Watermarking Continuous Tabular Data Generation
cs.CR, cs.LG, stat.AP
Submitted: 2024-05-22
Updated: 2026-10-13
Comments: A revised version of this manuscript has been accepted for publication in the Journal of the American Statistical Association
License: http://creativecommons.org/publicdomain/zero/1.0/
The gist: In this paper, we introduce a simple yet effective tabular data watermarking mechanism with statistical guarantees.
Terminology
Abstract
In this paper, we introduce a simple yet effective tabular data watermarking mechanism with statistical guarantees. We show theoretically that the proposed watermark can be effectively detected, while faithfully preserving the data fidelity, and also demonstrates appealing robustness against additive noise attack. The general idea is to achieve the watermarking through a strategic embedding based on simple data binning. Specifically, it divides the feature's value range into finely segmented intervals and embeds watermarks into selected ``green list" intervals. To detect the watermarks, we develop a principled statistical hypothesis-testing framework with minimal assumptions: it remains valid as long as the underlying data distribution has a continuous density function. The watermarking efficacy is demonstrated through rigorous theoretical analysis and empirical validation, highlighting its utility in enhancing the security of synthetic and real-world datasets.
Sources
- Latent Diffusion Energy-Based Model for Interpretable Text Modeling
- Learning Concept-Based Causal Transition and Symbolic Reasoning for Visual Planning
- Object-Conditioned Energy-Based Attention Map Alignment in Text-to-Image Diffusion Models
- Auto-Encoding Variational Bayes
- Undetectable Watermarks for Language Models
- Permute-and-Flip: An optimally stable and watermarkable decoder for LLMs
- Distillation-Resistant Watermarking for Model Protection in NLP
- Learning to Watermark LLM-generated Text via Reinforcement Learning
- Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models
Related papers
- SoK: AI-Augmented Binary Reversing
- Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
- Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
- Efficient Fuzzy PSI under One-Sided Assumptions
- Sealing the Audit-Runtime Gap for LLM Skills
- Token Composition: A Graph Based on EVM Logs