\/509907.509965"},{"key":"11474_CR41","unstructured":"Chen X, Aksitov R, Alon U, Ren J, Xiao K, Yin P, Prakash S, Sutton C, Wang X, Zhou D (2023) Universal self-consistency for large language model generation, In: ICML workshop on in-context learning"},{"key":"11474_CR42","doi-asserted-by":"crossref","unstructured":"Chen T, Lu H (2012). Robust spatial LSB watermarking of color images against JPEG compression, In: International Conference on advanced computational intelligence, pp 872\u2013875. IEEE","DOI":"10.1109\/ICACI.2012.6463294"},{"key":"11474_CR43","unstructured":"Chen H, Rouhani BD, Koushanfar F (2019) Blackmarks: Blackbox multibit watermarking for deep neural networks. arXiv preprint arXiv:1904.00344"},{"key":"11474_CR44","unstructured":"Chen M, Tworek J, Jun H, Yuan Q, Pinto HP, Kaplan J, Edwards H, Burda Y, Joseph N, Brockman G et al (2021) Evaluating large language models trained on code. arXiv preprint arXiv:2107.03374"},{"key":"11474_CR45","doi-asserted-by":"crossref","unstructured":"Chen M, Wu M (2018). Protect your deep neural networks from piracy. In: IEEE international workshop on information forensics and security, pp 1\u20137. IEEE","DOI":"10.1109\/WIFS.2018.8630791"},{"key":"11474_CR46","doi-asserted-by":"crossref","unstructured":"Chen Z, Wu J, Gan W, Qi Z (2022) Metaverse security and privacy: an overview. In: IEEE international conference on big data, pp 2950\u20132959. IEEE","DOI":"10.1109\/BigData55660.2022.10021112"},{"key":"11474_CR47","unstructured":"Chen G, Wu Y, Liu S, Liu T, Du X, Wei F (2023) WavMark: watermarking for audio generation. arXiv preprint arXiv:2308.12770"},{"key":"11474_CR48","doi-asserted-by":"crossref","first-page":"1327","DOI":"10.1016\/j.sigpro.2009.10.009","volume":"90","author":"D Choi","year":"2010","unstructured":"Choi D, Do H, Choi H, Kim T (2010) A blind mpeg-2 video watermarking robust to camcorder recording. Signal Process 90:1327\u20131332","journal-title":"Signal Process"},{"key":"11474_CR49","doi-asserted-by":"crossref","unstructured":"Cho Y, Kim C, Yang Y, Ren Y (2022) Attributable watermarking of speech generative models. In: IEEE international conference on acoustics, speech and signal processing, pp 3069\u20133073. IEEE","DOI":"10.1109\/ICASSP43922.2022.9746578"},{"key":"11474_CR50","first-page":"40","volume":"30","author":"M Choubisa","year":"2011","unstructured":"Choubisa M, Hiran K, Singh S (2011) Permutation based invisible digital watermarking technique using DCT domain. Int J Comput Appl 30:40\u201344","journal-title":"Int J Comput Appl"},{"key":"11474_CR51","doi-asserted-by":"crossref","unstructured":"Chowdhary K, Chowdhary K (2020) Natural language processing. Fundam Artific Intell 603\u2013649","DOI":"10.1007\/978-81-322-3972-7_19"},{"key":"11474_CR52","first-page":"1","volume":"24","author":"A Chowdhery","year":"2023","unstructured":"Chowdhery A, Narang S, Devlin J, Bosma M, Mishra G, Roberts A, Barham P, Chung HW, Sutton C, Gehrmann S et al (2023) PaLM: Scaling language modeling with pathways. J Mach Learn Res 24:1\u2013113","journal-title":"J Mach Learn Res"},{"key":"11474_CR53","unstructured":"Christ M, Gunn S, Zamir O (2024) Undetectable watermarks for language models, In: The Thirty seventh annual conference on learning theory, PMLR. pp 1125\u20131139"},{"key":"11474_CR54","doi-asserted-by":"crossref","unstructured":"Cox IJ, Kilian J, Leighton T, Shamoon T (1996). Secure spread spectrum watermarking for images, audio and video, In: The 3rd IEEE international conference on image processing, IEEE. pp 243\u2013246","DOI":"10.1109\/ICIP.1996.560429"},{"key":"11474_CR55","doi-asserted-by":"crossref","first-page":"414","DOI":"10.1117\/1.1494075","volume":"11","author":"I Cox","year":"2002","unstructured":"Cox I, Miller M, Bloom J, Honsinger C (2002) Digital watermarking. J Electron Imaging 11:414\u2013414","journal-title":"J Electron Imaging"},{"key":"11474_CR56","doi-asserted-by":"crossref","first-page":"573","DOI":"10.1109\/49.668979","volume":"16","author":"S Craver","year":"1998","unstructured":"Craver S, Memon N, Yeo BL, Yeung MM (1998) Resolving rightful ownerships with invisible watermarking techniques: Limitations, attacks, and implications. IEEE J Sel Areas Commun 16:573\u2013586","journal-title":"IEEE J Sel Areas Commun"},{"key":"11474_CR57","first-page":"323","volume":"8","author":"C Cruz-Ramos","year":"2010","unstructured":"Cruz-Ramos C, Reyes-Reyes R, Nakano-Miyatake M, Perez-Meana H (2010) A blind video watermarking scheme robust to frame attacks combined with MPEG2 compression. J Appl Res Technol 8:323\u2013337","journal-title":"JJ Appl Res Technol"},{"key":"11474_CR58","unstructured":"Cui J, Li Z, Yan Y, Chen B, Yuan L (2023a) ChatLaw Open-source legal large language model with integrated external knowledge bases. arXiv preprint arXiv:2306.16092"},{"key":"11474_CR59","doi-asserted-by":"crossref","unstructured":"Cui Y, Ren J, Xu H, He P, Liu H, Sun L, Tang J (2023b) DiffusionShield: A watermark for copyright protection against generative diffusion models. ACM SIGKDD explorations newsletter 26:60\u201375","DOI":"10.1145\/3715073.3715079"},{"key":"11474_CR60","doi-asserted-by":"crossref","first-page":"31103","DOI":"10.1007\/s11042-020-09433-0","volume":"79","author":"B Dappuri","year":"2020","unstructured":"Dappuri B, Rao MP, Sikha MB (2020) Non-blind RGB watermarking approach using SVD in translation invariant wavelet space with enhanced grey-wolf optimizer. Multimed Tools Appl 79:31103\u201331124","journal-title":"Multimed Tools Appl"},{"key":"11474_CR61","doi-asserted-by":"crossref","unstructured":"Darvish Rouhani B, Chen H, Koushanfar F (2019) Deepsigns: an end-to-end watermarking framework for ownership protection of deep neural networks, In: The twenty-fourth international conference on architectural support for programming languages and operating systems, pp 485\u2013497","DOI":"10.1145\/3297858.3304051"},{"key":"11474_CR62","doi-asserted-by":"crossref","first-page":"6503","DOI":"10.1007\/s11042-019-08290-w","volume":"79","author":"SM Darwish","year":"2020","unstructured":"Darwish SM, Al-Khafaji LDS (2020) Dual watermarking for color images: a new image copyright protection model based on the fusion of successive and segmented watermarking. Multimed Tools Appl 79:6503\u20136530","journal-title":"Multimed Tools Appl"},{"key":"11474_CR63","unstructured":"Dehkordi AB, Esfahani SN, Avanaki AN (2011) Robust LSB watermarking optimized for local structural similarity. In: 19th Iranian conference on electrical engineering, pp 1\u20136. IEEE"},{"key":"11474_CR64","doi-asserted-by":"crossref","unstructured":"Dekel T, Rubinstein M, Liu C, Freeman WT (2017) On the effectiveness of visible watermarks. In: The IEEE conference on computer vision and pattern recognition, pp 2146\u20132154","DOI":"10.1109\/CVPR.2017.726"},{"key":"11474_CR65","doi-asserted-by":"crossref","first-page":"1335","DOI":"10.1109\/TCOM.1979.1094560","volume":"27","author":"E Delp","year":"1979","unstructured":"Delp E, Mitchell O (1979) Image compression using block truncation coding. IEEE Trans Commun 27:1335\u20131342","journal-title":"IEEE Trans Commun"},{"key":"11474_CR66","doi-asserted-by":"crossref","unstructured":"Devlin J, Chang MWC, Lee K, Toutanova K (2019) BERT: Pre-training of deep bidirectional transformers for language understanding. In: NAACL-HLT, pp 4171\u20134186","DOI":"10.18653\/v1\/N19-1423"},{"key":"11474_CR67","doi-asserted-by":"crossref","first-page":"549","DOI":"10.1007\/s00521-013-1522-8","volume":"25","author":"S Ding","year":"2014","unstructured":"Ding S, Xu X, Nie R (2014) Extreme learning machine and its applications. Neural Comput Appl 25:549\u2013556","journal-title":"Neural Comput Appl"},{"key":"11474_CR68","unstructured":"Ditria L, Drummond T (2023). Hey that\u2019s mine imperceptible watermarks are preserved in diffusion generated outputs. arXiv preprint arXiv:2308.11123"},{"key":"11474_CR69","doi-asserted-by":"crossref","unstructured":"Dittmann J, Steinmetz A, Steinmetz R (1999) Content-based digital signature for motion pictures authentication and content-fragile watermarking. In: IEEE international conference on multimedia computing and systems, IEEE. pp 209\u2013213","DOI":"10.1109\/MMCS.1999.778274"},{"key":"11474_CR70","unstructured":"Easy watermark studio lite (2017). http:\/\/www.easy-watermark-studio.com\/easy-watermark-studio\/lite-version.html"},{"key":"11474_CR71","doi-asserted-by":"crossref","unstructured":"Emmanuel S, Vinod A, Rajan D, Heng C (2007) An authentication watermarking scheme with transaction tracking enabled. In: Inaugural IEEE-IES digital ecosystems and technologies conference, pp 481\u2013486. IEEE","DOI":"10.1109\/DEST.2007.372024"},{"key":"11474_CR72","first-page":"448","volume":"3","author":"A Essaouabi","year":"2010","unstructured":"Essaouabi A, Ibnelhaj E, Regragui F (2010) A wavelet-based object watermarking system for mpeg4 video. Int J Comput Sci Secur 3:448","journal-title":"Int J Comput Sci Secur"},{"key":"11474_CR73","doi-asserted-by":"crossref","unstructured":"Fairoze J, Garg S, Jha S, Mahloujifar S, Mahmoody M, Wang M (2025) Publicly-detectable watermarking for language models. IACR communications in cryptology 1","DOI":"10.62056\/ahmpdkp10"},{"key":"11474_CR74","doi-asserted-by":"crossref","first-page":"2648","DOI":"10.1109\/TMM.2022.3149641","volume":"25","author":"H Fang","year":"2022","unstructured":"Fang H, Jia Z, Zhou H, Ma Z, Zhang W (2022) Encoded feature enhancement in watermarking network for distortion in real scenes. IEEE Trans Multimedia 25:2648\u20132660","journal-title":"IEEE Trans Multimedia"},{"key":"11474_CR75","unstructured":"Fan L, Ng KW, Chan CS (2019) Rethinking deep neural network ownership verification: embedding passports to defeat ambiguity attacks. Adv Neural Inf Process Syst 32"},{"key":"11474_CR76","doi-asserted-by":"crossref","unstructured":"Fan Q, Yang J, Hua G, Chen B, Wipf D (2017) A generic deep architecture for single image reflection removal and image