A Multifaceted Framework to Evaluate Evasion, Content Preservation, and Misattribution in Authorship Obfuscation Techniques (2022.emnlp-main)
Copied to clipboard
| Challenge: | Authorship obfuscation techniques are often evaluated based on their ability to hide the author’s identity (evasion) while preserving the content of the original text. |
| Approach: | They propose to evaluate authorship obfuscation techniques on detection evasion and content preservation using competitive identification techniques in real-life scenarios. |
| Outcome: | The proposed method reveals key weaknesses in state-of-the-art obfuscation techniques and surprisingly competitive effectiveness from a back-translation baseline in all evaluation aspects. |
Similar Papers
Adversarial Authorship Attribution for Deobfuscation (2022.acl-long)
Copied to clipboard
| Challenge: | Existing authorship attribution approaches do not consider adversarial threat model . authors show adversarially trained authorship attributors can degrade effectiveness of existing obfuscators from 20-30% to 5-10% . |
| Approach: | They propose to use rule-based and learning-based text obfuscation approaches to counter authorship attribution. |
| Outcome: | The proposed approaches do not consider the adversarial threat model . authors show that adversarially trained attributors can degrade effectiveness of existing obfuscators from 20-30% to 5-10% . |
Unraveling Interwoven Roles of Large Language Models in Authorship Privacy: Obfuscation, Mimicking, and Verification (2025.emnlp-main)
Copied to clipboard
| Challenge: | Recent advances in large language models have been driven by large-scale training corpora drawn from diverse sources such as websites, news articles, and books. |
| Approach: | They propose a framework for analyzing dynamic relationships among LLM-enabled AO, AM, and AV in the context of authorship privacy. |
| Outcome: | The proposed framework analyzes the dynamic relationships among LLM-enabled AO, AM, and AV in the context of authorship privacy. |
Heuristic Authorship Obfuscation (P19-1)
Copied to clipboard
| Challenge: | Existing methods for authorship verification are insufficient to control the authorial style of a text. |
| Approach: | They propose a novel method that models writing style difference as the Jensen-Shannon distance between character n-gram distributions of texts and manipulates an author’s subconsciously encoded writing style using heuristic search. |
| Outcome: | The proposed approach defeats state-of-the-art verification approaches while keeping text changes at a minimum. |
The Two Paradigms of LLM Detection: Authorship Attribution vs Authorship Verification (2025.findings-acl)
Copied to clipboard
| Challenge: | Existing methods for detecting texts generated by large language models are disputed . authors argue that there are limitations in the current technology . |
| Approach: | They propose to make LLM detectors robust against domain shifts and build benchmarks . they argue that the limitations lie elsewhere, and open the realm of authorship analysis technology . |
| Outcome: | The proposed method systematically analyzes the benchmarks and validates it using state-of-the-art detectors. |
UPTON: Preventing Authorship Leakage from Public Text Release via Data Poisoning (2023.findings-emnlp)
Copied to clipboard
| Challenge: | Recent authorship attribution models can reveal the true authorship of unseen texts with high accuracies, with some cases up to 95% accuracy. |
| Approach: | They propose a solution that weakens authorship features in training samples and makes released texts unlearnable by exploiting black-box data poisoning methods. |
| Outcome: | The proposed model weakens authorship features in training samples and makes released texts unlearnable. |
Keep it Private: Unsupervised Privatization of Online Text (2024.naacl-long)
Copied to clipboard
| Challenge: | Authorship obfuscation has been evaluated in narrow settings in the NLP literature . superficial edit operations can lead to unnatural outputs, authors say . |
| Approach: | They propose an automatic text privatization framework that fine-tunes a large language model via reinforcement learning to produce rewrites that balance soundness, sense, and privacy. |
| Outcome: | The proposed method maintains high text quality according to automated metrics and human evaluation, and successfully evades several automated authorship attacks. |
From Intentions to Techniques: A Comprehensive Taxonomy and Challenges in Text Watermarking for Large Language Models (2025.findings-naacl)
Copied to clipboard
| Challenge: | Large Language Models (LLMs) are rapidly growing and allowing textual content to be protected against unauthorized use. |
| Approach: | They present a unified overview of different perspectives behind designing watermarking techniques through a comprehensive survey of the research literature. |
| Outcome: | The proposed methods are based on the evaluation datasets used and watermarking addition and removal methods to construct a taxonomy. |
Bias Analysis and Mitigation in the Evaluation of Authorship Verification (P19-1)
Copied to clipboard
| Challenge: | a paper on authorship verification shows that the underlying experiment design cannot guarantee pushing forward the state of the art. |
| Approach: | They propose a "Basic and Fairly Flawed" authorship verifier that is on a par with the best approaches submitted so far . they pinpoint sources of bias that should be eliminated and propose 'refined' authorship corpus as effective countermeasure. |
| Outcome: | The proposed approach is on par with the best approaches submitted so far . the proposed approach shows that sources of bias should be eliminated . |
Topic or Style? Exploring the Most Useful Features for Authorship Attribution (C18-1)
Copied to clipboard
| Challenge: | Existing approaches to authorship attribution rely on individual's writing style and/or preferred topics. |
| Approach: | They analyse four widely used datasets to explore how different types of features affect authorship attribution accuracy under varying conditions. |
| Outcome: | The proposed model outperforms the state-of-the-art on two out of the four datasets used. |
StyleRemix: Interpretable Authorship Obfuscation via Distillation and Perturbation of Style Elements (2024.emnlp-main)
Copied to clipboard
| Challenge: | Authorship obfuscation methods that ignore author-specific stylistic features are often too rigid and lead to degradation of fluency and grammaticality. |
| Approach: | They propose an adaptive obfuscation method that perturbs stylistic elements of text . authors release a large set of 30K high-quality, long-form texts from a diverse set of 14 authors . |
| Outcome: | The proposed method outperforms state-of-the-art methods on an array of domains on automatic and human evaluation. |