@inproceedings{fang-2017-publication,
  title = {{Generating Steganographic Text with LSTMs}},
  author = {Fang, Tina and Jaggi, Martin and Argyraki, Katerina},
  year = {2017},
  booktitle = {Proceedings of ACL 2017, Student Research Workshop},
  pages = {100--106},
  publisher = {Association for Computational Linguistics},
  url = {https://aclanthology.org/P17-3017/}
}

@misc{fang-2017-preprint,
  title = {{Generating Steganographic Text with LSTMs}},
  author = {Fang, Tina and Jaggi, Martin and Argyraki, Katerina},
  year = {2017},
  publisher = {arXiv},
  eprint = {1705.10742v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/1705.10742v1}
}

@article{rnn-stega-publication,
  title = {{RNN-Stega: Linguistic Steganography Based on Recurrent Neural Networks}},
  author = {Yang, Zhong-Liang and Guo, Xiao-Qing and Chen, Zi-Ming and Huang, Yong-Feng and Zhang, Yu-Jin},
  year = {2019},
  journal = {IEEE Transactions on Information Forensics and Security},
  doi = {10.1109/TIFS.2018.2871746},
  pages = {1280--1295},
  volume = {14},
  number = {5},
  publisher = {IEEE},
  url = {https://ieeexplore.ieee.org/document/8470163}
}

@inproceedings{dai-cai-2019-publication,
  title = {{Towards Near-imperceptible Steganographic Text}},
  author = {Dai, Falcon Z. and Cai, Zheng},
  year = {2019},
  booktitle = {Proceedings of the 57th Annual Meeting of the Association for Computational Linguistics},
  doi = {10.18653/v1/P19-1422},
  pages = {4303--4308},
  publisher = {Association for Computational Linguistics},
  url = {https://aclanthology.org/P19-1422/}
}

@misc{dai-cai-2019-preprint,
  title = {{Towards Near-imperceptible Steganographic Text}},
  author = {Dai, Falcon Z. and Cai, Zheng},
  year = {2019},
  publisher = {arXiv},
  eprint = {1907.06679v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/1907.06679v1}
}

@inproceedings{neural-linguistic-steganography-publication,
  title = {{Neural Linguistic Steganography}},
  author = {Ziegler, Zachary M. and Deng, Yuntian and Rush, Alexander M.},
  year = {2019},
  booktitle = {Proceedings of the 2019 Conference on Empirical Methods in Natural Language Processing and the 9th International Joint Conference on Natural Language Processing (EMNLP-IJCNLP)},
  doi = {10.18653/v1/D19-1115},
  pages = {1210--1215},
  publisher = {Association for Computational Linguistics},
  url = {https://aclanthology.org/D19-1115/}
}

@misc{neural-linguistic-steganography-preprint,
  title = {{Neural Linguistic Steganography}},
  author = {Ziegler, Zachary M. and Deng, Yuntian and Rush, Alexander M.},
  year = {2019},
  publisher = {arXiv},
  eprint = {1909.01496v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/1909.01496v1}
}

@inproceedings{saac-publication,
  title = {{Near-imperceptible Neural Linguistic Steganography via Self-Adjusting Arithmetic Coding}},
  author = {Shen, Jiaming and Ji, Heng and Han, Jiawei},
  year = {2020},
  booktitle = {Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing (EMNLP)},
  doi = {10.18653/v1/2020.emnlp-main.22},
  pages = {303--313},
  publisher = {Association for Computational Linguistics},
  url = {https://aclanthology.org/2020.emnlp-main.22/}
}

@misc{saac-preprint,
  title = {{Near-imperceptible Neural Linguistic Steganography via Self-Adjusting Arithmetic Coding}},
  author = {Shen, Jiaming and Ji, Heng and Han, Jiawei},
  year = {2020},
  publisher = {arXiv},
  eprint = {2010.00677v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2010.00677v1}
}

@inproceedings{minimum-entropy-coupling-publication,
  title = {{Perfectly Secure Steganography Using Minimum Entropy Coupling}},
  author = {Schroeder de Witt, Christian and Sokota, Samuel and Kolter, J. Zico and Foerster, Jakob and Strohmeier, Martin},
  year = {2023},
  booktitle = {International Conference on Learning Representations},
  url = {https://openreview.net/forum?id=HQ67mj5rJdR}
}