smoothing. In: IEEE international conference on computer vision, pp 3238\u20133247","DOI":"10.1109\/ICCV.2017.351"},{"key":"11474_CR77","doi-asserted-by":"crossref","DOI":"10.1016\/j.ijleo.2020.164562","volume":"208","author":"K Fares","year":"2020","unstructured":"Fares K, Amine K, Salah E (2020) A robust blind color image watermarking based on fourier transform domain. Optik 208:164562","journal-title":"Optik"},{"key":"11474_CR78","doi-asserted-by":"crossref","first-page":"3094","DOI":"10.1038\/s41467-022-30761-2","volume":"13","author":"N Fei","year":"2022","unstructured":"Fei N, Lu Z, Gao Y, Yang G, Huo Y, Wen J, Lu H, Song R, Gao X, Xiang T et al (2022) Towards artificial general intelligence via a multimodal foundation model. Nat Commun 13:3094","journal-title":"Nat Commun"},{"key":"11474_CR79","doi-asserted-by":"crossref","unstructured":"Fei J, Xia Z, Tondi B, Barni M (2022a) Supervised GAN watermarking for intellectual property protection. In: International workshop on information forensics and security, pp 1\u20136. IEEE","DOI":"10.1109\/WIFS55849.2022.9975409"},{"key":"11474_CR80","doi-asserted-by":"crossref","first-page":"3572","DOI":"10.1016\/j.patcog.2008.05.031","volume":"41","author":"JB Feng","year":"2008","unstructured":"Feng JB, Wu HC, Tsai CS, Chang YF, Chu YP (2008) Visual secret sharing for multiple secrets. Pattern Recogn 41:3572\u20133581","journal-title":"Pattern Recogn"},{"key":"11474_CR81","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1007\/s11036-018-1186-9","volume":"25","author":"B Feng","year":"2020","unstructured":"Feng B, Li X, Jie Y, Guo C, Fu H (2020) A novel semi-fragile digital watermarking scheme for scrambled image authentication and restoration. Mobile Netw Appl 25:82\u201394","journal-title":"Mobile Netw Appl"},{"key":"11474_CR82","unstructured":"Feng W, He J, Zhang J, Zhang T, Zhou W, Zhang W, Yu N (2023) Catch your everything everywhere: guarding textual inversion via concept watermarking. arXiv preprint arXiv:2309.05940"},{"key":"11474_CR83","doi-asserted-by":"crossref","unstructured":"Fernandez P, Couairon G, Furon T, Douze M (2024) Functional invariants to watermark large transformers. In: International conference on acoustics speech and signal processing, pp 4815\u20134819. IEEE","DOI":"10.1109\/ICASSP48485.2024.10447264"},{"key":"11474_CR84","doi-asserted-by":"crossref","unstructured":"Fernandez P, Couairon G, J\u00e9gou H, Douze M, Furon T (2023) The stable signature: rooting watermarks in latent diffusion models. In: The IEEE\/CVF international conference on computer vision, pp 22466\u201322477","DOI":"10.1109\/ICCV51070.2023.02053"},{"key":"11474_CR85","doi-asserted-by":"crossref","unstructured":"Fierro-Radilla A, Nakano-Miyatake M, Cedillo-Hernandez M, Cleofas-Sanchez L, Perez-Meana H (2019) A robust image zero-watermarking using convolutional neural networks. In: International workshop on biometrics and forensics, IEEE. pp 1\u20135","DOI":"10.1109\/IWBF.2019.8739245"},{"key":"11474_CR86","doi-asserted-by":"crossref","unstructured":"Fu Y, Xiong D, Dong Y (2024b) Watermarking conditional text generation for AI detection: Unveiling challenges and a semantic-aware watermark remedy. In: The AAAI conference on artificial intelligence, pp 18003\u201318011","DOI":"10.1609\/aaai.v38i16.29756"},{"key":"11474_CR87","doi-asserted-by":"crossref","unstructured":"Fu J, Zhao X, Yang R, Zhang Y, Chen J, Xiao Y (2024a) GumbelSoft: Diversified language model watermarking via the Gumbelmax-trick. In: The 62nd annual meeting of the association for computational linguistics, pp 5791\u20135808","DOI":"10.18653\/v1\/2024.acl-long.315"},{"key":"11474_CR88","volume":"7","author":"W Gan","year":"2017","unstructured":"Gan W, Lin JCW, Chao HC, Zhan J (2017) Data mining in distributed environment: a survey. WWiley Interdiscip Rev Data Mining Knowl Discov 7:e1216","journal-title":"Wiley Interdiscip Rev Data Mining Knowl Discov"},{"key":"11474_CR89","doi-asserted-by":"crossref","first-page":"1306","DOI":"10.1109\/TKDE.2019.2942594","volume":"33","author":"W Gan","year":"2021","unstructured":"Gan W, Lin JCW, Fournier-Viger P, Chao HC, Tseng VS, Yu PS (2021) A survey of utility-oriented pattern mining. IEEE Trans Knowl Data Eng 33:1306\u20131327","journal-title":"IEEE Trans Knowl Data Eng"},{"key":"11474_CR90","doi-asserted-by":"crossref","unstructured":"Gan W, Qi Z, Wu J, Lin JCW (2023a) Large language models in education: vision and opportunities. In: IEEE International conference on big data, pp4776\u20134785. IEEE","DOI":"10.1109\/BigData59044.2023.10386291"},{"key":"11474_CR91","doi-asserted-by":"crossref","unstructured":"Gan W, Wan S, Yu PS (2023b). Model-as-a-service (MaaS): a survey, In: IEEE international conference on big data, pp 4636\u20134645. IEEE","DOI":"10.1109\/BigData59044.2023.10386351"},{"key":"11474_CR92","doi-asserted-by":"crossref","unstructured":"Gao X, Lu W, Tao D, Li X (2010). Image quality assessment and human visual system. In: Visual communications and image processing, SPIE, pp 316\u2013325","DOI":"10.1117\/12.862431"},{"key":"11474_CR93","unstructured":"Giboulot E, Teddy F (2024). WaterMax: breaking the LLM watermark detectability-robustness-quality trade-off. In: The thirty-eighth annual conference on neural information processing systems"},{"key":"11474_CR94","doi-asserted-by":"crossref","unstructured":"Gladwin SJ, Gowthami PL (2020). Combined cryptography and steganography for enhanced security in suboptimal images. In: International conference on artificial intelligence and signal processing, pp 1\u20135. IEEE","DOI":"10.1109\/AISP48273.2020.9073306"},{"key":"11474_CR95","doi-asserted-by":"crossref","first-page":"18071","DOI":"10.1007\/s11042-019-08594-x","volume":"79","author":"X Gong","year":"2020","unstructured":"Gong X, Chen L, Yu F, Zhao X, Wang S (2020) A secure image authentication scheme based on dual fragile watermark. Multimed Tools Appl 79:18071\u201318088","journal-title":"Multimed Tools Appl"},{"key":"11474_CR96","unstructured":"Goodfellow I, Pouget-Abadie J, Mirza M, Xu B, Warde-Farley D, Ozair S, Courville A, Bengio Y (2014). Generative adversarial nets. Adv Neural Inf Process Syst 27"},{"key":"11474_CR97","doi-asserted-by":"crossref","unstructured":"Graves A, Graves A (2012) Long short-term memory. Supervised sequence labelling with recurrent neural networks, pp 37\u201345","DOI":"10.1007\/978-3-642-24797-2_4"},{"key":"11474_CR98","unstructured":"Grinbaum A, Adomaitis L (2022). The ethical need for watermarks in machine-generated language. arXiv preprint arXiv:2209.03118"},{"key":"11474_CR99","doi-asserted-by":"crossref","unstructured":"Guan X, Feng H, Zhang W, Zhou H, Zhang J, Yu N (2020). Reversible watermarking in deep convolutional neural networks for integrity authentication. In: The 28th ACM international conference on multimedia, pp 2273\u20132280","DOI":"10.1145\/3394171.3413729"},{"key":"11474_CR100","doi-asserted-by":"crossref","first-page":"225","DOI":"10.1016\/j.aiopen.2021.08.002","volume":"2","author":"X Han","year":"2021","unstructured":"Han X, Zhang Z, Ding N, Gu Y, Liu X, Huo Y, Qiu J, Yao Y, Zhang A, Zhang L et al (2021) Pre-trained models: past, present and future. AI Open 2:225\u2013250","journal-title":"AI Open"},{"key":"11474_CR101","doi-asserted-by":"crossref","unstructured":"Han Y, Cheng X, He W (2011). A watermarking-based visual cryptography scheme with meaningful shares, In: Seventh international conference on computational intelligence and security, IEEE. pp 870\u2013873","DOI":"10.1109\/CIS.2011.196"},{"key":"11474_CR102","doi-asserted-by":"crossref","first-page":"78","DOI":"10.1109\/35.883493","volume":"38","author":"F Hartung","year":"2000","unstructured":"Hartung F, Ramme F (2000) Digital rights management and watermarking of multimedia content for m-commerce applications. IEEE Commun Mag 38:78\u201384","journal-title":"IEEE Commun Mag"},{"key":"11474_CR103","first-page":"34","volume":"19","author":"MH Hassan","year":"2006","unstructured":"Hassan MH, Gilani S (2006) A semi-fragile watermarking scheme for color image authentication. World Acad Sci Eng Technol 19:34\u201338","journal-title":"World Acad Sci Eng Technol"},{"key":"11474_CR104","first-page":"429","volume":"18","author":"S He","year":"2008","unstructured":"He S, Kirovski D, Wu M (2008) High-fidelity data embedding for image annotation. IEEE Trans Image Process 18:429\u2013435","journal-title":"IEEE Trans Image Process"},{"key":"11474_CR105","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1109\/MCOM.1978.1089772","volume":"16","author":"M Hellman","year":"1978","unstructured":"Hellman M (1978) An overview of public key cryptography. IEEE Commun Soc Mag 16:24\u201332","journal-title":"IEEE Commun Soc Mag"},{"key":"11474_CR106","doi-asserted-by":"crossref","unstructured":"He Z, Zhou B, Hao H, Liu A, Wang X, Tu Z, Zhang Z, Wang R (2024) Can watermarks survive translation? on the cross-lingual consistency of text watermark for large language models. In: The 62nd annual meeting of the association for computational linguistics, pp 4115\u20134129","DOI":"10.18653\/v1\/2024.acl-long.226"},{"key":"11474_CR107","unstructured":"Hitaj D, Mancini LV (2018) Have you stolen my model? Evasion attacks against deep neural network watermarking techniques. arXiv preprint arXiv:1809.00615"},{"key":"11474_CR108","doi-asserted-by":"crossref","unstructured":"Ho CK, Li CT (2004). Semi-fragile watermarking scheme for authentication of jpeg images. In: International conference on information technology: coding and computing, pp 7\u201311. IEEE","DOI":"10.1109\/ITCC.2004.1286417"},{"key":"11474_CR109","unstructured":"Hong I, Kim I, Han SS (2001). A blind watermarking technique using wavelet transform. In: International symposium on industrial electronics proceedings, pp 1946\u20131950. IEEE"},{"key":"11474_CR110","doi-asserted-by":"crossref","unstructured":"Hossen MS, Islam MA, Khatun T, Hossain S, Rahman MM (2020) A new approach to hiding data in the images using