Watermark Detection on Llama-2-7b-chat-hf 10 samples UMD watermarking (test)
1AUROC (t=0)RP1
Evaluation results
| Method | Links | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| RP1c=1, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.99 | 1 | 0.77 | |
| RP2c=1, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.89 | |
| RP3c=1, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.97 | 1 | 0.78 | |
| RP4c=1, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.97 | 0.99 | 0.77 | |
| RP5c=1, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.97 | 0.99 | 0.71 | |
| SICOc=1, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.93 | |
| RBc=1, Hashing=left2024.03 | 1 | 1 | 0.97 | 0.95 | 0.85 | 0.83 | 0.81 | 0.83 | 0.79 | 0.72 | 0.61 | — | |
| SCTSc=1, Hashing=left2024.03 | 1 | 1 | 0.94 | 0.88 | 0.81 | 0.76 | 0.61 | 0.49 | 0.49 | 0.49 | 0.49 | — | |
| RP1c=2, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.58 | |
| RP2c=2, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.96 | 0.9 | |
| RP3c=2, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.96 | 0.53 | |
| RP4c=2, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.99 | 0.96 | 0.67 | |
| RP5c=2, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.92 | 0.69 | |
| SICOc=2, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.93 | |
| RBc=2, Hashing=left2024.03 | 1 | 1 | 0.96 | 0.95 | 0.92 | 0.87 | 0.83 | 0.67 | 0.58 | 0.56 | 0.51 | — | |
| SCTSc=2, Hashing=left2024.03 | 1 | 1 | 0.9 | 0.77 | 0.47 | 0.31 | 0.15 | 0.13 | 0.13 | 0.13 | 0.13 | — | |
| RP1c=4, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.95 | 0.89 | 0.68 | |
| RP2c=4, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.95 | 0.92 | 0.87 | |
| RP3c=4, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.91 | 0.95 | 0.63 | |
| RP4c=4, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.99 | 0.95 | 0.92 | 0.79 | |
| RP5c=4, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.94 | 0.9 | 0.41 | |
| SICOc=4, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 0.99 | 1 | 0.99 | 0.99 | 1 | 1 | 0.95 | 0.79 | |
| RBc=4, Hashing=left2024.03 | 1 | 1 | 1 | 0.99 | 0.96 | 0.93 | 0.84 | 0.77 | 0.61 | 0.58 | 0.58 | — | |
| SCTSc=4, Hashing=left2024.03 | 1 | 0.98 | 0.89 | 0.74 | 0.46 | 0.19 | 0.08 | 0.1 | 0.1 | 0.1 | 0.1 | — | |
| RP1c=8, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.97 | 1 | 0.72 | |
| RP2c=8, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.97 | 0.97 | 0.8667 | |
| RP3c=8, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.99 | 1 | 0.96 | 0.99 | 0.5556 | |
| RP4c=8, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.99 | 1 | 0.95 | 0.96 | 0.6889 | |
| RP5c=8, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.99 | 1 | 0.97 | 0.96 | 0.5667 | |
| SICOc=8, Hashing=left2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.93 | 0.97 | 0.82 | |
| RBc=8, Hashing=left2024.03 | 1 | 0.99 | 0.96 | 0.93 | 0.9 | 0.85 | 0.82 | 0.73 | 0.67 | 0.63 | 0.63 | — | |
| SCTSc=8, Hashing=left2024.03 | 1 | 0.9 | 0.83 | 0.69 | 0.49 | 0.21 | 0.11 | 0.11 | 0.11 | 0.11 | 0.11 | — | |
