{"id":"https://openalex.org/W7139915730","doi":"https://doi.org/10.48550/arxiv.2603.18793","title":"Functional Subspace Watermarking for Large Language Models","display_name":"Functional Subspace Watermarking for Large Language Models","publication_year":2026,"publication_date":"2026-03-19","ids":{"openalex":"https://openalex.org/W7139915730","doi":"https://doi.org/10.48550/arxiv.2603.18793"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.18793","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18793","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.18793","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007811234","display_name":"Zikang Ding","orcid":"https://orcid.org/0000-0001-7204-5724"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ding, Zikang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130225594","display_name":"Junhao Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Junhao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113171733","display_name":"Suling Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Suling","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130227631","display_name":"Junchi Yao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yao, Junchi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130228399","display_name":"Hongbo Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Hongbo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5130218767","display_name":"Lijie Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Lijie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8349000215530396,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8349000215530396,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.03269999846816063,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.01209999993443489,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8294000029563904},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8062000274658203},{"id":"https://openalex.org/keywords/subspace-topology","display_name":"Subspace topology","score":0.6550999879837036},{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.5697000026702881},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.39480000734329224},{"id":"https://openalex.org/keywords/constraint","display_name":"Constraint (computer-aided design)","score":0.3783999979496002}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8294000029563904},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8062000274658203},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6811000108718872},{"id":"https://openalex.org/C32834561","wikidata":"https://www.wikidata.org/wiki/Q660730","display_name":"Subspace topology","level":2,"score":0.6550999879837036},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.5697000026702881},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48989999294281006},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4154999852180481},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3968000113964081},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.39480000734329224},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.3783999979496002},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.33340001106262207},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.3260999917984009},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.31619998812675476},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3041999936103821},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2969000041484833},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.2953000068664551},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.26260000467300415}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.18793","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18793","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.18793","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18793","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Model":[0],"watermarking":[1],"utilizes":[2],"internal":[3],"representations":[4],"to":[5,81,97,114],"protect":[6],"the":[7,122],"ownership":[8,66],"of":[9],"large":[10],"language":[11],"models":[12],"(LLMs).":[13],"However,":[14],"these":[15],"features":[16],"inevitably":[17],"undergo":[18],"complex":[19],"distortions":[20],"during":[21],"realistic":[22],"model":[23,105,147],"modifications":[24],"such":[25],"as":[26],"fine-tuning,":[27],"quantization,":[28],"or":[29],"knowledge":[30],"distillation,":[31],"making":[32],"reliable":[33],"extraction":[34],"extremely":[35],"challenging.":[36],"Despite":[37],"extensive":[38],"research":[39],"on":[40],"model-side":[41],"watermarking,":[42],"existing":[43,153],"methods":[44],"still":[45],"lack":[46],"sufficient":[47],"robustness":[48,103,150],"against":[49],"parameter-level":[50],"perturbations.":[51],"To":[52],"address":[53],"this":[54],"gap,":[55],"we":[56,74],"propose":[57],"\\texttt{\\textbf{Functional":[58],"Subspace":[59],"Watermarking":[60],"(FSW)}},":[61],"a":[62,69,77,83,108],"framework":[63],"that":[64,116,135,151],"anchors":[65],"signals":[67],"into":[68],"low-dimensional":[70],"functional":[71,85],"backbone.":[72],"Specifically,":[73],"first":[75],"solve":[76],"generalized":[78],"eigenvalue":[79],"problem":[80],"extract":[82],"stable":[84],"subspace":[86],"for":[87],"watermark":[88,117],"injection,":[89],"while":[90],"introducing":[91],"an":[92,99],"adaptive":[93],"spectral":[94],"truncation":[95],"strategy":[96],"achieve":[98],"optimal":[100],"balance":[101],"between":[102],"and":[104,132,142],"utility.":[106],"Furthermore,":[107],"vector":[109],"consistency":[110],"constraint":[111],"is":[112],"incorporated":[113],"ensure":[115],"injection":[118],"does":[119],"not":[120],"compromise":[121],"original":[123],"semantic":[124],"performance.":[125],"Extensive":[126],"experiments":[127],"across":[128],"various":[129],"LLM":[130],"architectures":[131],"datasets":[133],"demonstrate":[134],"our":[136],"method":[137],"achieves":[138],"superior":[139],"detection":[140],"accuracy":[141],"statistical":[143],"verifiability":[144],"under":[145],"multiple":[146],"attacks,":[148],"maintaining":[149],"outperforms":[152],"state-of-the-art":[154],"(SOTA)":[155],"methods.":[156]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-21T00:00:00"}