steganography techniques based on AES and RC5 algorithm cryptosystem. In: International conference on smart electronics and communication, pp 676\u2013681. IEEE","DOI":"10.1109\/ICOSEC49089.2020.9215442"},{"key":"11474_CR111","doi-asserted-by":"crossref","unstructured":"Hou AB, Zhang J, He T, Wang Y, Chuang YS, Wang H, Shen L, Van Durme B, Khashabi D, Tsvetkov Y (2024a) SEMSTAMP: A semantic watermark with paraphrastic robustness for text generation. In: The conference of the North American chapter of the association for computational linguistics: human language technologies, pp 4067\u20134082","DOI":"10.18653\/v1\/2024.naacl-long.226"},{"key":"11474_CR112","doi-asserted-by":"crossref","unstructured":"Hou AB, Zhang J, Wang Y, Khashabi D, He T (2024b) k-SEMSTAMP: A clustering-based semantic watermark for detection of machine-generated text. In: Findings of the association for computational linguistics, pp 1706\u20131715","DOI":"10.18653\/v1\/2024.findings-acl.98"},{"key":"11474_CR113","doi-asserted-by":"crossref","DOI":"10.1016\/j.jvcir.2022.103437","volume":"83","author":"L Huang","year":"2022","unstructured":"Huang L, Kuang D, Li CL, Zhuang YJ, Duan SH, Zhou XY (2022) A self-embedding secure fragile watermarking scheme with high quality recovery. J Vis Commun Image Represent 83:103437","journal-title":"J Vis Commun Image Represent"},{"key":"11474_CR114","unstructured":"Huo M, Somayajula SA, Liang Y, Zhang R, Koushanfar F, Xie P (2024) Token-specific watermarking with enhanced detectability and semantic coherence for large language models. In: The 41st international conference on machine learning, pp 20746\u201320767"},{"key":"11474_CR115","doi-asserted-by":"crossref","unstructured":"Hwang J, Oh S (2023) A brief survey of watermarks in generative AI. In: 14th international conference on information and communication technology convergence, IEEE. pp 1157\u20131160","DOI":"10.1109\/ICTC58733.2023.10392465"},{"key":"11474_CR116","doi-asserted-by":"crossref","unstructured":"Indyk P, Motwani R (1998) Approximate nearest neighbors: towards removing the curse of dimensionality. In: The thirtieth annual ACM symposium on theory of computing, pp 604\u2013613","DOI":"10.1145\/276698.276876"},{"key":"11474_CR117","unstructured":"ISO\/IEC, (2000). ISO\/IEC 13818-1:2000\u2014Information technology\u2014Generic coding of moving pictures and associated audio information: systems. https:\/\/www.iso.org\/standard\/31537.html"},{"key":"11474_CR118","unstructured":"ISO\/IEC ITCI\/SC29\/WG11, (1998). Overview of the MPEG-4 Standard. N2323, Dublin, Ireland"},{"key":"11474_CR119","unstructured":"Janas J, Morawiecki P, Pieprzyk J (2025) LLM-text watermarking based on lagrange interpolation. arXiv preprint arXiv:2505.05712"},{"key":"11474_CR120","unstructured":"Jang E, Gu S, Poole B (2017). Categorical reparameterization with Gumbel-softmax. In: 5th international conference on learning representations (poster)"},{"key":"11474_CR121","doi-asserted-by":"crossref","unstructured":"Jianfeng L, Zhenhua Y, Fan Y, Li L (2011). A MPEG2 video watermarking algorithm based on DCT domain, In: Workshop on digital media and digital content management, IEEE. pp 194\u2013197","DOI":"10.1109\/DMDCM.2011.9"},{"key":"11474_CR122","doi-asserted-by":"crossref","first-page":"843","DOI":"10.1016\/j.proenv.2011.09.136","volume":"10","author":"M Jiang","year":"2011","unstructured":"Jiang M, Ma Z, Niu X, Yang Y (2011) Video watermarking scheme based on MPEG-2 for copyright protection. Procedia Environ Sci 10:843\u2013848","journal-title":"Procedia Environ Sci"},{"key":"11474_CR123","doi-asserted-by":"crossref","unstructured":"Jin H, Zhang C, Shi S, Lou W, Hou YT (2024). ProfLingo: A fingerprinting-based copyright protection scheme for large language models , 1\u20139","DOI":"10.1109\/CNS62487.2024.10735575"},{"key":"11474_CR124","first-page":"11231","volume-title":"International conference on acoustics","author":"L Juvela","year":"2024","unstructured":"Juvela L, Wang X (2024) Collaborative watermarking for adversarial speech synthesis. In: International conference on acoustics, speech and signal processing, pp 11231\u201311235. IEEE"},{"key":"11474_CR125","first-page":"104","volume":"8","author":"E Kartikadarma","year":"2021","unstructured":"Kartikadarma E, Udayanti ED, Sari CA, Doheir M (2021) A comparison of non blind image watermarking using transformation domain. Sci J Inf 8:104\u2013110","journal-title":"Sci J Inf"},{"key":"11474_CR126","doi-asserted-by":"crossref","DOI":"10.1016\/j.lindif.2023.102274","volume":"103","author":"E Kasneci","year":"2023","unstructured":"Kasneci E, Se\u00dfler K, K\u00fcchemann S, Bannert M, Dementieva D, Fischer F, Gasser U, Groh G, G\u00fcnnemann S, H\u00fcllermeier E et al (2023) ChatGPT for good? on opportunities and challenges of large language models for education. Learn Individ Differ 103:102274","journal-title":"Learn Individ Differ"},{"key":"11474_CR127","doi-asserted-by":"crossref","first-page":"131","DOI":"10.1007\/s11045-020-00732-1","volume":"32","author":"P Khare","year":"2021","unstructured":"Khare P, Srivastava VK (2021) A reliable and secure image watermarking algorithm using homomorphic transform in DWT domain. Multidimens Syst Signal Process 32:131\u2013160","journal-title":"Multidimens Syst Signal Process"},{"key":"11474_CR128","unstructured":"Kirchenbauer J,Geiping J, Wen Y, Katz J, Miers I, Goldstein T (2023). A watermark for large language models. In: International conference on machine learning, PMLR. pp 17061\u201317084"},{"key":"11474_CR129","unstructured":"Kirchenbauer J, Geiping J, Wen Y, Shu M, Saifullah K, Kong K, Fernando K, Saha A, Goldblum M, Goldstein T (2024) On the reliability of watermarks for large language models"},{"key":"11474_CR130","doi-asserted-by":"crossref","first-page":"1505","DOI":"10.1016\/j.procs.2020.03.361","volume":"167","author":"RR Kishore","year":"2020","unstructured":"Kishore RR et al (2020) A novel and efficient blind image watermarking in transform domain. Procedia Comput Sci 167:1505\u20131514","journal-title":"Procedia Comput Sci"},{"key":"11474_CR131","doi-asserted-by":"crossref","first-page":"173","DOI":"10.1023\/A:1008354106356","volume":"19","author":"N Koblitz","year":"2000","unstructured":"Koblitz N, Menezes A, Vanstone S (2000) The state of elliptic curve cryptography. Des Codes Crypt 19:173\u2013193","journal-title":"Des Codes Crypt"},{"key":"11474_CR132","doi-asserted-by":"crossref","first-page":"59","DOI":"10.1007\/s11042-011-0986-8","volume":"68","author":"P Korus","year":"2014","unstructured":"Korus P, Bia\u0142as J, Dziech A (2014) A new approach to high-capacity annotation watermarking based on digital fountain codes. Multimed Tools Appl 68:59\u201377","journal-title":"Multimed Tools Appl"},{"key":"11474_CR133","unstructured":"Kosinski M (2023). Theory of mind might have spontaneously emerged in large language models. preprint, arXiv:2302.02083"},{"key":"11474_CR134","doi-asserted-by":"crossref","first-page":"117","DOI":"10.3390\/jimaging9060117","volume":"9","author":"M Kuribayashi","year":"2023","unstructured":"Kuribayashi M, Yasui T, Malik A (2023) White box watermarking for convolution layers in fine-tuning model using the constant weight code. J Imaging 9:117","journal-title":"J Imaging"},{"key":"11474_CR135","doi-asserted-by":"crossref","unstructured":"Ku\u017eina V, Vu\u0161ak E, Jovi\u0107 A (2021) Methods for automatic sensitive data detection in large datasets: a review. In: 44th international convention on information, communication and electronic technology, pp 187\u2013192. IEEE","DOI":"10.23919\/MIPRO52101.2021.9596735"},{"key":"11474_CR136","doi-asserted-by":"crossref","unstructured":"Lai J, Gan W, Wu J, Qi Z, Yu PS (2024). Large language models in law: a survey. AI Open xx, 1\u201320","DOI":"10.1016\/j.aiopen.2024.09.002"},{"key":"11474_CR137","doi-asserted-by":"crossref","unstructured":"Lalai HN, Ramakrishnan AA, Shah RS, Lee D (2025). From intentions to techniques: a comprehensive taxonomy and challenges in text watermarking for large language models. In: Findings of the association for computational linguistics, ACL. pp 6147\u20136160","DOI":"10.18653\/v1\/2025.findings-naacl.343"},{"key":"11474_CR138","doi-asserted-by":"crossref","first-page":"9233","DOI":"10.1007\/s00521-019-04434-z","volume":"32","author":"E Le Merrer","year":"2020","unstructured":"Le Merrer E, Perez P, Tr\u00e9dan G (2020) Adversarial frontier stitching for remote neural network watermarking. Neural Comput Appl 32:9233\u20139244","journal-title":"Neural Comput Appl"},{"key":"11474_CR139","doi-asserted-by":"crossref","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Y LeCun","year":"1998","unstructured":"LeCun Y, Bottou L, Bengio Y, Haffner P (1998) Gradient-based learning applied to document recognition. Proc IEEE 86:2278\u20132324","journal-title":"Proc IEEE"},{"key":"11474_CR140","doi-asserted-by":"crossref","unstructured":"Lee T, Hong S, Ahn J, Hong I, Lee H, Yun S, Shin J, Kim G (2024). Who wrote this code? watermarking for code generation, In: The 62nd Annual Meeting of the Association for Computational Linguistics, pp 4890\u20134911","DOI":"10.18653\/v1\/2024.acl-long.268"},{"key":"11474_CR141","doi-asserted-by":"crossref","first-page":"171","DOI":"10.1016\/j.neucom.2021.07.051","volume":"461","author":"Y Li","year":"2021","unstructured":"Li Y, Wang H, Barni M (2021) A survey of deep neural network watermarking techniques. Neurocomputing 461:171\u2013193","journal-title":"Neurocomputing"},{"key":"11474_CR142","doi-asserted-by":"crossref","first-page":"4734","DOI":"10.1109\/TPAMI.2025.3546223","volume":"47","author":"Y Li","year":"2025","unstructured":"Li Y, Zhu L, Jia X, Bai Y, Jiang Y, Xia ST, Cao X, Ren K (2025) MOVE: Effective and harmless ownership verification via embedded external features. IEEE Trans Pattern Anal Mach Intell 47:4734\u20134751","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"11474_CR143","doi-asserted-by":"crossref","first-page":"225","DOI":"10.1109\/78.485919","volume":"44","author":"J