| Challenge: | Existing methods for authorship verification are insufficient to control the authorial style of a text. |
| Approach: | They propose a novel method that models writing style difference as the Jensen-Shannon distance between character n-gram distributions of texts and manipulates an author’s subconsciously encoded writing style using heuristic search. |
| Outcome: | The proposed approach defeats state-of-the-art verification approaches while keeping text changes at a minimum. |
Similar Papers
A Girl Has A Name: Detecting Authorship Obfuscation (2020.acl-main)
Copied to clipboard
| Challenge: | Existing authorship attribution methods are not stealthy as they degrade text smoothness in detectable manner. |
| Approach: | They evaluate the stealthiness of authorship attribution methods under an adversarial threat model and show that they are not stealthy . |
| Outcome: | The proposed methods can be identified with an average F1 score of 0.87 . |
Unraveling Interwoven Roles of Large Language Models in Authorship Privacy: Obfuscation, Mimicking, and Verification (2025.emnlp-main)
Copied to clipboard
| Challenge: | Recent advances in large language models have been driven by large-scale training corpora drawn from diverse sources such as websites, news articles, and books. |
| Approach: | They propose a framework for analyzing dynamic relationships among LLM-enabled AO, AM, and AV in the context of authorship privacy. |
| Outcome: | The proposed framework analyzes the dynamic relationships among LLM-enabled AO, AM, and AV in the context of authorship privacy. |
StyleRemix: Interpretable Authorship Obfuscation via Distillation and Perturbation of Style Elements (2024.emnlp-main)
Copied to clipboard
| Challenge: | Authorship obfuscation methods that ignore author-specific stylistic features are often too rigid and lead to degradation of fluency and grammaticality. |
| Approach: | They propose an adaptive obfuscation method that perturbs stylistic elements of text . authors release a large set of 30K high-quality, long-form texts from a diverse set of 14 authors . |
| Outcome: | The proposed method outperforms state-of-the-art methods on an array of domains on automatic and human evaluation. |
JAMDEC: Unsupervised Authorship Obfuscation using Constrained Decoding over Small Language Models (2024.naacl-long)
Copied to clipboard
| Challenge: | Existing methods to protect the identity and privacy of online authorship are lacking supervision data for diverse authorship and domains. |
| Approach: | They propose an unsupervised inference-time approach to authorship obfuscation that uses a user-controlled, inference time algorithm to oblige the authorship. |
| Outcome: | The proposed method outperforms state-of-the-art methods while performing competitively against a propriety model two orders of magnitudes larger. |
A Multifaceted Framework to Evaluate Evasion, Content Preservation, and Misattribution in Authorship Obfuscation Techniques (2022.emnlp-main)
Copied to clipboard
| Challenge: | Authorship obfuscation techniques are often evaluated based on their ability to hide the author’s identity (evasion) while preserving the content of the original text. |
| Approach: | They propose to evaluate authorship obfuscation techniques on detection evasion and content preservation using competitive identification techniques in real-life scenarios. |
| Outcome: | The proposed method reveals key weaknesses in state-of-the-art obfuscation techniques and surprisingly competitive effectiveness from a back-translation baseline in all evaluation aspects. |
Generalizing Unmasking for Short Texts (N19-1)
Copied to clipboard
| Challenge: | Authorship verification is the problem of inferring whether two texts were written by the same author. |
| Approach: | They propose a generalized unmasking approach which allows for authorship verification of short texts with high precision at an adjustable recall tradeoff. |
| Outcome: | The proposed approach achieves accuracies of 75–80% while allowing for easy adjustment to forensic scenarios that require higher levels of confidence. |
Adversarial Authorship Attribution for Deobfuscation (2022.acl-long)
Copied to clipboard
| Challenge: | Existing authorship attribution approaches do not consider adversarial threat model . authors show adversarially trained authorship attributors can degrade effectiveness of existing obfuscators from 20-30% to 5-10% . |
| Approach: | They propose to use rule-based and learning-based text obfuscation approaches to counter authorship attribution. |
| Outcome: | The proposed approaches do not consider the adversarial threat model . authors show that adversarially trained attributors can degrade effectiveness of existing obfuscators from 20-30% to 5-10% . |
Authorship Obfuscation in Multilingual Machine-Generated Text Detection (2024.findings-emnlp)
Copied to clipboard
Dominik Macko, Robert Moro, Adaku Uchendu, Ivan Srba, Jason Lucas, Michiharu Yamashita, Nafis Irtiza Tripto, Dongwon Lee, Jakub Simko, Maria Bielikova
| Challenge: | Recent advances in Language Modeling have birthed Large Language Models (LLMs), which exhibit significant improvements, including the ability to generate texts easily misconstrued as humanwritten. |
| Approach: | They compare authorship obfuscation methods against machine-generated text (MGT) in 11 languages and analyze their performance against 37 well-known AO methods. |
| Outcome: | The proposed methods can cause evasion of detection in all languages, with homoglyph attacks particularly successful. |
Style Obfuscation by Invariance (C18-1)
Copied to clipboard
| Challenge: | obfuscation-by-transfer is a method of obliging writing style using sequence models . a side effect of this approach is the frequent major alterations to the semantic content of the input . |
| Approach: | They propose obfuscation-by-invariance and investigate to what extent models trained to be explicitly style-independent preserve semantics. |
| Outcome: | The proposed model performs better than models trained to be explicitly style-invariant, while human evaluation shows a trade-off between the level of obfuscation and the quality of the output. |
The Two Paradigms of LLM Detection: Authorship Attribution vs Authorship Verification (2025.findings-acl)
Copied to clipboard
| Challenge: | Existing methods for detecting texts generated by large language models are disputed . authors argue that there are limitations in the current technology . |
| Approach: | They propose to make LLM detectors robust against domain shifts and build benchmarks . they argue that the limitations lie elsewhere, and open the realm of authorship analysis technology . |
| Outcome: | The proposed method systematically analyzes the benchmarks and validates it using state-of-the-art detectors. |