{"id":"https://openalex.org/W4412876959","doi":"https://doi.org/10.1145/3711896.3736841","title":"An Efficient White-box LLM Watermarking for IP Protection on Online Market Platforms","display_name":"An Efficient White-box LLM Watermarking for IP Protection on Online Market Platforms","publication_year":2025,"publication_date":"2025-08-03","ids":{"openalex":"https://openalex.org/W4412876959","doi":"https://doi.org/10.1145/3711896.3736841"},"language":"en","primary_location":{"id":"doi:10.1145/3711896.3736841","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3711896.3736841","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3711896.3736841","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.2","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3711896.3736841","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023366723","display_name":"Shuguang Yuan","orcid":"https://orcid.org/0000-0002-1312-8762"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuguang Yuan","raw_affiliation_strings":["State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1312-8762","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038845099","display_name":"Xingyu Su","orcid":null},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingyu Su","raw_affiliation_strings":["State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Science, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0009-4306-2336","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Science, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046057883","display_name":"Peizhuo Lv","orcid":"https://orcid.org/0000-0002-2671-4314"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Peizhuo Lv","raw_affiliation_strings":["College of Computing and Data Science, Nanyang Technological University, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-2671-4314","affiliations":[{"raw_affiliation_string":"College of Computing and Data Science, Nanyang Technological University, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Weiji Xue","orcid":"https://orcid.org/0009-0009-0763-822X"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiji Xue","raw_affiliation_strings":["State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Science, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0009-0763-822X","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Science, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101408278","display_name":"Jing Yu","orcid":"https://orcid.org/0000-0003-0441-3251"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Yu","raw_affiliation_strings":["State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Science, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-0441-3251","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Science, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103096351","display_name":"Xiaojie Zhu","orcid":"https://orcid.org/0000-0002-2954-7267"},"institutions":[{"id":"https://openalex.org/I71920554","display_name":"King Abdullah University of Science and Technology","ror":"https://ror.org/01q3tbs38","country_code":"SA","type":"education","lineage":["https://openalex.org/I71920554"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Xiaojie Zhu","raw_affiliation_strings":["King Abdullah University of Science and Technology, Jeddah, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-2954-7267","affiliations":[{"raw_affiliation_string":"King Abdullah University of Science and Technology, Jeddah, Saudi Arabia","institution_ids":["https://openalex.org/I71920554"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100435615","display_name":"Chi Chen","orcid":"https://orcid.org/0000-0001-5491-0542"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chi Chen","raw_affiliation_strings":["State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Science, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-5491-0542","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Science, Beijing, China","institution_ids":["https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3680","last_page":"3691"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8914889097213745},{"id":"https://openalex.org/keywords/white-box","display_name":"White box","score":0.5896219611167908},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5801875591278076},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5385483503341675},{"id":"https://openalex.org/keywords/white","display_name":"White (mutation)","score":0.446943998336792},{"id":"https://openalex.org/keywords/white-paper","display_name":"White paper","score":0.4190866947174072},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.3286336064338684},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1671205461025238},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.08983507752418518},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.08853700757026672},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.057728976011276245}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8914889097213745},{"id":"https://openalex.org/C180932941","wikidata":"https://www.wikidata.org/wiki/Q997233","display_name":"White box","level":2,"score":0.5896219611167908},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5801875591278076},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5385483503341675},{"id":"https://openalex.org/C56273599","wikidata":"https://www.wikidata.org/wiki/Q3122841","display_name":"White (mutation)","level":3,"score":0.446943998336792},{"id":"https://openalex.org/C2778605646","wikidata":"https://www.wikidata.org/wiki/Q223729","display_name":"White