Liang","year":"1996","unstructured":"Liang J, Parks TW (1996) A translation-invariant wavelet representation algorithm with applications. IEEE Trans Signal Process 44:225\u2013232","journal-title":"IEEE Trans Signal Process"},{"key":"11474_CR144","doi-asserted-by":"crossref","unstructured":"Li P, Cheng P, Li F, Du W, Zhao H, Liu G (2023b) Plmmark: a secure and robust black-box watermarking framework for pre-trained language models. In: The AAAI conference on artificial intelligence, pp 14991\u201314999","DOI":"10.1609\/aaai.v37i12.26750"},{"key":"11474_CR145","doi-asserted-by":"crossref","unstructured":"Li L, Jiang B, Wang P, Ren K, Yan H, Qiu X (2023a). Watermarking LLMs with Weight Quantization, In: Findings of the association for computational linguistics, pp 3368\u20133378","DOI":"10.18653\/v1\/2023.findings-emnlp.220"},{"key":"11474_CR146","volume":"122","author":"JH Lim","year":"2022","unstructured":"Lim JH, Chan CS, Ng KW, Fan L, Yang Q (2022) Protect, show, attend and tell: empowering image captioning models with ownership protection. Pattern Recogn 122:108285","journal-title":"Pattern Recogn"},{"key":"11474_CR147","first-page":"57","volume":"10","author":"CH Lin","year":"2007","unstructured":"Lin CH, Su TS, Hsieh WS et al (2007) Semi-fragile watermarking scheme for authentication of JPEG images. J Appl Sci Eng 10:57\u201366","journal-title":"J Appl Sci Eng"},{"key":"11474_CR148","doi-asserted-by":"crossref","unstructured":"Lin J, Liu Y, Zeng Q, Jiang M, Cleland-Huang J (2021) Traceability transformed: generating more accurate links with pre-trained BERT models. In: IEEE\/ACM 43rd international conference on software engineering, pp 324\u2013335. IEEE","DOI":"10.1109\/ICSE43902.2021.00040"},{"key":"11474_CR149","unstructured":"Liu AA, Zhang G, Su Y, Xu N, Zhang Y, Wang L (2023b) T2IW: Joint text to image & watermark generation. arXiv preprint arXiv:2309.03815"},{"key":"11474_CR150","doi-asserted-by":"crossref","first-page":"12233","DOI":"10.1007\/s11042-016-3624-7","volume":"76","author":"L Liu","year":"2017","unstructured":"Liu L, Chang CC, Wang A (2017) Data hiding based on extended turtle shell matrix construction method. Multimed Tools Appl 76:12233\u201312250","journal-title":"Multimed Tools Appl"},{"key":"11474_CR151","first-page":"1","volume":"57","author":"A Liu","year":"2024","unstructured":"Liu A, Pan L, Lu Y, Li J, Xi Z, Wen L, Xi Z, Yu PS (2024) A survey of text watermarking in the era of large language models. ACM Comput Surv 57:1\u201336","journal-title":"ACM Comput Surv"},{"key":"11474_CR152","doi-asserted-by":"crossref","unstructured":"Liu Y, Han T, Ma S, Zhang J, Yang Y, Tian J, He H, Li A, He M, Liu Z et al (2023c) Summary of ChatGPT-related research and perspective towards the future of large language models. Meta-Radiology 100017","DOI":"10.1016\/j.metrad.2023.100017"},{"key":"11474_CR153","unstructured":"Liu Y, Hu H, Zhang X, Sun L (2023d) Watermarking text data on large language models for dataset copyright protection. arXiv preprint arXiv:2305.13257"},{"key":"11474_CR154","unstructured":"Liu Q, Jiang X (2005). Design and realization of a meaningful digital watermarking algorithm based on RBF neural network. In: International conference on neural networks and brain, pp 214\u2013218. IEEE"},{"key":"11474_CR155","unstructured":"Liu Y, Li Z, Backes M, Shen Y, Zhang Y (2023e) Watermarking diffusion model. arXiv preprint arXiv:2305.12502"},{"key":"11474_CR156","unstructured":"Liu A, Pan L, Hu X, Li S, Wen L,King I, Yu PS (2023a). An unforgeable publicly verifiable watermark for large language models. In: The twelfth international conference on learning representations"},{"key":"11474_CR157","unstructured":"Liu A, Pan L, Hu X, Meng S, Wen L (2024a) A semantic invariant robust watermark for large language models. In: The twelfth international conference on learning representations 14:14"},{"key":"11474_CR158","doi-asserted-by":"crossref","unstructured":"Li D, Xu S, He H, Xue H (2024). Cross-chain transaction tracking protocol based on multi-dimensional digital watermarking fingerprints. In: International conference on frontier technologies of information and computer, IEEE. pp 265\u2013269","DOI":"10.1109\/ICFTIC64248.2024.10913002"},{"key":"11474_CR159","doi-asserted-by":"crossref","first-page":"129","DOI":"10.1109\/TIT.1982.1056489","volume":"28","author":"S Lloyd","year":"1982","unstructured":"Lloyd S (1982) Least squares quantization in PCM. IEEE Trans Inf Theory 28:129\u2013137","journal-title":"IEEE Trans Inf Theory"},{"key":"11474_CR160","doi-asserted-by":"crossref","first-page":"19876","DOI":"10.1109\/ACCESS.2018.2808172","volume":"6","author":"NA Loan","year":"2018","unstructured":"Loan NA, Hurrah NN, Parah SA, Lee JW, Sheikh JA, Bhat GM (2018) Secure and robust digital image watermarking using coefficient differencing and chaotic encryption. IEEE Access 6:19876\u201319897","journal-title":"IEEE Access"},{"key":"11474_CR161","unstructured":"Lukas N, Kerschbaum F (2023) PTW: Pivotal tuning watermarking for pre-trained image generators. In: 32nd USENIX security symposium, pp 2241\u20132258"},{"key":"11474_CR162","unstructured":"Lv P, Li P, Zhang S, Chen K, Liang R, Zhao Y, Li Y (2021) HufuNet: embedding the left piece as watermark and keeping the right piece for ownership verification in deep neural networks. arXiv preprint arXiv:2103.13628"},{"key":"11474_CR163","doi-asserted-by":"crossref","first-page":"944","DOI":"10.1109\/5.387094","volume":"83","author":"BM Macq","year":"1995","unstructured":"Macq BM, Quisquater JJ (1995) Cryptology for digital tv broadcasting. Proc IEEE 83:944\u2013957","journal-title":"Proc IEEE"},{"key":"11474_CR164","doi-asserted-by":"crossref","first-page":"705","DOI":"10.1002\/sec.1345","volume":"9","author":"E Maiorana","year":"2016","unstructured":"Maiorana E, Campisi P (2016) Multi-bit watermarking of high dynamic range images based on perceptual models. Secur Commun Netw 9:705\u2013720","journal-title":"Security and Communication Networks"},{"key":"11474_CR165","unstructured":"Ma Y, Zhao Z, He X, Li Z, Backes M, Zhang Y (2023) Generative watermarking against unauthorized subject-driven image synthesis. arXiv preprint arXiv:2306.07754"},{"key":"11474_CR166","volume-title":"The european union AI act","author":"J Meltzer","year":"2022","unstructured":"Meltzer J, Tielemans A (2022) The european union AI act. Brookings Institution, Bruselj"},{"key":"11474_CR167","unstructured":"Mikolov T, Chen K, Corrado G, Dean J (2013a) Efficient estimation of word representations in vector space. In: 1st international conference on learning representations"},{"key":"11474_CR168","unstructured":"Mikolov T, Sutskever I, Chen K, Corrado GS, Dean J (2013b) Distributed representations of words and phrases and their compositionality. Adv Neural Inf Process Syst 26"},{"key":"11474_CR169","doi-asserted-by":"crossref","unstructured":"Mishra A, Mathuria M (2017) Multilevel security feature for online transaction using qr code & digital watermarking. In: International conference of electronics, communication and aerospace technology, pp 48\u201351. IEEE","DOI":"10.1109\/ICECA.2017.8212709"},{"key":"11474_CR170","doi-asserted-by":"crossref","first-page":"32095","DOI":"10.1007\/s11042-020-09694-9","volume":"79","author":"AA Mohammed","year":"2020","unstructured":"Mohammed AA, Salih DA, Saeed AM, Kheder MQ (2020) An imperceptible semi-blind image watermarking scheme in DWT-SVD domain using a zigzag embedding technique. Multimedia Tools and Applications 79:32095\u201332118","journal-title":"Multimedia Tools and Applications"},{"key":"11474_CR171","doi-asserted-by":"crossref","first-page":"32855","DOI":"10.1007\/s11042-023-14797-0","volume":"82","author":"AO Mohammed","year":"2023","unstructured":"Mohammed AO, Hussein HI, Mstafa RJ, Abdulazeez AM (2023) A blind and robust color image watermarking scheme based on DCT and DWT domains. Multimed Tools Appl 82:32855\u201332881","journal-title":"Multimed Tools Appl"},{"key":"11474_CR172","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3387166","volume":"11","author":"S Mohseni","year":"2021","unstructured":"Mohseni S, Zarei N, Ragan ED (2021) A multidisciplinary survey and framework for design and evaluation of explainable ai systems. ACM Transactions on Interactive Intelligent Systems 11:1\u201345","journal-title":"ACM Transactions on Interactive Intelligent Systems"},{"key":"11474_CR173","doi-asserted-by":"crossref","DOI":"10.1016\/j.image.2019.115725","volume":"81","author":"J Molina-Garcia","year":"2020","unstructured":"Molina-Garcia J, Garcia-Salgado BP, Ponomaryov V, Reyes-Reyes R, Sadovnychiy S, Cruz-Ramos C (2020) An effective fragile watermarking scheme for color image tampering detection and self-recovery. Signal Process Image Commun 81:115725","journal-title":"Signal Process Image Commun"},{"key":"11474_CR174","doi-asserted-by":"crossref","unstructured":"Munyer T, Zhong X (2023) DeepTextMark: Deep learning based text watermarking for detection of large language model generated text. arXiv preprint arXiv:2305.05773","DOI":"10.1109\/ACCESS.2024.3376693"},{"key":"11474_CR175","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2020.113917","volume":"166","author":"MH Nadimi-Shahraki","year":"2021","unstructured":"Nadimi-Shahraki MH, Taghian S, Mirjalili S (2021) An improved grey wolf optimizer for solving engineering problems. Expert Syst Appl 166:113917","journal-title":"Expert Syst Appl"},{"key":"11474_CR176","volume-title":"Proactive deepfake detection using GAN-based visible watermarking","author":"AV Nadimpalli","year":"2023","unstructured":"Nadimpalli AV, Rattani A (2023) Proactive deepfake detection using GAN-based visible watermarking. ACM Transactions on Multimedia Computing, Communications and Applications"},{"key":"11474_CR177","doi-asserted-by":"crossref","first-page":"544","DOI":"10.1136\/amiajnl-2011-000464","volume":"18","author":"PM