{"id":"https://openalex.org/W4417064600","doi":"https://doi.org/10.1145/3773028","title":"Securing Large Language Models: A Survey of Watermarking and Fingerprinting Techniques","display_name":"Securing Large Language Models: A Survey of Watermarking and Fingerprinting Techniques","publication_year":2025,"publication_date":"2025-12-05","ids":{"openalex":"https://openalex.org/W4417064600","doi":"https://doi.org/10.1145/3773028"},"language":"en","primary_location":{"id":"doi:10.1145/3773028","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3773028","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030828257","display_name":"Pei-Gen Ye","orcid":"https://orcid.org/0009-0004-9570-7566"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peigen Ye","raw_affiliation_strings":["Beijing Institute of Technology"],"raw_orcid":"https://orcid.org/0009-0004-9570-7566","affiliations":[{"raw_affiliation_string":"Beijing Institute of Technology","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109725004","display_name":"Huali Ren","orcid":"https://orcid.org/0009-0000-5823-8343"},"institutions":[{"id":"https://openalex.org/I4210142167","display_name":"DigitalSpace (United States)","ror":"https://ror.org/04h1th525","country_code":"US","type":"company","lineage":["https://openalex.org/I4210142167"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Huali Ren","raw_affiliation_strings":["School of Cyberspace Security, Guangzhou University"],"raw_orcid":"https://orcid.org/0009-0000-5823-8343","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Guangzhou University","institution_ids":["https://openalex.org/I4210142167"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101635376","display_name":"Zhengdao Li","orcid":"https://orcid.org/0000-0003-1534-3658"},"institutions":[{"id":"https://openalex.org/I4210164862","display_name":"Artificial Intelligence in Medicine (Canada)","ror":"https://ror.org/05p590m36","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210164862"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Zhengdao Li","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University"],"raw_orcid":"https://orcid.org/0000-0003-1534-3658","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University","institution_ids":["https://openalex.org/I4210164862"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067313044","display_name":"Anli Yan","orcid":"https://orcid.org/0000-0002-2854-2931"},"institutions":[{"id":"https://openalex.org/I4210164862","display_name":"Artificial Intelligence in Medicine (Canada)","ror":"https://ror.org/05p590m36","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210164862"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Anli Yan","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University"],"raw_orcid":"https://orcid.org/0000-0002-2854-2931","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University","institution_ids":["https://openalex.org/I4210164862"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055842190","display_name":"Hongyang Yan","orcid":"https://orcid.org/0000-0002-1493-9671"},"institutions":[{"id":"https://openalex.org/I4210164862","display_name":"Artificial Intelligence in Medicine (Canada)","ror":"https://ror.org/05p590m36","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210164862"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Hongyang Yan","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University"],"raw_orcid":"https://orcid.org/0000-0002-1493-9671","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University","institution_ids":["https://openalex.org/I4210164862"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100664830","display_name":"Shaowei Wang","orcid":"https://orcid.org/0000-0003-1577-1193"},"institutions":[{"id":"https://openalex.org/I4210164862","display_name":"Artificial Intelligence in Medicine (Canada)","ror":"https://ror.org/05p590m36","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210164862"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Shaowei Wang","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University"],"raw_orcid":"https://orcid.org/0000-0003-1577-1193","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University","institution_ids":["https://openalex.org/I4210164862"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100364826","display_name":"Jin Li","orcid":"https://orcid.org/0000-0003-1279-3418"},"institutions":[{"id":"https://openalex.org/I4210164862","display_name":"Artificial Intelligence in Medicine (Canada)","ror":"https://ror.org/05p590m36","country_code":"CA","type":"company","lineage":["https://openalex.org/I4210164862"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Jin Li","raw_affiliation_strings":["School of Artificial Intelligence, Guangzhou University"],"raw_orcid":"https://orcid.org/0000-0003-1279-3418","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Guangzhou University","institution_ids":["https://openalex.org/I4210164862"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14067282,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"58","issue":"7","first_page":"1","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7314000129699707,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7314000129699707,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.039900001138448715,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.027000000700354576,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8637999892234802},{"id":"https://openalex.org/keywords/fingerprint","display_name":"Fingerprint (computing)","score":0.5703999996185303},{"id":"https://openalex.org/keywords/intellectual-property","display_name":"Intellectual