Watermarking papers, 2023–2026

Key findings

• Watermarking went from 6 papers in 2023 to 56 in 2026, roughly 9.3x in three years.
• NeurIPS publishes the most Watermarking work: 34 papers from 2023 to 2026, 34% of the four-venue total.
• The fastest-growing overlap is with Social aspects · accountability transparency and interpretability: papers tagged with both rose from 0 in 2023 to 18 in 2026.
• Among the 5 topics under Security and Trust, it ranks #3 by 2026 paper count; the fastest grower in the group, Verification, is up 6.0x versus 9.3x here.

Representative papers

Spread across years and venues so every edition shows up

• NeurIPS 2026Auditing Cross-Lingual Fairness in Language Model Watermarking
• ICML 2026Ideal Attribution and Faithful Watermarks for Language Models
• ICLR 2026An Ensemble Framework for Unbiased Language Model Watermarking
• CVPR 2026Convolutional Neural Networks Driven by Content Similarity
• NeurIPS 2025BitMark: Watermarking Bitwise Autoregressive Image Generative Models
• ICML 2025STAMP Your Content: Proving Dataset Membership via Watermarked Rephrasings
• ICLR 2025A Watermark for Order-Agnostic Language Models
• CVPR 2025OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarking
• NeurIPS 2024FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Space
• ICML 2024DE-COP: Detecting Copyrighted Content in Language Models Training Data
• ICLR 2024On the Learnability of Watermarks for Language Models
• CVPR 2024EditGuard: Versatile Image Watermarking for Tamper Localization and Copyright Protection
• NeurIPS 2023An information-theoretic quantification of the content of communication between brain regions
• ICML 2023Margin-based Neural Network Watermarking
• CVPR 2023CAP-VSTNet: Content Affinity Preserved Versatile Style Transfer
• NeurIPS 2026Face Deepfake-aware Recovery via Semantic-driven Facial Representation-based Watermarking
• ICML 2026Towards Reliable Marking and Verification of AI-Generated Text via Geometry-aware Sentence-level Watermarking
• ICLR 2026Analyzing and Evaluating Unbiased Language Model Watermark
• CVPR 2026Decoupling Defense Strategies for Robust Image Watermarking
• NeurIPS 2025Provable Watermarking for Data Poisoning Attacks

All Watermarking papers

34 papers, page 1 of 1

1. NeurIPS 2026A Locally Tokenized Generative Model for Robust Time-Series Watermarking
2. NeurIPS 2026Asymmetric Phase Coding Audio Watermarking
3. NeurIPS 2026Auditing Cross-Lingual Fairness in Language Model Watermarking
4. NeurIPS 2026Face Deepfake-aware Recovery via Semantic-driven Facial Representation-based Watermarking
5. NeurIPS 2026Invisible Ink, Visible Lies: How Production Watermarking Causes LLMs to Hallucinate
6. NeurIPS 2026Majority Bit-Aware Watermarking for Large Language Models
7. NeurIPS 2026MarkTune: Improving the Quality-Detectability Trade-off in Model-Embedded LLM Watermarking
8. NeurIPS 2026MC$^2$Mark: Distortion-Free Multi-Bit Watermarking for Long Messages
9. NeurIPS 2026Multi-bit LLM Watermarking with Certified Semantic Distortion
10. NeurIPS 2026PP-Mark: Provable and Publicly Verifiable Watermarking for Generative AI
11. NeurIPS 2026Reading the Finetuning Prior: Verbatim Content Recovery via Contrastive Decoding Diffing
12. NeurIPS 2026Robust and Hard-to-Remove GNN Watermarking via Topological Invariant Perception
13. NeurIPS 2026Secure Seed-Based Multi-bit Watermarking for Diffusion Models from First Principles
14. NeurIPS 2026Sequential Behavioral Watermarking for LLM Agents
15. NeurIPS 2026TRACE: Structure-Aware Character Encoding for Robust and Generalizable Document Watermarking
16. NeurIPS 2026Watermarking as a Learned Intrinsic Property of Diffusion Models
17. NeurIPS 2026Watermarking Game-Playing Agents in Perfect-Information Extensive-Form Games
18. NeurIPS 2026Watermarking Without Standards Is Not AI Governance
19. NeurIPS 2025BitMark: Watermarking Bitwise Autoregressive Image Generative Models
20. NeurIPS 2025Mask Image Watermarking
21. NeurIPS 2025On the Coexistence and Ensembling of Watermarks
22. NeurIPS 2025Practical and Effective Code Watermarking for Large Language Models
23. NeurIPS 2025Provable Watermarking for Data Poisoning Attacks
24. NeurIPS 2025RoMa: A Robust Model Watermarking Scheme for Protecting IP in Diffusion Models
25. NeurIPS 2025Shallow Diffuse: Robust and Invisible Watermarking through Low-Dim Subspaces in Diffusion Models
26. NeurIPS 2025Theoretically Grounded Framework for LLM Watermarking: A Distribution-Adaptive Approach
27. NeurIPS 2025Vector Database Watermarking
28. NeurIPS 2025WMCopier: Forging Invisible Watermarks on Arbitrary Images
29. NeurIPS 2024Edit Distance Robust Watermarks via Indexing Pseudorandom Codes
30. NeurIPS 2024FedGMark: Certifiably Robust Watermarking for Federated Graph Learning
31. NeurIPS 2024FreqMark: Invisible Image Watermarking via Frequency Based Optimization in Latent Space
32. NeurIPS 2024No Free Lunch in LLM Watermarking: Trade-offs in Watermarking Design Choices
33. NeurIPS 2024Watermarking Makes Language Models Radioactive
34. NeurIPS 2023An information-theoretic quantification of the content of communication between brain regions

FAQ

How many Watermarking papers were published at NeurIPS, ICLR, ICML and CVPR from 2023 to 2026?

101 in total: 6 in 2023, 17 in 2024, 22 in 2025, 56 in 2026.

How many Watermarking papers are at NeurIPS 2026?

NeurIPS 2026 has 18 Watermarking papers, versus 10 the year before.

How many Watermarking papers are at ICLR 2026?

ICLR 2026 has 11 Watermarking papers, versus 2 the year before.

How many Watermarking papers are at ICML 2026?

ICML 2026 has 16 Watermarking papers, versus 6 the year before.

How many Watermarking papers are at CVPR 2026?

CVPR 2026 has 11 Watermarking papers, versus 4 the year before.

Which conference publishes the most Watermarking papers?

NeurIPS, with 34 papers from 2023 to 2026.