Nadkarni","year":"2011","unstructured":"Nadkarni PM, Ohno-Machado L, Chapman WW (2011) Natural language processing: an introduction. J Am Med Inform Assoc 18:544\u2013551","journal-title":"J Am Med Inform Assoc"},{"key":"11474_CR178","doi-asserted-by":"crossref","first-page":"307","DOI":"10.1007\/s40096-017-0233-1","volume":"11","author":"E Najafi","year":"2017","unstructured":"Najafi E (2017) A robust embedding and blind extraction of image watermarking based on discrete wavelet transform. Math Sci 11:307\u2013318","journal-title":"Math Sci"},{"key":"11474_CR179","doi-asserted-by":"crossref","unstructured":"Namba R, Sakuma J (2019) Robust watermarking of neural network with exponential weighting, In: The ACM Asia conference on computer and communications security, pp 228\u2013240","DOI":"10.1145\/3321705.3329808"},{"key":"11474_CR180","doi-asserted-by":"crossref","unstructured":"Nana Z (2016) Watermarking algorithm of spatial domain image based on SVD. In: International conference on audio, language and image processing, pp 361\u2013365. IEEE","DOI":"10.1109\/ICALIP.2016.7846588"},{"key":"11474_CR181","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1007\/s11277-021-08895-1","volume":"122","author":"F Nejati","year":"2022","unstructured":"Nejati F, Sajedi H, Zohourian A (2022) Fragile watermarking based on QR decomposition and fourier transform. Wireless Pers Commun 122:211\u2013227","journal-title":"Wireless Pers Commun"},{"key":"11474_CR182","unstructured":"Nemecek A, Jiang Y, Ayday E (2024). Topic-based watermarks for LLM-generated text. arXiv preprint arXiv:2404.02138"},{"key":"11474_CR183","doi-asserted-by":"crossref","unstructured":"Ong DS, Chan CS, Ng KW, Fan L, Yang Q (2021) Protecting intellectual property of generative adversarial networks from ambiguity attacks. In: The IEEE\/CVF conference on computer vision and pattern recognition, pp 3630\u20133639","DOI":"10.1109\/CVPR46437.2021.00363"},{"key":"11474_CR184","first-page":"27730","volume":"35","author":"L Ouyang","year":"2022","unstructured":"Ouyang L, Wu J, Jiang X, Almeida D, Wainwright C, Mishkin P, Zhang C, Agarwal S, Slama K, Ray A et al (2022) Training language models to follow instructions with human feedback. Adv Neural Inf Process Syst 35:27730\u201327744","journal-title":"Adv Neural Inf Process Syst"},{"key":"11474_CR185","doi-asserted-by":"crossref","first-page":"41555","DOI":"10.1007\/s11042-023-16963-w","volume":"83","author":"J Ouyang","year":"2024","unstructured":"Ouyang J, Huang J, Wen X (2024) A semi-fragile reversible watermarking method based on qdft and tamper ranking. Multimed Tools Appls 83:41555\u201341578","journal-title":"Multimed Tools Appl"},{"key":"11474_CR186","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1016\/0165-1684(88)90040-0","volume":"14","author":"F Owens","year":"1988","unstructured":"Owens F, Murphy M (1988) A short-time fourier transform. Signal Process 14:3\u201310","journal-title":"Signal Process"},{"key":"11474_CR187","first-page":"2349","volume":"11","author":"AK Pakina","year":"2023","unstructured":"Pakina AK, Pujari M (2023) Ai model watermarking for protecting intellectual property in privacy-sensitive systems. IInt J Innov Res Eng Multidiscip Phys Sci 11:2349\u20137300","journal-title":"Int J Innov Res Eng Multidiscip Phys Sci"},{"key":"11474_CR188","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2023.121903","volume":"238","author":"A Palani","year":"2024","unstructured":"Palani A, Loganathan A (2024) Semi-blind watermarking using convolutional attention-based turtle shell matrix for tamper detection and recovery of medical images. Expert Syst Appl 238:121903","journal-title":"Expert Syst Appl"},{"key":"11474_CR189","doi-asserted-by":"crossref","unstructured":"Pan L, Liu A, He Z, Gao Z, Zhao X, Lu Y, Zhou B, Liu S, Hu X, Wen L et al (2024) MarkLLM: an open-source toolkit for LLM watermarking. In: The conference on empirical methods in natural language processing: system demonstrations, pp 61\u201371","DOI":"10.18653\/v1\/2024.emnlp-demo.7"},{"key":"11474_CR190","doi-asserted-by":"crossref","unstructured":"Pan X, Zhang M, Ji S, Yang M (2020) Privacy risks of general-purpose language models. In: IEEE symposium on security and privacy, pp 1314\u20131331. IEEE","DOI":"10.1109\/SP40000.2020.00095"},{"key":"11474_CR191","doi-asserted-by":"crossref","first-page":"11","DOI":"10.1016\/j.dsp.2016.02.005","volume":"53","author":"SA Parah","year":"2016","unstructured":"Parah SA, Sheikh JA, Loan NA, Bhat GM (2016) Robust and blind watermarking technique in DCT domain using inter-block coefficient differencing. Digital Signal Process 53:11\u201324","journal-title":"Digital Signal Process"},{"key":"11474_CR192","first-page":"080","volume":"7","author":"C Parthasarathy","year":"2005","unstructured":"Parthasarathy C, Srivatsa S (2005) Increased robustness of LSB audio steganography by reduced distortion LSB coding. J Theor Appl Inf Technol 7:080\u2013086","journal-title":"J Theor Appl Inf Technol"},{"key":"11474_CR193","unstructured":"Patil P, Bormane D (2013) DWT based invisible watermarking technique for digital images. Int J Eng Adv Technol 2249"},{"key":"11474_CR194","doi-asserted-by":"crossref","unstructured":"Peebles W, Xie S (2023) Scalable diffusion models with transformers. In: The IEEE\/CVF international conference on computer vision, pp 4195\u20134205","DOI":"10.1109\/ICCV51070.2023.00387"},{"key":"11474_CR195","doi-asserted-by":"crossref","unstructured":"Peng W, Yi J, Wu F, Wu S, Zhu B, Lyu L, Jiao B, Xu T, Sun G, Xie X (2023) Are you copying my model? Protecting the copyright of large language models for EaaS via backdoor watermark. In: The 61st annual meeting of the association for computational linguistics, pp 7653\u20137668","DOI":"10.18653\/v1\/2023.acl-long.423"},{"key":"11474_CR196","doi-asserted-by":"crossref","unstructured":"Petrovic R, Tehranchi B, Winograd JM (2007) Security of copy-control watermarks. In: International conference on telecommunications in modern satellite, cable and broadcasting services, pp 117\u2013126. IEEE","DOI":"10.1109\/TELSKS.2007.4375954"},{"key":"11474_CR197","doi-asserted-by":"crossref","first-page":"033008","DOI":"10.1117\/1.3609010","volume":"20","author":"A Poljicak","year":"2011","unstructured":"Poljicak A, Mandic L, Agic D (2011) Discrete fourier transform-based watermarking method with an optimal implementation radius. J Electron Imaging 20:033008\u2013033008","journal-title":"J Electron Imaging"},{"key":"11474_CR198","doi-asserted-by":"crossref","unstructured":"Praun E, Hoppe H, Finkelstein A (1999) Robust mesh watermarking. In: The 26th annual conference on computer graphics and interactive techniques, pp 49\u201356","DOI":"10.1145\/311535.311540"},{"key":"11474_CR199","unstructured":"Qu W, Yin D, He Z, Zou W, Tao T, Jia J, Zhang J (2024) Provably robust multi-bit watermarking for AI-generated text. In: 34th USENIX security symposium, pp 201\u2013220"},{"key":"11474_CR200","first-page":"9","volume":"1","author":"A Radford","year":"2019","unstructured":"Radford A, Wu J, Child R, Luan D, Amodei D, Sutskever I et al (2019) Language models are unsupervised multitask learners. OpenAI Blog 1:9","journal-title":"OpenAI Blog"},{"key":"11474_CR201","unstructured":"Radford A, Narasimhan K, Salimans T, Sutskever I et al (2018) Improving language understanding by generative pre-training"},{"key":"11474_CR202","doi-asserted-by":"crossref","first-page":"603","DOI":"10.1016\/j.asoc.2018.10.043","volume":"74","author":"A Rajpal","year":"2019","unstructured":"Rajpal A, Mishra A, Bala R (2019) A novel fuzzy frame selection based watermarking scheme for MPEG-4 videos using bi-directional extreme learning machine. Appl Soft Comput 74:603\u2013620","journal-title":"Appl Soft Comput"},{"key":"11474_CR203","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s13640-019-0462-3","volume":"2019","author":"L Rakhmawati","year":"2019","unstructured":"Rakhmawati L, Wirawan W, Suwadi S (2019) A recent survey of self-embedding fragile watermarking scheme for image authentication with recovery capability. EURASIP J Image Video Process 2019:1\u201322","journal-title":"EURASIP J Image Video Process"},{"key":"11474_CR204","doi-asserted-by":"crossref","first-page":"603","DOI":"10.1016\/j.procs.2015.10.046","volume":"70","author":"A Rani","year":"2015","unstructured":"Rani A, Bhullar AK, Dangwal D, Kumar S (2015) A zero-watermarking scheme using discrete wavelet transform. Procedia Comput Sci 70:603\u2013609","journal-title":"Procedia Comput Sci"},{"key":"11474_CR205","doi-asserted-by":"crossref","unstructured":"Reimers N, Gurevych I (2019) Sentence-BERT: Sentence embeddings using siamese BERT-networks. In: EMNLP-IJCNLP, pp 3980\u20133990","DOI":"10.18653\/v1\/D19-1410"},{"key":"11474_CR206","doi-asserted-by":"crossref","unstructured":"Ren Y, Zhu H, Zhai L, Sun Z, Shen R, Wang L (2023) Who is speaking actually? robust and versatile speaker traceability for voice conversion. In: The 31st ACM international conference on multimedia, pp 8674\u20138685","DOI":"10.1145\/3581783.3612333"},{"key":"11474_CR207","first-page":"1","volume":"13","author":"M Rezayatmand","year":"2022","unstructured":"Rezayatmand M, Naghsh A (2022) Robust and semi-blind digital image watermarking method based on DWT and SVD. J Intell Proc Electric Technol 13:1\u201318","journal-title":"J Intell Proc Electric Technol"},{"key":"11474_CR208","doi-asserted-by":"crossref","first-page":"26813","DOI":"10.1007\/s11042-021-10886-0","volume":"80","author":"H Rhayma","year":"2021","unstructured":"Rhayma H, Makhloufi A, Hamam H, Hamida AB (2021) Semi-fragile watermarking scheme based on perceptual hash function (PHF) for image tampering detection. Multimed Tools Appl 80:26813\u201326832","journal-title":"Multimed Tools Appl"},{"key":"11474_CR209","doi-asserted-by":"crossref","unstructured":"Rombach R, Blattmann A, Lorenz D, Esser P, Ommer B (2022) High-resolution image synthesis with latent diffusion models. In: The IEEE\/CVF