property","score":0.5099999904632568},{"id":"https://openalex.org/keywords/sophistication","display_name":"Sophistication","score":0.4943999946117401},{"id":"https://openalex.org/keywords/ingenuity","display_name":"Ingenuity","score":0.4878999888896942},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4595000147819519},{"id":"https://openalex.org/keywords/digital-watermarking-alliance","display_name":"Digital Watermarking Alliance","score":0.415800005197525},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.41280001401901245}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8637999892234802},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8126999735832214},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7045999765396118},{"id":"https://openalex.org/C2777826928","wikidata":"https://www.wikidata.org/wiki/Q3745713","display_name":"Fingerprint (computing)","level":2,"score":0.5703999996185303},{"id":"https://openalex.org/C34974158","wikidata":"https://www.wikidata.org/wiki/Q131257","display_name":"Intellectual property","level":2,"score":0.5099999904632568},{"id":"https://openalex.org/C168725872","wikidata":"https://www.wikidata.org/wiki/Q991663","display_name":"Sophistication","level":2,"score":0.4943999946117401},{"id":"https://openalex.org/C2778154381","wikidata":"https://www.wikidata.org/wiki/Q105296908","display_name":"Ingenuity","level":2,"score":0.4878999888896942},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4595000147819519},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42320001125335693},{"id":"https://openalex.org/C193470923","wikidata":"https://www.wikidata.org/wiki/Q5276026","display_name":"Digital Watermarking Alliance","level":4,"score":0.415800005197525},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.41280001401901245},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.38659998774528503},{"id":"https://openalex.org/C134537474","wikidata":"https://www.wikidata.org/wiki/Q17144832","display_name":"Naturalness","level":2,"score":0.3772999942302704},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.3540000021457672},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.3237000107765198},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.323199987411499},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3192000091075897},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3154999911785126},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3107999861240387},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.3068999946117401},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C2779545769","wikidata":"https://www.wikidata.org/wiki/Q5135364","display_name":"Closeness","level":2,"score":0.27799999713897705},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.2615000009536743},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2578999996185303},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.2556000053882599}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3773028","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3773028","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2215088380","display_name":null,"funder_award_id":"U23A20307","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1978394996","https://openalex.org/W2164736805","https://openalex.org/W2994624247","https://openalex.org/W3048094199","https://openalex.org/W3091781356","https://openalex.org/W3113058464","https://openalex.org/W3159611211","https://openalex.org/W3159832730","https://openalex.org/W4224060672","https://openalex.org/W4283213255","https://openalex.org/W4285180101","https://openalex.org/W4292993844","https://openalex.org/W4298110689","https://openalex.org/W4311623198","https://openalex.org/W4319831446","https://openalex.org/W4323050332","https://openalex.org/W4379207975","https://openalex.org/W4383199672","https://openalex.org/W4387440625","https://openalex.org/W4391576291","https://openalex.org/W4391876565","https://openalex.org/W4402169037"],"related_works":[],"abstract_inverted_index":{"State-of-the-art":[0],"watermarking":[1,32,54],"and":[2,44,59,89,135,144],"fingerprinting":[3,68],"techniques":[4,33,69],"for":[5,97,110],"Large":[6],"Language":[7],"Models":[8],"(LLMs)":[9],"are":[10],"explored,":[11],"with":[12],"our":[13,65],"analysis":[14],"spanning":[15],"a":[16,127],"wide":[17],"array":[18],"of":[19,27,31,53,67,83,106,115,119],"methodologies":[20],"designed":[21],"to":[22,76,94,125],"protect":[23],"the":[24,40,51,71,81,104,116],"intellectual":[25,142],"property":[26,143],"LLMs.":[28,78],"The":[29],"review":[30],"is":[34,149],"based":[35,85],"on":[36,62,86],"embedding":[37],"watermarks":[38],"during":[39],"training,":[41],"logits":[42],"generation,":[43],"token":[45],"sampling":[46],"phases.":[47],"Meanwhile,":[48],"we":[49],"investigate":[50],"application":[52],"technology":[55],"in":[56,113,130],"multimodal":[57],"LLMs":[58,123],"potential":[60],"attacks":[61],"watermarks.":[63],"Moreover,":[64],"examination":[66],"revealed":[70],"ingenuity":[72],"behind":[73],"methods":[74],"used":[75],"identify":[77],"We":[79],"discussed":[80],"development":[82],"fingerprints":[84],"model":[87],"behavior":[88],"using":[90],"deep":[91],"learning":[92],"models":[93],"learn":[95],"thresholds":[96],"fingerprint":[98],"comparison.":[99],"Our":[100],"survey":[101],"has":[102],"underscored":[103],"importance":[105],"advancing":[107,131],"security":[108,137],"measures":[109,138],"LLMs,":[111],"especially":[112],"light":[114],"increasing":[117],"sophistication":[118],"adversarial":[120],"attacks.":[121],"As":[122],"continue":[124],"play":[126],"pivotal":[128],"role":[129],"AI":[132],"technologies,":[133],"developing":[134],"refining":[136],"that":[139],"safeguard":[140],"their":[141,146],"ensure":[145],"ethical":[147],"deployment":[148],"imperative.":[150]},"counts_by_year":[],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-12-05T00:00:00"}