Watermarking papers, 2023–2026

Key findings

• Watermarking went from 6 papers in 2023 to 56 in 2026, roughly 9.3x in three years.
• NeurIPS publishes the most Watermarking work: 34 papers from 2023 to 2026, 34% of the four-venue total.
• The fastest-growing overlap is with Social aspects · accountability transparency and interpretability: papers tagged with both rose from 0 in 2023 to 18 in 2026.
• Among the 5 topics under Security and Trust, it ranks #3 by 2026 paper count; the fastest grower in the group, Verification, is up 6.0x versus 9.3x here.

Representative papers

Spread across years and venues so every edition shows up

• NeurIPS 2026Auditing Cross-Lingual Fairness in Language Model Watermarking
• ICML 2026Ideal Attribution and Faithful Watermarks for Language Models
• ICLR 2026An Ensemble Framework for Unbiased Language Model Watermarking
• CVPR 2026Convolutional Neural Networks Driven by Content Similarity
• NeurIPS 2025BitMark: Watermarking Bitwise Autoregressive Image Generative Models
• ICML 2025STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasings
• ICLR 2025A Watermark for Order-Agnostic Language Models
• CVPR 2025OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarking
• NeurIPS 2024FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Space
• ICML 2024DE-COP: Detecting Copyrighted Content in Language Models Training Data
• ICLR 2024On the Learnability of Watermarks for Language Models
• CVPR 2024EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protection
• NeurIPS 2023An information-theoretic quantification of the content of communication between brain regions
• ICML 2023Margin-based Neural Network Watermarking
• CVPR 2023CAP-VSTNet: Content Affinity Preserved Versatile Style Transfer
• NeurIPS 2026Face Deepfake-aware Recovery via Semantic-driven Facial Representation-based Watermarking
• ICML 2026Towards Reliable Marking and Verification of AI-Generated Text via Geometry-aware Sentence-level Watermarking
• ICLR 2026Analyzing and Evaluating Unbiased Language Model Watermark
• CVPR 2026Decoupling Defense Strategies for Robust Image Watermarking
• NeurIPS 2025Provable Watermarking for Data Poisoning Attacks

All Watermarking papers

101 papers, page 2 of 3

51. NeurIPS 2026Secure Seed-Based Multi-bit Watermarking for Diffusion Models from First Principles
52. NeurIPS 2026Sequential Behavioral Watermarking for LLM Agents
53. NeurIPS 2026TRACE: Structure-Aware Character Encoding for Robust and Generalizable Document Watermarking
54. NeurIPS 2026Watermarking as a Learned Intrinsic Property of Diffusion Models
55. NeurIPS 2026Watermarking Game-Playing Agents in Perfect-Information Extensive-Form Games
56. NeurIPS 2026Watermarking Without Standards Is Not AI Governance
57. CVPR 20253D-GSW: 3D Gaussian Splatting for Robust Watermarking
58. CVPR 2025GuardSplat: Efficient and Robust Watermarking for 3D Gaussian Splatting
59. CVPR 2025OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarking
60. CVPR 2025Watermarking One for All: A Robust Watermarking Scheme Against Partial Image Theft
61. ICLR 2025A Watermark for Order-Agnostic Language Models
62. ICLR 2025Hidden in the Noise: Two-Stage Robust Watermarking for Images
63. ICML 2025An End-to-End Model for Logits-Based Large Language Models Watermarking
64. ICML 2025BiMark: Unbiased Multilayer Watermarking for Large Language Models
65. ICML 2025De-mark: Watermark Removal in Large Language Models
66. ICML 2025GaussMark: A Practical Approach for Structural Watermarking of Language Models
67. ICML 2025Lightweight-Mark: Rethinking Deep Learning-Based Watermarking
68. ICML 2025STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasings
69. NeurIPS 2025BitMark: Watermarking Bitwise Autoregressive Image Generative Models
70. NeurIPS 2025Mask Image Watermarking
71. NeurIPS 2025On the Coexistence and Ensembling of Watermarks
72. NeurIPS 2025Practical and Effective Code Watermarking for Large Language Models
73. NeurIPS 2025Provable Watermarking for Data Poisoning Attacks
74. NeurIPS 2025RoMa: A Robust Model Watermarking Scheme for Protecting IP in Diffusion Models
75. NeurIPS 2025Shallow Diffuse: Robust and Invisible Watermarking through Low-Dim Subspaces in Diffusion Models
76. NeurIPS 2025Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach
77. NeurIPS 2025Vector Database Watermarking
78. NeurIPS 2025WMCopier: Forging Invisible Watermarks on Arbitrary Images
79. CVPR 2024EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protection
80. CVPR 2024Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models
81. CVPR 2024Generating Content for HDR Deghosting from Frequency View
82. CVPR 2024ProMark: Proactive Diffusion Watermarking for Causal Attribution
83. ICLR 2024On the Learnability of Watermarks for Language Models
84. ICML 2024DE-COP: Detecting Copyrighted Content in Language Models Training Data
85. ICML 2024Defense against Model Extraction Attack by Bayesian Active Watermarking
86. ICML 2024Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviews
87. ICML 2024Proactive Detection of Voice Cloning with Localized Watermarking
88. ICML 2024Token-Specific Watermarking with Enhanced Detectability and Semantic Coherence for Large Language Models
89. ICML 2024Watermark Stealing in Large Language Models
90. ICML 2024Watermarks in the Sand: Impossibility of Strong Watermarking for Language Models
91. NeurIPS 2024Edit Distance Robust Watermarks via Indexing Pseudorandom Codes
92. NeurIPS 2024FedGMark: Certifiably Robust Watermarking for Federated Graph Learning
93. NeurIPS 2024FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Space
94. NeurIPS 2024No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices
95. NeurIPS 2024Watermarking Makes Language Models Radioactive
96. CVPR 2023CAP-VSTNet: Content Affinity Preserved Versatile Style Transfer
97. CVPR 2023Wide-Angle Rectification via Content-Aware Conformal Mapping
98. ICML 2023How Bad is Top-$K$ Recommendation under Competing Content Creators?
99. ICML 2023Margin-based Neural Network Watermarking
100. ICML 2023Performative Recommendation: Diversifying Content via Strategic Incentives

FAQ

How many Watermarking papers were published at NeurIPS, ICLR, ICML and CVPR from 2023 to 2026?

101 in total: 6 in 2023, 17 in 2024, 22 in 2025, 56 in 2026.

How many Watermarking papers are at NeurIPS 2026?

NeurIPS 2026 has 18 Watermarking papers, versus 10 the year before.

How many Watermarking papers are at ICLR 2026?

ICLR 2026 has 11 Watermarking papers, versus 2 the year before.

How many Watermarking papers are at ICML 2026?

ICML 2026 has 16 Watermarking papers, versus 6 the year before.

How many Watermarking papers are at CVPR 2026?

CVPR 2026 has 11 Watermarking papers, versus 4 the year before.

Which conference publishes the most Watermarking papers?

NeurIPS, with 34 papers from 2023 to 2026.