conference on computer vision and pattern recognition, pp 10684\u201310695","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"11474_CR210","doi-asserted-by":"crossref","unstructured":"Ronneberger O, Fischer P, Brox T (2015) U-Net: Convolutional networks for biomedical image segmentation. In: International conference on medical image computing and computer-assisted intervention, pp 234\u2013241. Springer","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"11474_CR211","doi-asserted-by":"crossref","first-page":"1850015","DOI":"10.1142\/S0219467818500158","volume":"18","author":"A Roy","year":"2018","unstructured":"Roy A, Maiti AK, Ghosh K (2018) An HVS inspired robust non-blind watermarking scheme in YCbCr color space. Int J Image Graph 18:1850015","journal-title":"Int J Image Graph"},{"key":"11474_CR212","doi-asserted-by":"crossref","unstructured":"Russakoff DB, Tomasi C, Rohlfing T, Maurer CR (2004) Image similarity using mutual information of regions. In: Computer vision-ECCV: 8th European conference on computer vision, pp 596\u2013607. Springer","DOI":"10.1007\/978-3-540-24672-5_47"},{"key":"11474_CR213","doi-asserted-by":"crossref","DOI":"10.1016\/j.apacoust.2020.107652","volume":"172","author":"E Salah","year":"2021","unstructured":"Salah E, Amine K, Redouane K, Fares K (2021) A fourier transform based audio watermarking algorithm. Appl Acoust 172:107652","journal-title":"Appl Acoust"},{"key":"11474_CR214","doi-asserted-by":"crossref","unstructured":"Sangwine SJ (1997). The discrete quaternion fourier transform","DOI":"10.1049\/cp:19971004"},{"key":"11474_CR215","unstructured":"Sato R, Takezawa Y, Bao H, Niwa K, Yamada M (2023) Embarrassingly simple text watermarks. arXiv preprint arXiv:2310.08920"},{"key":"11474_CR216","doi-asserted-by":"crossref","first-page":"469","DOI":"10.1016\/j.ifacol.2015.10.185","volume":"48","author":"T Shaikhina","year":"2015","unstructured":"Shaikhina T, Lowe D, Daga S, Briggs D, Higgins R, Khovanova N (2015) Machine learning for predictive modelling based on small data in biomedical engineering. IFAC-PapersOnLine 48:469\u2013474","journal-title":"IFAC-PapersOnLine"},{"key":"11474_CR217","doi-asserted-by":"crossref","first-page":"2464","DOI":"10.1109\/78.157290","volume":"40","author":"MJ Shensa","year":"1992","unstructured":"Shensa MJ et al (1992) The discrete wavelet transform: wedding the a trous and mallat algorithms. IEEE Trans Signal Process 40:2464\u20132482","journal-title":"IEEE Trans Signal Process"},{"key":"11474_CR218","doi-asserted-by":"crossref","unstructured":"Shetty A, Teng Y, He K, Xu Q (2024) WARDEN: Multi-directional backdoor watermarks for embedding-as-a-service copyright protection. In: Annual meeting of the association for computational linguistics, pp 13430\u201313444. ACL","DOI":"10.18653\/v1\/2024.acl-long.725"},{"key":"11474_CR219","volume":"58","author":"R Singh","year":"2021","unstructured":"Singh R, Ashok A (2021) An optimized robust watermarking technique using CKGSA in frequency domain. J Inf Secur Appl 58:102734","journal-title":"J Inf Secur Appl"},{"key":"11474_CR220","doi-asserted-by":"crossref","unstructured":"Singhal K, Tu T, Gottweis J, Sayres R, Wulczyn E, Hou L, Clark K, Pfohl S, Cole-Lewis H, Neal D et al (2025) Towards expert-level medical question answering with large language models. Nat Med 1\u20138","DOI":"10.1038\/s41591-024-03423-7"},{"key":"11474_CR221","doi-asserted-by":"crossref","first-page":"171","DOI":"10.1016\/j.patrec.2021.02.011","volume":"145","author":"R Sinhal","year":"2021","unstructured":"Sinhal R, Jain DK, Ansari IA (2021) Machine learning based blind color image watermarking scheme for copyright protection. Pattern Recogn Lett 145:171\u2013177","journal-title":"Pattern Recogn Lett"},{"key":"11474_CR222","doi-asserted-by":"crossref","first-page":"551","DOI":"10.1137\/1035134","volume":"35","author":"GW Stewart","year":"1993","unstructured":"Stewart GW (1993) On the early history of the singular value decomposition. SIAM Rev 35:551\u2013566","journal-title":"SIAM Rev"},{"key":"11474_CR223","doi-asserted-by":"crossref","first-page":"91","DOI":"10.1007\/s00500-017-2489-7","volume":"22","author":"Q Su","year":"2018","unstructured":"Su Q, Chen B (2018) Robust color image watermarking technique in the spatial domain. Soft Comput 22:91\u2013106","journal-title":"Soft Comput"},{"key":"11474_CR224","doi-asserted-by":"crossref","first-page":"12881","DOI":"10.1007\/s11042-020-10451-1","volume":"80","author":"GD Su","year":"2021","unstructured":"Su GD, Chang CC, Chen CC (2021) A hybrid-sudoku based fragile watermarking scheme for image tampering detection. Multimed Tools Appl 80:12881\u201312903","journal-title":"Multimed Tools Appl"},{"key":"11474_CR225","doi-asserted-by":"crossref","first-page":"194","DOI":"10.1016\/j.ins.2022.05.046","volume":"606","author":"Q Su","year":"2022","unstructured":"Su Q, Liu D, Sun Y (2022) A robust adaptive blind color image watermarking for resisting geometric attacks. Inf Sci 606:194\u2013212","journal-title":"Inf Sci"},{"key":"11474_CR226","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1109\/MP.2006.1649008","volume":"25","author":"S Subramanya","year":"2006","unstructured":"Subramanya S, Yi BK (2006) Digital rights management. IEEE Potentials 25:31\u201334","journal-title":"IEEE Potentials"},{"key":"11474_CR227","doi-asserted-by":"crossref","DOI":"10.1142\/4610","volume-title":"The discrete Fourier transform: theory, algorithms and applications","author":"D Sundararajan","year":"2001","unstructured":"Sundararajan D (2001) The discrete Fourier transform: theory, algorithms and applications. World Scientific, Singapore"},{"key":"11474_CR228","doi-asserted-by":"crossref","unstructured":"Sun L, Han Y, Zhao Z, Ma D, Shen Z, Chen B, Chen L, Yu K (2024) SciEval: A multi-level large language model evaluation benchmark for scientific research. In: The AAAI conference on artificial intelligence, pp 19053\u201319061","DOI":"10.1609\/aaai.v38i17.29872"},{"key":"11474_CR229","unstructured":"Sutskever I, Vinyals O, Le QV (2014) Sequence to sequence learning with neural networks. Adv Neural Inf Processing Syst 27"},{"key":"11474_CR230","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1016\/j.vlsi.2021.11.004","volume":"83","author":"M Swain","year":"2022","unstructured":"Swain M, Swain D (2022) An effective watermarking technique using BTC and SVD for image authentication and quality recovery. Integration 83:12\u201323","journal-title":"Integration"},{"key":"11474_CR231","unstructured":"SynthID-Text (2024). https:\/\/deepmind.google\/science\/synthid\/"},{"key":"11474_CR232","doi-asserted-by":"crossref","first-page":"2295","DOI":"10.1109\/JPROC.2017.2761740","volume":"105","author":"V Sze","year":"2017","unstructured":"Sze V, Chen YH, Yang TJ, Emer JS (2017) Efficient processing of deep neural networks: A tutorial and survey. Proc IEEE 105:2295\u20132329","journal-title":"Proc IEEE"},{"key":"11474_CR233","doi-asserted-by":"crossref","unstructured":"Szyller S, Atli BG, Marchal S, Asokan N (2021) DAWN: Dynamic adversarial watermarking of neural networks. In: The 29th ACM International Conference on Multimedia, pp 4417\u20134425","DOI":"10.1145\/3474085.3475591"},{"key":"11474_CR234","unstructured":"Takezawa Y, Sato R, Bao H, Niwa K, Yamada M (2023) Necessary and sufficient watermark for large language models. Transactions on machine learning research"},{"key":"11474_CR235","unstructured":"Tang Y, Yu J, Gai K, Qu X, Hu Y, Xiong G, Wu Q (2023) Watermarking vision-language pre-trained models for multi-modal embedding as a service. arXiv preprint arXiv:2311.05863"},{"key":"11474_CR236","doi-asserted-by":"crossref","first-page":"122","DOI":"10.1016\/S1665-6423(14)71612-8","volume":"12","author":"H Tao","year":"2014","unstructured":"Tao H, Chongmin L, Zain JM, Abdalla AN (2014) Robust image watermarking theories and techniques: A review. J Appl Res Technol 12:122\u2013138","journal-title":"J Appl Res Technol"},{"key":"11474_CR237","doi-asserted-by":"crossref","unstructured":"Tartaglione E, Grangetto M, Cavagnino D, Botta M (2021). Delving in the loss landscape to embed robust watermarks into neural networks. In: International conference on pattern recognition, pp 1243\u20131250. IEEE","DOI":"10.1109\/ICPR48806.2021.9413062"},{"key":"11474_CR238","doi-asserted-by":"crossref","first-page":"29119","DOI":"10.1007\/s11042-022-12079-9","volume":"81","author":"TM Thanh","year":"2022","unstructured":"Thanh TM, Dan GN (2022) Pseudo zero-watermarking technique based on non-blind watermarking and VSS. Multimed Tools Appl 81:29119\u201329136","journal-title":"Multimed Tools Appl"},{"key":"11474_CR239","doi-asserted-by":"crossref","first-page":"1930","DOI":"10.1038\/s41591-023-02448-8","volume":"29","author":"AJ Thirunavukarasu","year":"2023","unstructured":"Thirunavukarasu AJ, Ting DSJ, Elangovan K, Gutierrez L, Tan TF, Ting DSW (2023) Large language models in medicine. Nat Med 29:1930\u20131940","journal-title":"Nat Med"},{"key":"11474_CR240","unstructured":"Thoppilan R, De Freitas D, Hall J, Shazeer N, Kulshreshtha A, Cheng HT, Jin A, Bos T, Baker L, Du Y et al (2022) LaMDA: language models for dialog applications. arXiv preprint arXiv:2201.08239"},{"key":"11474_CR241","unstructured":"Touvron H, Lavril T, Izacard G, Martinet X, Lachaux MA, Lacroix T, Rozi\u00e8re B, Goyal N, Hambro E, Azhar F et al (2023) LLaMA: open and efficient foundation language models. arXiv preprint arXiv:2302.13971"},{"key":"11474_CR242","doi-asserted-by":"crossref","first-page":"257","DOI":"10.1049\/ecej:19950606","volume":"7","author":"P Tudor","year":"1995","unstructured":"Tudor P (1995) MPEG-2 video compression. Electron Commun Eng J 7:257\u2013264","journal-title":"Electron Commun Eng J"},{"key":"11474_CR243","doi-asserted-by":"crossref","unstructured":"Uchida Y, Nagai Y, Sakazawa S, Satoh S (2017) Embedding watermarks into deep neural networks. In: The ACM on international conference on multimedia retrieval, pp 