{"id":"https://openalex.org/W7160834643","doi":"https://doi.org/10.48550/arxiv.2605.07481","title":"Vaporizer: Breaking Watermarking Schemes for Large Language Model Outputs","display_name":"Vaporizer: Breaking Watermarking Schemes for Large Language Model Outputs","publication_year":2026,"publication_date":"2026-05-08","ids":{"openalex":"https://openalex.org/W7160834643","doi":"https://doi.org/10.48550/arxiv.2605.07481"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.07481","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.07481","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.07481","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135901569","display_name":"Jonathan Hong Jin Ng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ng, Jonathan Hong Jin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135869693","display_name":"Anh Tu Ngo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ngo, Anh Tu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135872583","display_name":"Anupam Chattopadhyay","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chattopadhyay, Anupam","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5771999955177307,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5771999955177307,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.09549999982118607,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.032099999487400055,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.9257000088691711},{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.7483999729156494},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.517300009727478},{"id":"https://openalex.org/keywords/reading","display_name":"Reading (process)","score":0.38119998574256897},{"id":"https://openalex.org/keywords/meaning","display_name":"Meaning (existential)","score":0.38100001215934753},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.37619999051094055}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.9257000088691711},{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.7483999729156494},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.725600004196167},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.517300009727478},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.517300009727478},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.5131999850273132},{"id":"https://openalex.org/C554936623","wikidata":"https://www.wikidata.org/wiki/Q199657","display_name":"Reading (process)","level":2,"score":0.38119998574256897},{"id":"https://openalex.org/C2780876879","wikidata":"https://www.wikidata.org/wiki/Q3054749","display_name":"Meaning (existential)","level":2,"score":0.38100001215934753},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.37619999051094055},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.36419999599456787},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.2757999897003174},{"id":"https://openalex.org/C63882131","wikidata":"https://www.wikidata.org/wiki/Q17122954","display_name":"Strengths and weaknesses","level":2,"score":0.250900000333786},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.25040000677108765}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.07481","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.07481","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.07481","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.07481","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Quality Education","id":"https://metadata.un.org/sdg/4","score":0.8408622145652771}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"In":[0],"this":[1],"paper,":[2],"we":[3],"investigate":[4],"the":[5,35,56,60,92,129,139,149],"recent":[6],"state-of-the-art":[7],"schemes":[8],"for":[9],"watermarking":[10,39,126,156],"large":[11],"language":[12],"models":[13],"(LLMs)":[14],"outputs.":[15],"These":[16],"techniques":[17,40],"are":[18],"claimed":[19],"to":[20,137,164],"be":[21,162],"robust,":[22],"scalable":[23],"and":[24,75,94,111,151],"production-grade,":[25],"aimed":[26],"at":[27],"promoting":[28],"responsible":[29],"usage":[30],"of":[31,37,45,59,91,96,122,153,167],"LLMs.":[32],"We":[33,99],"analyse":[34],"effectiveness":[36,123],"these":[38],"against":[41],"an":[42],"extensive":[43],"collection":[44],"modified":[46],"text":[47,61,106],"attacks,":[48],"which":[49,69],"perform":[50],"targeted":[51],"semantic":[52,97,101],"changes":[53],"without":[54],"altering":[55],"general":[57],"meaning":[58],"content.":[62,98],"Our":[63],"approach":[64],"encompasses":[65],"multiple":[66],"attack":[67,80],"strategies,":[68],"include":[70],"lexical":[71],"alterations,":[72],"machine":[73],"translation,":[74],"even":[76],"neural":[77],"paraphrasing.":[78],"The":[79,116],"efficacy":[81],"is":[82,135],"measured":[83],"with":[84,128,141],"two":[85],"target":[86],"criteria":[87],"-":[88],"successful":[89],"removal":[90],"watermark":[93,140],"preservation":[95,102],"evaluate":[100],"through":[103],"BERT":[104],"scores,":[105],"complexity":[107],"measures,":[108],"grammatical":[109],"errors,":[110],"Flesch":[112],"Reading":[113],"Ease":[114],"indices.":[115],"experimental":[117],"results":[118],"reveal":[119],"varying":[120],"levels":[121],"among":[124],"different":[125],"models,":[127],"same":[130],"underlying":[131],"result":[132],"that":[133],"it":[134],"possible":[136],"remove":[138],"reasonable":[142],"effort.":[143],"This":[144],"study":[145],"sheds":[146],"light":[147],"on":[148],"strengths":[150],"weaknesses":[152],"existing":[154],"LLM":[155],"systems,":[157],"suggesting":[158],"how":[159],"they":[160],"should":[161],"constructed":[163],"improve":[165],"security":[166],"available":[168],"schemes.":[169]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-12T00:00:00"}