cs.LGJul 1, 2026

Watermarking for Proprietary Dataset Protection

Authors: John KirchenbauerBrian R. BartoldsonBhavya KailkhuraTom Goldstein

Organizations: University of Maryland · 2Lawrence Livermore National Labs.

Abstract

A growing body of literature suggests that training data membership inference problems are fundamentally hard tasks in modern language modeling settings. We argue that output watermarking techniques are the right gadget to make training membership tests for generative models more tractable, based on prior results showing that language models exhibit residual watermark "radioactivity" under partially watermarked training datasets. We pit a watermark-based dataset inference approach head-to-head against traditional loss-based membership inference methods and show that watermarking can achieve comparable membership detection performance when subset exposure is high enough, under an alternate set of assumptions.

Explore similar work

CardsList
  1. Watermarking Diffusion Language Models

    Sep 29, 2025Thibaud Gloaguen, Robin Staab, Nikola Jovanović +1Large Language Model WatermarksDiffusion Language Models