269\u2013277","DOI":"10.1145\/3078971.3078974"},{"key":"11474_CR244","unstructured":"Umark Lite (2017). https:\/\/www.uconomix.com\/"},{"key":"11474_CR245","doi-asserted-by":"crossref","unstructured":"Van Schyndel RG, Tirkel AZ, Osborne CF (1994) A digital watermark. In: The 1st international conference on image processing, pp 86\u201390. IEEE","DOI":"10.1109\/ICIP.1994.413536"},{"key":"11474_CR246","unstructured":"Vaswani A, Shazeer N, Parmar N, Uszkoreit J, Jones L, Gomez AN, Kaiser \u0141, Polosukhin I (2017) Attention is all you need. Adv Neural Inf Process Syst 30"},{"key":"11474_CR247","doi-asserted-by":"crossref","unstructured":"Venkatesan R, Jakubowski MH (2000) Image watermarking with better resilience. In: International conference on image processing, IEEE. pp 403\u2013406","DOI":"10.1109\/ICIP.2000.900980"},{"key":"11474_CR248","doi-asserted-by":"crossref","unstructured":"Vielhauer C, Schott M (2006) Image annotation watermarking: nested object embedding using hypergraph model. In: The 8th workshop on multimedia and security, pp 182\u2013189","DOI":"10.1145\/1161366.1161399"},{"key":"11474_CR249","unstructured":"Visual watermark (2017). https:\/\/www.visualwatermark.com\/"},{"key":"11474_CR250","doi-asserted-by":"crossref","unstructured":"Voigt P, Von\u00a0dem Bussche A (2017). The eu eneral data protection regulation (gdpr). A practical guide, 1st ed. Springer, Cham, 10, 10\u20135555","DOI":"10.1007\/978-3-319-57959-7"},{"key":"11474_CR251","first-page":"7068349","volume":"2018","author":"A Voulodimos","year":"2018","unstructured":"Voulodimos A, Doulamis N, Doulamis A, Protopapadakis E (2018) Deep learning for computer vision: a brief review. Comput Intell Neurosci 2018:7068349","journal-title":"Comput Intell Neurosci"},{"key":"11474_CR252","doi-asserted-by":"crossref","unstructured":"Wagner MG (2000) Robust watermarking of polygonal meshes. Proceedings geometric modeling and processing, theory and applications, pp 201\u2013208. IEEE","DOI":"10.1109\/GMAP.2000.838252"},{"key":"11474_CR254","doi-asserted-by":"crossref","unstructured":"Wang T, Kerschbaum F (2019) Attacks on digital watermarks for deep neural networks. In: IEEE international conference on acoustics, speech and signal processing, pp 2622\u20132626. IEEE","DOI":"10.1109\/ICASSP.2019.8682202"},{"key":"11474_CR255","doi-asserted-by":"crossref","first-page":"619","DOI":"10.3390\/sym14030619","volume":"14","author":"Y Wang","year":"2022","unstructured":"Wang Y, Wu H (2022) Protecting the intellectual property of speaker recognition model by black-box watermarking in the frequency domain. Symmetry 14:619","journal-title":"Symmetry"},{"key":"11474_CR256","doi-asserted-by":"crossref","first-page":"387","DOI":"10.1007\/s00500-016-2474-6","volume":"22","author":"D Wang","year":"2018","unstructured":"Wang D, Tan D, Liu L (2018) Particle swarm optimization algorithm: an overview. Soft Comput 22:387\u2013408","journal-title":"Soft Comput"},{"key":"11474_CR257","first-page":"121475","volume":"37","author":"W Wang","year":"2024","unstructured":"Wang W, Lv Q, Yu W, Hong W, Qi J, Wang Y, Ji J, Yang Z, Zhao L, Song X et al (2024) CogVLM: Visual expert for pretrained language models. Adv Neural Inf Process Syst 37:121475\u2013121499","journal-title":"Adv Neural Inf Process Syst"},{"key":"11474_CR258","first-page":"1","volume":"58","author":"X Wang","year":"2025","unstructured":"Wang X, Jiang H, Yu Y, Yu J, Lin Y, Yi P, Wang Y, Qiao Y, Li L, Wang FY (2025) Building intelligence identification system via large language model watermarking: a survey and beyond. Artif Intell Rev 58:1\u201358","journal-title":"Artif Intell Rev"},{"key":"11474_CR259","unstructured":"Wang J, Lu X, Zhao Z, Dai Z, Foo CS, Ng SK, Low BKH (2023a) WASA: Watermark-based source attribution for large language model-generated data. In: Findings of the association for computational linguistics, ACL. pp 23791\u201323824"},{"key":"11474_CR260","unstructured":"Wang L, Yang W, Chen D, Zhou H, Lin Y, Meng F, Zhou J, Sun X (2023b) Towards codable text watermarking for large language models. arXiv preprint arXiv:2307.15992"},{"key":"11474_CR253","doi-asserted-by":"crossref","unstructured":"Wang, W,Bao, H,Dong, L,Bjorck, J,Peng, Z, Liu, Q,Aggarwal, K, Mohammed, O.K,Singhal, S, Som, S et\u00a0al., (2023c). Image as a foreign language: Beit pretraining for vision and vision-language tasks. In: The IEEE\/CVF conference on computer vision and pattern recognition, pp 19175\u201319186","DOI":"10.1109\/CVPR52729.2023.01838"},{"key":"11474_CR261","unstructured":"Watermarquee (2017). https:\/\/www.watermarquee.com\/"},{"key":"11474_CR262","doi-asserted-by":"crossref","unstructured":"Wei JTZ, Wang RY, Jia R (2024) Proving membership in LLM pretraining data via data watermarks 13306\u201313320","DOI":"10.18653\/v1\/2024.findings-acl.788"},{"key":"11474_CR263","doi-asserted-by":"crossref","unstructured":"Weidinger L, Uesato J, Rauh M, Griffin C, Huang PS, Mellor J, Glaese A, Cheng M, Balle B, Kasirzadeh A et al (2022) Taxonomy of risks posed by language models. In: ACM conference on fairness, accountability, and transparency, pp 214\u2013229","DOI":"10.1145\/3531146.3533088"},{"key":"11474_CR264","unstructured":"Wei J, Tay Y, Bommasani R, Raffel C, Zoph B, Borgeaud S, Yogatama D, Bosma M, Zhou D, Metzler D et al (2022) Emergent abilities of large language models. Trans Mach Learn Res"},{"key":"11474_CR265","unstructured":"Wen Y, Kirchenbauer J, Geiping J, Goldstein T (2023). Tree-Ring Watermarks: Fingerprints for diffusion images that are invisible and robust. arXiv preprint arXiv:2305.20030"},{"key":"11474_CR266","doi-asserted-by":"crossref","unstructured":"Wolfgang RB, Delp III, E.J, (1999) Fragile watermarking using the VW2D watermark. In: Security and Watermarking of Multimedia Contents, SPIE. pp 204\u2013213","DOI":"10.1117\/12.344670"},{"key":"11474_CR267","unstructured":"Wouters B (2024). Optimizing watermarks for large language models. In: International conference on machine learning, pp 53251\u201353269. PMLR"},{"key":"11474_CR268","unstructured":"WTM (2017). http:\/\/www.pearlmountainsoft.com\/watermark\/"},{"key":"11474_CR269","doi-asserted-by":"crossref","first-page":"2591","DOI":"10.1109\/TCSVT.2020.3030671","volume":"31","author":"H Wu","year":"2020","unstructured":"Wu H, Liu G, Yao Y, Zhang X (2020) Watermarking neural networks with watermarked images. IEEE Trans Circuits Syst Video Technol 31:2591\u20132601","journal-title":"IEEE Trans Circuits Syst Video Technol"},{"key":"11474_CR270","volume":"135","author":"J Wu","year":"2024","unstructured":"Wu J, Qi Z, Gan W (2024) MDGRL: multi-dimensional graph rule learning. Eng Appl Artif Intell 135:108818","journal-title":"Eng Appl Artif Intell"},{"key":"11474_CR271","unstructured":"Wu J, Gan W, Chen Z, Wan S, Lin H (2023a) AI-generated content (AIGC): a survey. arXiv preprint arXiv:2304.06632"},{"key":"11474_CR272","doi-asserted-by":"crossref","unstructured":"Wu J, Gan W, Chen Z, Wan S, Yu PS (2023b) Multimodal large language models: a survey. In: IEEE international conference on big data, pp 2247\u20132256. IEEE","DOI":"10.1109\/BigData59044.2023.10386743"},{"key":"11474_CR273","unstructured":"Wu Y, Hu Z, Zhang H, Huang H (2023d) DiPmark: A stealthy, efficient and resilient watermark for large language models. arXiv preprint arXiv:2310.07710"},{"key":"11474_CR274","unstructured":"Wu S, Irsoy O, Lu S, Dabravolski V, Dredze M, Gehrmann S, Kambadur P, Rosenberg D, Mann G (2023c) BloombergGPT: a large language model for finance. arXiv preprint arXiv:2303.17564"},{"key":"11474_CR275","doi-asserted-by":"crossref","unstructured":"Wu Y, Qiu H, Zhang T, Li J, Qiu M (2022) Watermarking pre-trained encoders in contrastive learning. In: International conference on data intelligence and security, pp 228\u2013233. IEEE","DOI":"10.1109\/ICDIS55630.2022.00042"},{"key":"11474_CR276","unstructured":"Xie J, Lu Y, Zhu SC, Wu Y (2016) A theory of generative convnet. In: International conference on machine learning, pp 2635\u20132644. PMLR"},{"key":"11474_CR277","doi-asserted-by":"crossref","unstructured":"Xie C, Yi P, Zhang B, Zou F (2021) DeepMark: embedding watermarks into deep neural network using pruning. In: International conference on tools with artificial intelligence, pp 169\u2013175. IEEE","DOI":"10.1109\/ICTAI52525.2021.00031"},{"key":"11474_CR278","doi-asserted-by":"crossref","unstructured":"Xu FF, Alon U, Neubig G, Hellendoorn VJ (2022) A systematic evaluation of large language models of code. In: The 6th ACM SIGPLAN international symposium on machine programming, pp 1\u201310","DOI":"10.1145\/3520312.3534862"},{"key":"11474_CR279","unstructured":"Xu HB, Wang R, Wei J, Lu SP (2021) A compact neural network-based algorithm for robust image watermarking. arXiv preprint arXiv:2112.13491"},{"key":"11474_CR280","doi-asserted-by":"crossref","first-page":"16497","DOI":"10.1007\/s10489-022-03339-0","volume":"52","author":"M Xue","year":"2022","unstructured":"Xue M, Sun S, Zhang Y, Wang J, Liu W (2022) Active intellectual property protection for deep neural networks through stealthy backdoor and users\u2019 identities authentication. Appl Intell 52:16497\u201316511","journal-title":"Appl Intell"},{"key":"11474_CR281","unstructured":"Xu H, Gan W, Qi Z, Wu J, Yu PS (2024) Large language models for education: a survey. arXiv preprint arXiv:2405.13001"},{"key":"11474_CR282","unstructured":"Yang X, Chen K, Zhang W, Liu C, Qi Y, Zhang J, Fang H, Yu N (2023b) Watermarking text generated by black-box language models. arXiv preprint arXiv:2305.08883"},{"key":"11474_CR283","unstructured":"Yang Z, Tang T, Dang H, Wu Z, Chang EC (2019) Effectiveness of distillation attack and countermeasure on neural network watermarking. IEEE Transactions on Dependable and Secure Computing"},{"key":"11474_CR284","doi-asserted-by":"crossref","unstructured":"Yang R, Li L, Gan W, Chen Z, Qi Z (2023a) The human-centric metaverse: a survey. In: Companion proceedings of the ACM web conference, pp 