arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2202.09381cs.CL
收藏

对自动事实验证系统的合成虚假信息攻击

Synthetic Disinformation Attacks on Automated Fact Verification Systems

Stanford University(斯坦福大学);EPFL(洛桑联邦理工学院)

Yibing Du, Antoine Bosselut, Christopher D. Manning

摘要:

自动事实核查是一项必要的技术,以减少网上错误信息的传播。一个目前的框架,这样的解决方案提出,以验证索赔检索支持或反驳证据,从相关的文本来源。然而,事实检查器的现实用例将需要根据可能受到相同错误信息影响的证据来源来验证声明。此外,现代NLP工具的开发可以产生连贯的、捏造的内容,这将允许恶意行为者系统地为事实核查人员生成对抗性的虚假信息。在这项工作中,我们探索了自动事实检查器在两种模拟环境中对合成对抗性证据的敏感性:AdversarialAddition,我们制作文档并将其添加到事实检查系统可用的证据库中,以及AdversarialModification,存储库中现有的证据源文档被自动更改。我们在三个基准测试中对多个模型的研究表明,这些系统在面对这些攻击时会遭受显着的性能下降。最后,我们讨论了现代NLG系统作为虚假信息生成器的日益增长的威胁,以及它们对自动事实检查器构成的挑战。

英文摘要:

Automated fact-checking is a needed technology to curtail the spread of online misinformation. One current framework for such solutions proposes to verify claims by retrieving supporting or refuting evidence from related textual sources. However, the realistic use cases for fact-checkers will require verifying claims against evidence sources that could be affected by the same misinformation. Furthermore, the development of modern NLP tools that can produce coherent, fabricated content would allow malicious actors to systematically generate adversarial disinformation for fact-checkers. In this work, we explore the sensitivity of automated fact-checkers to synthetic adversarial evidence in two simulated settings: AdversarialAddition, where we fabricate documents and add them to the evidence repository available to the fact-checking system, and AdversarialModification, where existing evidence source documents in the repository are automatically altered. Our study across multiple models on three benchmarks demonstrates that these systems suffer significant performance drops against these attacks. Finally, we discuss the growing threat of modern NLG systems as generators of disinformation in the context of the challenges they pose to automated fact-checkers.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