{"id":"https://openalex.org/W4402671837","doi":"https://doi.org/10.18653/v1/2024.acl-long.464","title":"Bypassing LLM Watermarks with Color-Aware Substitutions","display_name":"Bypassing LLM Watermarks with Color-Aware Substitutions","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4402671837","doi":"https://doi.org/10.18653/v1/2024.acl-long.464"},"language":"en","primary_location":{"id":"doi:10.18653/v1/2024.acl-long.464","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2024.acl-long.464","pdf_url":"https://aclanthology.org/2024.acl-long.464.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2024.acl-long.464.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040587076","display_name":"Qilong Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qilong Wu","raw_affiliation_strings":["University of Illinois Urbana-Champaign"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois Urbana-Champaign","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5009092703","display_name":"Varun Chandrasekaran","orcid":"https://orcid.org/0000-0003-0661-6378"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Varun Chandrasekaran","raw_affiliation_strings":["University of Illinois Urbana-Champaign"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois Urbana-Champaign","institution_ids":["https://openalex.org/I157725225"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I157725225"],"apc_list":null,"apc_paid":null,"fwci":1.5537,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.87625705,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"8549","last_page":"8581"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10601","display_name":"Handwritten Text Recognition Techniques","score":0.9793999791145325,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10601","display_name":"Handwritten Text Recognition Techniques","score":0.9793999791145325,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13999","display_name":"Digital Rights Management and Security","score":0.9663000106811523,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10215","display_name":"Semantic Web and Ontologies","score":0.9509000182151794,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6810609102249146},{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.5102612972259521},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.36331748962402344},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3307077884674072},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.10471829771995544}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6810609102249146},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.5102612972259521},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.36331748962402344},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3307077884674072},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.10471829771995544}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2024.acl-long.464","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2024.acl-long.464","pdf_url":"https://aclanthology.org/2024.acl-long.464.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2024.acl-long.464","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2024.acl-long.464","pdf_url":"https://aclanthology.org/2024.acl-long.464.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4402671837.pdf","grobid_xml":"https://content.openalex.org/works/W4402671837.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2058170566","https://openalex.org/W2755342338","https://openalex.org/W2772917594","https://openalex.org/W2775347418","https://openalex.org/W2166024367","https://openalex.org/W3116076068","https://openalex.org/W2229312674","https://openalex.org/W2951359407","https://openalex.org/W2079911747","https://openalex.org/W1969923398"],"abstract_inverted_index":{"Watermarking":[0],"approaches":[1],"are":[2],"proposed":[3],"to":[4,27,52,90],"identify":[5],"if":[6],"text":[7,57],"being":[8],"circulated":[9],"is":[10,44],"human-or":[11],"large":[12],"language":[13],"model-(LLM)":[14],"generated.The":[15],"stateof-the-art":[16],"watermarking":[17,37],"strategy":[18],"of":[19,35,111],"Kirchenbauer":[20],"et":[21],"al.":[22],"(2023a)":[23],"biases":[24],"the":[25,33,69,79,126],"LLM":[26,81],"generate":[28],"specific":[29],"(\"green\")":[30],"tokens.However,":[31],"determining":[32],"robustness":[34],"this":[36,88],"method":[38],"under":[39],"finite":[40],"(low)":[41],"edit":[42],"budgets":[43],"an":[45],"open":[46],"problem.Additionally,":[47],"existing":[48],"attack":[49],"methods":[50],"fail":[51],"evade":[53],"detection":[54,107],"for":[55,128],"longer":[56],"segments.We":[58],"overcome":[59],"these":[60],"limitations,":[61],"and":[62,82,94,120],"propose":[63],"Self":[64],"Color":[65],"Testing-based":[66],"Substitution":[67],"(SCTS),":[68],"first":[70],"\"color-aware\"":[71],"attack.SCTS":[72],"obtains":[73],"color":[74],"information":[75,89],"by":[76],"strategically":[77],"prompting":[78],"watermarked":[80,131],"comparing":[83],"output":[84],"tokens":[85,97],"frequencies.It":[86],"uses":[87],"determine":[91],"token":[92],"colors,":[93],"substitutes":[95],"green":[96],"with":[98],"non-green":[99],"ones.In":[100],"our":[101],"experiments,":[102],"SCTS":[103,123],"successfully":[104],"evades":[105],"watermark":[106,127],"using":[108],"fewer":[109],"number":[110],"edits":[112],"than":[113],"related":[114],"work.Additionally,":[115],"we":[116],"show":[117],"both":[118],"theoretically":[119],"empirically":[121],"that":[122],"can":[124],"remove":[125],"arbitrarily":[129],"long":[130],"text.":[132]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3}],"updated_date":"2026-08-08T01:25:22.217667","created_date":"2025-10-10T00:00:00"}