1296\u20131306","DOI":"10.1145\/3543873.3587593"},{"key":"11474_CR285","doi-asserted-by":"crossref","unstructured":"Yao Y, Duan J, Xu K, Cai Y, Sun Z, Zhang Y (2024) A survey on large language model (LLM) security and privacy: the good, the bad, and the ugly. High-Confidence Computing 100211","DOI":"10.1016\/j.hcc.2024.100211"},{"key":"11474_CR286","doi-asserted-by":"crossref","first-page":"1645","DOI":"10.1093\/comjnl\/bxu112","volume":"58","author":"M Yesilyurt","year":"2015","unstructured":"Yesilyurt M, Yalman Y, Ozcerit AT (2015) A robust watermarking method for mpeg-4 based on kurtosis. Comput J 58:1645\u20131655","journal-title":"Comput J"},{"key":"11474_CR287","doi-asserted-by":"crossref","unstructured":"Yeung MM, Mintzer F (1997) An invisible watermarking technique for image verification. In: International conference on image processing, pp 680\u2013683. IEEE","DOI":"10.1109\/ICIP.1997.638587"},{"key":"11474_CR288","doi-asserted-by":"crossref","first-page":"578","DOI":"10.1117\/1.482612","volume":"7","author":"MM Yeung","year":"1998","unstructured":"Yeung MM, Mintzer FC (1998) Invisible watermarking for image verification. J Electron Imaging 7:578\u2013591","journal-title":"J Electron Imaging"},{"key":"11474_CR289","doi-asserted-by":"crossref","unstructured":"Yeung M, Yeo BL (1998) Fragile watermarking of three-dimensional objects. In: International conference on image processing, IEEE. pp 442\u2013446","DOI":"10.1109\/ICIP.1998.723416"},{"key":"11474_CR290","doi-asserted-by":"crossref","unstructured":"Yin Z, Yin H, Zhang X (2022) Neural network fragile watermarking with no model performance degradation. In: International conference on image processing, pp 3958\u20133962. IEEE","DOI":"10.1109\/ICIP46576.2022.9897413"},{"key":"11474_CR291","doi-asserted-by":"crossref","unstructured":"Yoo K, Ahn W, Kwak N (2023) Advancing beyond identification: multi-bit watermark for language models. In: The conference of the North American chapter of the association for computational linguistics: human language technologies, pp 4031\u20134055","DOI":"10.18653\/v1\/2024.naacl-long.224"},{"key":"11474_CR292","doi-asserted-by":"crossref","DOI":"10.1016\/j.ijleo.2019.164152","volume":"204","author":"Z Yuan","year":"2020","unstructured":"Yuan Z, Liu D, Zhang X, Su Q (2020) New image blind watermarking method based on two-dimensional discrete cosine transform. Optik 204:164152","journal-title":"Optik"},{"key":"11474_CR293","doi-asserted-by":"crossref","first-page":"30557","DOI":"10.1007\/s11042-020-09499-w","volume":"79","author":"Z Yuan","year":"2020","unstructured":"Yuan Z, Liu D, Zhang X, Wang H, Su Q (2020) DCT-based color digital image blind watermarking method with variable steps. Multimed Tools Appl 79:30557\u201330581","journal-title":"Multimed Tools Appl"},{"key":"11474_CR294","doi-asserted-by":"crossref","first-page":"3829","DOI":"10.1049\/iet-ipr.2019.1740","volume":"14","author":"Z Yuan","year":"2020","unstructured":"Yuan Z, Su Q, Liu D, Zhang X, Yao T (2020) Fast and robust image watermarking method in the spatial domain. IET Image Proc 14:3829\u20133838","journal-title":"IET Image Proc"},{"key":"11474_CR295","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2023.121315","volume":"236","author":"Z Yuan","year":"2024","unstructured":"Yuan Z, Zhang X, Wang Z, Yin Z (2024) Semi-fragile neural network watermarking for content authentication and tampering localization. Expert Syst Appl 236:121315","journal-title":"Expert Syst Appl"},{"key":"11474_CR296","unstructured":"Yu S, Hong J, Zhang H, Wang H, Wang Z, Zhou J (2023) Safe and robust watermark injection with a single OoD image. In: The twelfth international conference on learning representations"},{"key":"11474_CR297","doi-asserted-by":"crossref","unstructured":"Yu N, Skripniuk V, Abdelnabi S, Fritz M (2021) Artificial fingerprinting for generative models: rooting deepfake attribution in training data. In: The IEEE\/CVF international conference on computer vision, pp 14448\u201314457","DOI":"10.1109\/ICCV48922.2021.01418"},{"key":"11474_CR298","unstructured":"Zeng F, Gan W, Wang Y, Liu N, Yu PS (2023a) Large language models for robotics: a survey. arXiv preprint arXiv:2311.07226"},{"key":"11474_CR299","doi-asserted-by":"crossref","unstructured":"Zeng F, Gan W, Wang Y, Yu PS (2023) Distributed training of large language models. In: IEEE 29th international conference on parallel and distributed systems, pp 840\u2013847","DOI":"10.1109\/ICPADS60453.2023.00126"},{"key":"11474_CR300","first-page":"4005","volume":"44","author":"J Zhang","year":"2021","unstructured":"Zhang J, Chen D, Liao J, Zhang W, Feng H, Hua G, Yu N (2021) Deep model intellectual property protection via deep watermarking. IEEE Trans Pattern Anal Mach Intell 44:4005\u20134020","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"11474_CR301","doi-asserted-by":"crossref","first-page":"1182","DOI":"10.1109\/TIFS.2023.3236456","volume":"18","author":"G Zhang","year":"2023","unstructured":"Zhang G, Zheng L, Su Z, Zeng Y, Wang G (2023) M-sequences and sliding window based audio watermarking robust against large-scale cropping attacks. IEEE Trans Inf Forensics Secur 18:1182\u20131195","journal-title":"IEEE Trans Inf Forensics Secur"},{"key":"11474_CR302","doi-asserted-by":"crossref","unstructured":"Zhang J, Chen D, Liao J, Fang H, Zhang W, Zhou W, Cui H, Yu N (2020) Model watermarking for image processing networks. In: The AAAI conference on artificial intelligence, pp 12805\u201312812","DOI":"10.1609\/aaai.v34i07.6976"},{"key":"11474_CR303","doi-asserted-by":"crossref","unstructured":"Zhang J, Gu Z, Jang J, Wu H, Stoecklin MP, Huang H, Molloy I (2018) Protecting intellectual property of deep neural networks with watermarking. In: Asia conference on computer and communications security, pp 159\u2013172","DOI":"10.1145\/3196494.3196550"},{"key":"11474_CR304","unstructured":"Zhang R, Hussain SS, Neekhara P, Koushanfar F (2024) REMARK-LLM: a robust and efficient watermarking framework for generative large language models. In: 33rd USENIX security symposium, pp 1813\u20131830"},{"key":"11474_CR305","unstructured":"Zhang R, Javidnia N, Sheybani N, Koushanfar F (2025) Robust and secure code watermarking for large language models via ML\/crypto codesign. arXiv preprint arXiv:2502.02068"},{"key":"11474_CR306","doi-asserted-by":"crossref","unstructured":"Zhang R, Koushanfar F (2024) EmMark: robust watermarks for IP protection of embedded quantized large language models. In: The 61st ACM\/IEEE design automation conference, pp 1\u20136","DOI":"10.1145\/3649329.3655674"},{"key":"11474_CR307","doi-asserted-by":"crossref","unstructured":"Zhang R, Koushanfar F (2024) Watermarking large language models and the generated content: opportunities and challenges. In: 58th Asilomar conference on signals, systems, and computers, pp 1779\u20131786. IEEE","DOI":"10.1109\/IEEECONF60004.2024.10942607"},{"key":"11474_CR308","unstructured":"Zhao WX, Zhou K, Li J, Tang T, Wang X, Hou Y, Min Y, Zhang B, Zhang J, Dong Z et al (2023) A survey of large language models. arXiv preprint arXiv:2303.18223"},{"key":"11474_CR309","volume-title":"Robust and semi-fragile watermarking techniques for image content protection","author":"X Zhao","year":"2011","unstructured":"Zhao X (2011) Robust and semi-fragile watermarking techniques for image content protection. University of Surrey, Guildford"},{"key":"11474_CR310","unstructured":"Zhao X, Ananth P, Li L, Wang YX (2023) Provable robust watermarking for AI-generated text. In: The Twelfth international conference on learning representations"},{"key":"11474_CR311","unstructured":"Zhao X, Wang YX, Li L (2023) Protecting language generation models via invisible watermarking. In: International conference on machine learning, pp 42187\u201342199. PMLR"},{"key":"11474_CR312","doi-asserted-by":"crossref","unstructured":"Zhao X, Yao Y, Wu H, Zhang X (2021) Structural watermarking to deep neural networks via network channel pruning. In: International workshop on information forensics and security, pp 1\u20136. IEEE","DOI":"10.1109\/WIFS53200.2021.9648376"},{"key":"11474_CR313","doi-asserted-by":"crossref","first-page":"18343","DOI":"10.1007\/s11042-019-08490-4","volume":"79","author":"P Zheng","year":"2020","unstructured":"Zheng P, Zhang Y (2020) A robust image watermarking scheme in hybrid transform domains resisting to rotation attacks. Multimed Tools Appl 79:18343\u201318365","journal-title":"Multimed Tools Appl"},{"key":"11474_CR314","doi-asserted-by":"crossref","unstructured":"Zheng Y, Gan W, Chen Z, Qi Z, Liang Q, Yu PS (2024) Large language models for medicine: a survey. Int J Mach Learn Cybern, pp 1\u201326","DOI":"10.20517\/ir.2024.27"},{"key":"11474_CR315","doi-asserted-by":"crossref","unstructured":"Zhu C, Galjaard J, Chen PY, Chen LY (2024) Duwak: dual watermarks in large language models. In: Annual meeting of the association for computational linguistics","DOI":"10.18653\/v1\/2024.findings-acl.678"}],"container-title":["Artificial Intelligence Review"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10462-025-11474-6","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10462-025-11474-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10462-025-11474-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,19]],"date-time":"2026-02-19T05:48:10Z","timestamp":1771480090000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10462-025-11474-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,1,5]]},"references-count":315,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2026,2]]}},"alternative-id":["11474"],"URL":"https:\/\/doi.org\/10.1007\/s10462-025-11474-6","relation":{},"ISSN":["1573-7462"],"issn-type":[{"value":"1573-7462","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,1,5]]},"assertion":[{"value":"31 August 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 December 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 January 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"74"}}