arXivDaily arXiv每日学术速递 周一至周五更新
北美退伍军人节(Veterans Day),12 日无更新
arXiv 2303.14822cs.CRcs.LG
收藏

MGTBench:机器生成文本检测的基准测试

MGTBench: Benchmarking Machine-Generated Text Detection

CISPA Helmholtz Center for Information Security(CISPA亥姆霍兹信息安全中心)

Xinlei He, Xinyue Shen, Zeyuan Chen, Michael Backes, Yang Zhang

AI总结:

本文提出首个针对强大LLMs的机器生成文本检测基准框架MGTBench,系统评估多种检测方法,并揭示对抗攻击对检测效果的显著削弱,强调需开发更鲁棒的检测方法。

摘要:

如今,像ChatGPT这样强大的大语言模型(LLMs)已经在各种任务中展现出革命性的能力。因此,随着LLMs变得更加先进和普及,机器生成文本(MGTs)的检测变得越来越关键。这些模型能够生成类似人类的语言,使得判断一段文本是由人类还是机器撰写变得具有挑战性。这引发了关于真实性、问责制和潜在偏见的担忧。然而,现有的MGT检测方法使用不同的模型架构、数据集和实验设置进行评估,导致缺乏一个涵盖各种方法的全面评估框架。此外,现有检测方法在面对强大LLMs时的表现仍不清楚。在本文中,我们通过提出首个针对强大LLMs的MGT检测基准框架MGTBench来填补这一空白。在包含由ChatGPT-turbo和Claude等各种强大LLMs生成的精选文本的公共数据集上进行的大量评估证明了不同检测方法的有效性。我们的消融研究表明,通常更多的单词数量会带来更好的性能,并且大多数检测方法可以用少得多的训练样本达到相似的性能。此外,我们深入研究了一个更具挑战性的任务:文本归属。我们的发现表明,基于模型的检测方法在文本归属任务中仍然表现良好。为了研究不同检测方法的鲁棒性,我们考虑了三种对抗性攻击,即改写、随机空格和对抗性扰动。我们发现这些攻击可以显著降低检测效果,突显了开发更鲁棒检测方法的迫切需求。

英文摘要:

Nowadays, powerful large language models (LLMs) such as ChatGPT have demonstrated revolutionary power in a variety of tasks. Consequently, the detection of machine-generated texts (MGTs) is becoming increasingly crucial as LLMs become more advanced and prevalent. These models have the ability to generate human-like language, making it challenging to discern whether a text is authored by a human or a machine. This raises concerns regarding authenticity, accountability, and potential bias. However, existing methods for detecting MGTs are evaluated using different model architectures, datasets, and experimental settings, resulting in a lack of a comprehensive evaluation framework that encompasses various methodologies. Furthermore, it remains unclear how existing detection methods would perform against powerful LLMs. In this paper, we fill this gap by proposing the first benchmark framework for MGT detection against powerful LLMs, named MGTBench. Extensive evaluations on public datasets with curated texts generated by various powerful LLMs such as ChatGPT-turbo and Claude demonstrate the effectiveness of different detection methods. Our ablation study shows that a larger number of words in general leads to better performance and most detection methods can achieve similar performance with much fewer training samples. Moreover, we delve into a more challenging task: text attribution. Our findings indicate that the model-based detection methods still perform well in the text attribution task. To investigate the robustness of different detection methods, we consider three adversarial attacks, namely paraphrasing, random spacing, and adversarial perturbations. We discover that these attacks can significantly diminish detection effectiveness, underscoring the critical need for the development of more robust detection methods.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