@misc{minimum-entropy-coupling-preprint,
  title = {{Perfectly Secure Steganography Using Minimum Entropy Coupling}},
  author = {Schroeder de Witt, Christian and Sokota, Samuel and Kolter, J. Zico and Foerster, Jakob and Strohmeier, Martin},
  year = {2022},
  publisher = {arXiv},
  eprint = {2210.14889v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2210.14889v1}
}

@inproceedings{llm-watermark-publication,
  title = {{A Watermark for Large Language Models}},
  author = {Kirchenbauer, John and Geiping, Jonas and Wen, Yuxin and Katz, Jonathan and Miers, Ian and Goldstein, Tom},
  year = {2023},
  booktitle = {Proceedings of the 40th International Conference on Machine Learning},
  pages = {17061--17084},
  volume = {202},
  publisher = {PMLR},
  url = {https://proceedings.mlr.press/v202/kirchenbauer23a.html}
}

@misc{llm-watermark-preprint,
  title = {{A Watermark for Large Language Models}},
  author = {Kirchenbauer, John and Geiping, Jonas and Wen, Yuxin and Katz, Jonathan and Miers, Ian and Goldstein, Tom},
  year = {2023},
  publisher = {arXiv},
  eprint = {2301.10226v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2301.10226v1}
}

@inproceedings{secret-collusion-publication,
  title = {{Secret Collusion among AI Agents: Multi-Agent Deception via Steganography}},
  author = {Motwani, Sumeet Ramesh and Baranchuk, Mikhail and Strohmeier, Martin and Bolina, Vijay and Torr, Philip H.S. and Hammond, Lewis and Schroeder de Witt, Christian},
  year = {2024},
  booktitle = {Advances in Neural Information Processing Systems},
  doi = {10.52202/079017-2336},
  volume = {37},
  url = {https://proceedings.neurips.cc/paper_files/paper/2024/hash/861f7dad098aec1c3560fb7add468d41-Abstract-Conference.html}
}

@misc{secret-collusion-preprint,
  title = {{Secret Collusion Among Generative AI Agents}},
  author = {Motwani, Sumeet Ramesh and Baranchuk, Mikhail and Strohmeier, Martin and Bolina, Vijay and Torr, Philip H.S. and Hammond, Lewis and Schroeder de Witt, Christian},
  year = {2024},
  publisher = {arXiv},
  eprint = {2402.07510v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2402.07510v1}
}

@article{syncpool-publication,
  title = {{Provably Secure Disambiguating Neural Linguistic Steganography}},
  author = {Qi, Yuang and Chen, Kejiang and Zeng, Kai and Zhang, Weiming and Yu, Nenghai},
  year = {2025},
  journal = {IEEE Transactions on Dependable and Secure Computing},
  doi = {10.1109/TDSC.2024.3519322},
  pages = {2430--2442},
  volume = {22},
  number = {3},
  publisher = {IEEE},
  url = {https://ieeexplore.ieee.org/document/10804596}
}

@misc{syncpool-preprint,
  title = {{Provably Secure Disambiguating Neural Linguistic Steganography}},
  author = {Qi, Yuang and Chen, Kejiang and Zeng, Kai and Zhang, Weiming and Yu, Nenghai},
  year = {2024},
  publisher = {arXiv},
  eprint = {2403.17524v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2403.17524v1}
}

@inproceedings{tokenization-publication,
  title = {{Addressing Tokenization Inconsistency in Steganography and Watermarking Based on Large Language Models}},
  author = {Yan, Ruiyi and Murawaki, Yugo},
  year = {2025},
  booktitle = {Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing},
  doi = {10.18653/v1/2025.emnlp-main.361},
  pages = {7076--7098},
  publisher = {Association for Computational Linguistics},
  url = {https://aclanthology.org/2025.emnlp-main.361/}
}

@misc{tokenization-preprint,
  title = {{Addressing Tokenization Inconsistency in Steganography and Watermarking Based on Large Language Models}},
  author = {Yan, Ruiyi and Murawaki, Yugo},
  year = {2025},
  publisher = {arXiv},
  eprint = {2508.20718v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2508.20718v1}
}