paper","level":2,"score":0.4190866947174072},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.3286336064338684},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1671205461025238},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.08983507752418518},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.08853700757026672},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.057728976011276245},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3711896.3736841","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3711896.3736841","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3711896.3736841","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.2","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3711896.3736841","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3711896.3736841","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3711896.3736841","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.2","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.44999998807907104,"display_name":"Clean water and sanitation","id":"https://metadata.un.org/sdg/6"}],"awards":[{"id":"https://openalex.org/G7699199402","display_name":null,"funder_award_id":"XDB0690303","funder_id":"https://openalex.org/F4320321133","funder_display_name":"Chinese Academy of Sciences"}],"funders":[{"id":"https://openalex.org/F4320321133","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412876959.pdf","grobid_xml":"https://content.openalex.org/works/W4412876959.grobid-xml"},"referenced_works_count":17,"referenced_works":["https://openalex.org/W2579318729","https://openalex.org/W2899585792","https://openalex.org/W2935349488","https://openalex.org/W2946609015","https://openalex.org/W2963015836","https://openalex.org/W2981852735","https://openalex.org/W2998617917","https://openalex.org/W3025612445","https://openalex.org/W3083615244","https://openalex.org/W3156011647","https://openalex.org/W4288089799","https://openalex.org/W4320005719","https://openalex.org/W4381586827","https://openalex.org/W4382317564","https://openalex.org/W4404133181","https://openalex.org/W4404515056","https://openalex.org/W4406650295"],"related_works":["https://openalex.org/W2361629745","https://openalex.org/W2107922825","https://openalex.org/W2184303792","https://openalex.org/W2057120879","https://openalex.org/W616705313","https://openalex.org/W2171811465","https://openalex.org/W1985490921","https://openalex.org/W2120580112","https://openalex.org/W2492325008","https://openalex.org/W1537681400"],"abstract_inverted_index":{"Online":[0],"market":[1],"platforms":[2,47],"serve":[3],"as":[4,62,102,134,136],"a":[5],"central":[6],"hub":[7],"for":[8,153,207],"sharing":[9],"and":[10,17,34,78,128,169,191,203,222],"deploying":[11],"AI":[12],"models":[13,39,208],"among":[14],"researchers,":[15],"developers,":[16],"companies.":[18],"In":[19,85],"this":[20,86],"context,":[21],"watermarking":[22,53,69,94],"techniques":[23,54],"are":[24,55,144],"essential":[25],"to":[26,58,160],"protect":[27],"intellectual":[28],"property":[29],"(IP),":[30],"preventing":[31],"unauthorized":[32],"use":[33],"duplication":[35],"of":[36,164],"large":[37],"language":[38],"(LLMs).":[40],"Two":[41],"key":[42],"challenges":[43],"arise:":[44],"(i)":[45],"These":[46],"host":[48],"diverse":[49],"LLMs,":[50],"yet":[51],"current":[52],"only":[56,108],"tailored":[57],"specific":[59],"models,":[60],"such":[61],"fine-tuned":[63],"or":[64],"quantized":[65],"LLMs.":[66,171],"(ii)":[67],"Efficient":[68],"is":[70],"critical.":[71],"However,":[72],"traditional":[73],"methods":[74],"require":[75],"substantial":[76],"data":[77],"costly":[79],"hardware,":[80],"which":[81],"limits":[82],"their":[83],"feasibility.":[84],"paper,":[87],"we":[88],"propose":[89],"an":[90],"efficient":[91,152],"white-box":[92],"LLM":[93],"technique":[95],"called":[96],"ELLMark.":[97],"This":[98],"method":[99],"treats":[100],"LLMs":[101],"multi-layered":[103],"matrices":[104],"while":[105,183],"embedding":[106],"watermarks":[107],"relies":[109],"on":[110,166],"modifying":[111],"the":[112,125,162,188],"model's":[113],"weights.":[114],"To":[115],"preserve":[116],"LLMs'":[117],"performance,":[118],"it":[119,151,176,213],"filters":[120],"weights":[121,133],"by":[122],"correlations":[123],"with":[124,146,209],"activation":[126],"magnitudes":[127],"downstream":[129],"tasks,":[130],"then":[131],"modifies":[132],"minimal":[135],"possible":[137],"via":[138],"histogram":[139],"modulation.":[140],"Notably,":[141],"all":[142],"phases":[143],"training-free":[145],"low":[147],"hardware":[148],"resources,":[149],"making":[150],"online":[154],"platforms.":[155],"We":[156],"conduct":[157],"extensive":[158],"experiments":[159],"evaluate":[161],"effectiveness":[163],"ELLMark":[165],"LLaMA-3,":[167],"OPT,":[168],"Phi-3":[170],"The":[172],"results":[173],"demonstrate":[174],"that":[175],"achieves":[177],"100%":[178],"success":[179],"in":[180],"watermark":[181],"detection":[182],"preserving":[184],"model":[185],"performance.":[186],"Moreover,":[187],"preprocessing,":[189],"encoding,":[190],"decoding":[192],"processes":[193],"remain":[194],"efficient,":[195],"taking":[196],"less":[197],"than":[198],"7":[199],"minutes,":[200,202],"12":[201],"18":[204],"seconds,":[205],"respectively,":[206],"80B":[210],"parameters.":[211],"Lastly,":[212],"exhibits":[214],"robustness":[215],"against":[216],"parameter":[217],"overwriting,":[218],"re-watermarking,":[219],"forging,":[220],"fine-tuning,":[221],"pruning":[223],"attacks.":[224]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}