Unverified50% confidenceCautionExact time
改写攻击会稀释绿名单水印信号，研究表明通过一轮高质量改写水印信号可被削弱60%-90%
1
Sources
50%
Confidence
Long-term
Relevance
8/24/2026
First Seen
Sources
Related Entities
Related Claims
Unverified改写攻击（paraphrasing）能有效削弱水印，因为它改变了token选择，降低绿名单token比例，使z-score回落到检测阈值以下79% similarUnverified2023-2024年间多项研究表明简单的改写攻击可将水印检测率从接近100%降至接近随机猜测水平71% similarUnverifiedExperiments show that even the most advanced watermarking schemes experience a significant drop in detection accuracy after more than two rounds of paraphrasing.69% similarUnverifiedn-gram窗口太短会降低逆推攻击成本，窗口太长会因稀疏性降低水印检测信号一致性69% similarUnverified底层模型更换后，即便微小的输出分布变化也可能导致此前校准的安全护栏过度拦截或防护失效，需要重新标注和调试63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/794416API
curl https://kongchang.com/api/v1/knowledge/claims/794416MCP
get_claim(id=794416)