Global site search

Search guides, labs, glossary, and research

Type two or more characters to search.

Start with a channel, artifact, or defense term

Examples include zero-width, metadata, tokenizer, or prompt injection.

    COVERT CHANNELS · WATERMARKS · EVIDENCE

    Linguistic Steganalysis and Text Watermarking

    Distinguish steganography, watermarking, authorship analysis, and statistical evidence while testing benign fixed-marker carriers and transformation resilience.

    Quick answer

    What does this Machine Tradecraft expansion explain?

    Linguistic steganalysis looks for evidence that ordinary-looking prose carries a second machine-readable channel, while text watermark detection looks for an intentionally embedded provenance signal; neither detector result provides absolute certainty.

    Core trade-off
    Capacity, fluency, detectability, robustness, distortion, and key dependence cannot all be optimized simultaneously.
    Safe evidence
    Indicators, scores, and recovered fixed markers are evidence tied to a method and corpus—not universal proof.
    Transformation test
    Paraphrasing, translation, normalization, formatting, and retokenization can destroy or alter a channel.
    Reviewed implementation boundary

    Know what is measured, approximated, and still external.

    The submitted report remains byte-identical. This separate review, checked 2026-08-26, narrows implementation claims and gives visitors a decision path before they generalize from a local result.

    IMPLEMENTATION MODE Fixed-marker defensive indicator laboratory
    VISIBLE SOURCE PROFILE 0 standards/specifications · 6 research · 1 government · 0 implementation
    SOURCE BODY Preserved; corrections live in this review layer
    Directly computed

    Output produced deterministically by the local runtime.

    • Sentence initials, word-length sequence, selected punctuation count, reversible diagnostic transform, and SHA-256 values
    • Presence of the single allowlisted demonstration marker in the bounded acrostic view
    • No arbitrary payload is accepted, generated, or decoded
    Bounded approximation

    Useful model or subset that must not be mistaken for full conformance.

    • Indicator counts are not a statistical steganalysis model and do not estimate a probability of covert communication
    • The transformation comparison is a local deterministic demonstration rather than a robustness benchmark
    • No watermark detector or language model is executed
    Requires external verification

    Conclusion that needs an exact implementation, trust system, model, parser, or human review.

    • Published-method reproduction requires exact models, keys, tokenizers, datasets, baselines, and statistical protocols
    • Watermark attribution requires a specified detector, secret material, threshold, and false-positive analysis
    • Operational conclusions require matched controls and distribution-shift testing
    Decision support

    Choose the next evidence step instead of treating one result as a verdict.

    QuestionWhat the local page can answerWhat it does not establishNext evidence step
    Does the fixed benign fixture contain the allowlisted marker pattern?Yes — the deterministic view can answer that narrow question.A general covert channel or secret payload.Use the exact published method and controlled corpus if authorized.
    Is unusual style evidence of steganography?It is only a review indicator.Intent, key use, or payload extraction.Compare matched controls and transformations.
    Is text watermarked?Not by this laboratory.Any provider watermark or provenance claim.Use the specified detector, key, tokenizer, and calibrated threshold.
    Focused deterministic fixture

    Fixed acrostic marker and ordinary-prose control

    Contrasts a known prepared pattern with naturally occurring indicator noise.

    Expected boundary: Only the fixed marker fixture produces the allowlisted marker finding; both retain uncertainty language.

    Open prepared laboratory
    Compare independent views

    One artifact, several machine-readable representations

    No single view is automatically authoritative. Preserve the source, identify each parser or receiver, and compare their outputs before authorizing a consequential decision.

    01Cover text

    The ordinary surface prose presented to a reader.

    02Rule-based channels

    Acrostics, positions, word lengths, punctuation, or lexical classes.

    03Statistical channels

    Distribution shifts, perplexity, token partitions, and detector scores.

    04Watermark signal

    A keyed or model-specific provenance indicator.

    05Transformation path

    Edits, paraphrases, translation, normalization, and retokenization.

    06Evidence statement

    What the observed indicator supports and what remains unproven.

    Bounded method

    Analysis workflow

    The workflow preserves evidence before transformation and keeps structural inspection separate from execution, remote verification, or model behavior.

    1. Preserve the original cover text and acquisition context.
    2. Run transparent rule-based and statistical indicators.
    3. Record the exact decoder or detector, key, tokenizer, and thresholds.
    4. Apply controlled transformations and measure signal survival.
    5. Report false-positive and false-negative limitations explicitly.
    Defense in depth

    Controls carried into implementation

    These controls are contextual. They reduce a defined risk; they do not guarantee safety, truth, attribution, or resistance to every adaptive attack.

    01

    Use multiple independent indicators rather than one opaque score.

    02

    Keep provenance assertions separate from authorship and truth claims.

    03

    Test transformations representative of the real transport path.

    04

    Avoid publishing unrestricted arbitrary-payload encoders.

    05

    Retain human review for consequential attribution decisions.

    Shared vocabulary

    Key terms

    Definitions are linked into the site-wide glossary and back to the full report.

    Payload capacity

    The amount of hidden information carried per word, token, or carrier choice.

    Robustness

    The ability of a channel or watermark to survive specified transformations.

    Detectability

    The degree to which a detector can distinguish carrier text from an expected distribution.

    Cover text

    The ordinary-looking text that hosts a hidden channel.

    False-positive rate

    The proportion of benign examples incorrectly classified as containing a target signal.

    Transformation attack

    An edit such as paraphrase, translation, normalization, or retokenization intended to disrupt a signal.

    Steganographic gap

    A difference in useful information available to a keyed receiver compared with an unkeyed observer.

    Continue with primary material

    External standards and research

    These links are provided for visitors who want the governing specification, paper, framework, or implementation documentation. Links open in a new tab; the site does not fetch them during runtime analysis.

    Primary research Research paper

    Addressing Tokenization Inconsistency

    Tokenization drift in steganography and watermarking.

    Original research or formal conference publication.
    aclanthology.org
    Authoritative guidance Government report

    NIST Synthetic Content Overview

    Watermarking, detection, and provenance background.

    First-party guidance, framework, registry, or standards-program material.
    www.nist.gov
    Authoritative guidance Benchmark program

    NIST Open Media Forensics Challenge

    Evaluation resources for media forensics.

    First-party guidance, framework, registry, or standards-program material.
    mfc.nist.gov
    Supporting resource Research survey

    Text Watermarking Taxonomy

    Survey of intentions, techniques, and challenges.

    Useful supporting material that does not replace the governing specification or original study.
    aclanthology.org
    Continue the investigation

    Read the evidence, then test the bounded model

    The full submitted report is preserved byte-for-byte in the governed research library and in durable repository documentation. The laboratory turns selected concepts into deterministic local output without external calls or hidden persistence.

    Detailed report

    Linguistic Steganography, Text Watermarking, and Defensive Steganalysis

    A defensive analysis of information-theoretic security, linguistic carriers, generative steganography, text watermarking, detector uncertainty, transformation channels, tokenization inconsistency, and safe enterprise review.

    Read governed report
    Focused laboratory

    Defensive Linguistic Steganalysis

    Inspect prepared benign text for acrostic, fixed-position, word-length, punctuation, lexical, and transformation indicators using only the fixed marker MACHINE_TRADECRAFT_DEMO_OK.

    Open bounded laboratory