{"id":"W4417064600","doi":"10.1145/3773028","title":"Securing Large Language Models: A Survey of Watermarking and Fingerprinting Techniques","year":2025,"lang":"en","type":"review","venue":"ACM Computing Surveys","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"Artificial Intelligence in Medicine (Canada)","funders":"National Natural Science Foundation of China","keywords":"Digital watermarking; Fingerprint (computing); Intellectual property; Sophistication; Ingenuity; Adversarial system; Digital Watermarking Alliance; Security token","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow","open_science"],"consensus_categories":[],"category_scores_codex":[0.01487783,0.0006198635,0.002079853,0.0006173007,0.0003082247,0.000254068,0.003133368,0.0003588409,0.000002094935],"category_scores_gemma":[0.003815621,0.0005868038,0.0002670259,0.001198764,0.00006326682,0.0003396333,0.008495858,0.00106175,0.000001680132],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0000890847,"about_ca_system_score_gemma":0.0002869723,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001132746,"about_ca_topic_score_gemma":0.00008028765,"domain_scores_codex":[0.9917559,0.00490127,0.001174641,0.001081298,0.0003883259,0.0006985532],"domain_scores_gemma":[0.9909999,0.006002463,0.00103115,0.001690038,0.0001954933,0.00008093646],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[5.694931e-7,0.00002051143,0.0006838359,0.0091088,0.00008341263,0.00002008822,0.0007145289,0.0001836118,4.024454e-7,0.0004703875,0.00001090693,0.988703],"study_design_scores_gemma":[0.001086073,0.0001489297,0.003986411,0.1902588,0.000653171,0.0001991251,0.0001236934,0.762594,0.00007012,0.001865964,0.03374683,0.005266914],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"review","genre_scores_codex":[0.00007506167,0.4878511,0.5108762,0.000004468117,0.0002587836,0.0002889277,0.00001442076,0.0003349897,0.0002960677],"genre_scores_gemma":[0.01939331,0.8204988,0.1595429,0.00003154718,0.0001812658,0.00001809868,0.000130758,0.0001127571,0.00009066356],"genre_candidate":"review","genre_consensus":null,"teacher_disagreement_score":0.983436,"threshold_uncertainty_score":0.9996583,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04331983216852198,"score_gpt":0.3479031577032387,"score_spread":0.3045833255347167,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}