| RP1c=1, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.87 | |
| RP2c=1, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.93 | |
| RP3c=1, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.93 | |
| RP4c=1, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.87 | |
| RP5c=1, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.55 | |
| SICOc=1, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.97 | 1 | 0.83 | |
| RBc=1, Hashing=self2024.03 | 1 | 1 | 0.98 | 0.97 | 0.99 | 0.92 | 0.91 | 0.89 | 0.85 | 0.88 | 0.83 | — | |
| SCTSc=1, Hashing=self2024.03 | 1 | 0.96 | 0.96 | 0.9 | 0.77 | 0.63 | 0.53 | 0.42 | 0.38 | 0.3 | 0.24 | — | |
| RP1c=2, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.97 | 0.75 | |
| RP2c=2, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.97 | 0.95 | |
| RP3c=2, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.99 | 0.96 | 0.71 | |
| RP4c=2, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.99 | 0.97 | 0.79 | |
| RP5c=2, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.99 | 0.94 | 0.74 | |
| SICOc=2, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.93 | |
| RBc=2, Hashing=self2024.03 | 1 | 1 | 0.99 | 0.98 | 0.96 | 0.89 | 0.83 | 0.8 | 0.73 | 0.64 | 0.58 | — | |
| SCTSc=2, Hashing=self2024.03 | 1 | 1 | 0.97 | 0.89 | 0.72 | 0.56 | 0.47 | 0.33 | 0.33 | 0.33 | 0.33 | — | |
| RP1c=8, Hashing=self2024.03 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 0.97 | 1 | 1 | 0.66 | |
| RP2c=8, Hashing=self2024.03 | 1 | 1 | 0.98 | 0.97 | 0.98 | 0.99 | 0.96 | 0.99 | 0.94 | 0.94 | 0.93 | 0.7 | |
| RP3c=8, Hashing=self2024.03 | 1 | 1 | 0.98 | 0.97 | 0.98 | 0.97 | 0.96 | 0.97 | 0.91 | 0.83 | 0.91 | 0.54 | |
| RP4c=8, Hashing=self2024.03 | 1 | 1 | 0.99 | 0.97 | 0.98 | 0.97 | 0.95 | 0.95 | 0.86 | 0.82 | 0.88 | 0.54 | |
| RP5c=8, Hashing=self2024.03 | 1 | 1 | 0.99 | 0.97 | 0.98 | 0.97 | 0.95 | 0.95 | 0.85 | 0.8 | 0.87 | 0.52 | |
| SICOc=8, Hashing=self2024.03 | 1 | 0.98 | 0.98 | 0.98 | 0.98 | 0.98 | 0.98 | 0.95 | 0.98 | 0.97 | 0.97 | 0.71 | |
| RBc=8, Hashing=self2024.03 | 1 | 0.95 | 0.9 | 0.83 | 0.78 | 0.72 | 0.67 | 0.67 | 0.63 | 0.57 | 0.57 | — | |
| SCTSc=8, Hashing=self2024.03 | 1 | 0.87 | 0.7 | 0.61 | 0.41 | 0.17 | 0.09 | 0.09 | 0.09 | 0.09 | 0.09 | — | |
| RP1c=4, Hashing=self2024.03 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.98 | 0.95 | 0.98 | 0.76 | |
| RP2c=4, Hashing=self2024.03 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.98 | 0.95 | 0.98 | 0.83 | |
| RP3c=4, Hashing=self2024.03 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.97 | 0.96 | 0.9 | 0.67 | |
| RP4c=4, Hashing=self2024.03 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.97 | 0.96 | 0.9 | 0.72 | |
| RP5c=4, Hashing=self2024.03 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.97 | 0.95 | 0.86 | 0.68 | |
| SICOc=4, Hashing=self2024.03 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.99 | 0.98 | 0.95 | 0.91 | |
| RBc=4, Hashing=self2024.03 | 0.99 | 0.99 | 0.99 | 0.96 | 0.88 | 0.88 | 0.88 | 0.86 | 0.78 | 0.75 | 0.75 | — | |
| SCTSc=4, Hashing=self2024.03 | 0.99 | 0.98 | 0.89 | 0.75 | 0.63 | 0.45 | 0.25 | 0.25 | 0.2 | 0.2 | 0.2 | — |