arXiv:2409.03291cs.CLcs.AI2024-09被引 10

现有大模型检测器在真实场景下失效,亟需改进评估方法。

LLM Detectors Still Fall Short of Real World: Case of LLM-Generated Short News-Like Posts

  • 测试发现零样本检测器对采样温度敏感,易被简单攻击绕过。
  • 定制检测器虽能跨模型泛化,但无法识别新的人类写作文本。
  • 提出动态可扩展的基准测试框架,支持持续评估与改进。

随着强大大语言模型(LLMs)的普及,由大模型生成的虚假信息已成为重大隐患。尽管已有大量研究声称开发了有效的检测工具,但其在真实环境中的表现仍不明确。本文聚焦于信息操作中常见的、由中等水平攻击者生成的短新闻类文本。实验表明,现有零样本与定制化检测器均难以适应现实场景:所有零样本检测器在不同基准测试中表现不一致,且对采样温度升高极度敏感,而这一简单攻击手段未被近期基准涵盖;尽管可训练出跨模型泛化的检测器,但其无法有效区分新出现的人类写作文本。这揭示了当前评测体系的不足:既需针对特定领域设计基准,也需平衡对抗性规避能力与对人类文本的过拟合问题。本文建议重新审视现有评测方法,并提供一个可动态扩展的基准测试平台(https://github.com/Reliable-Information-Lab-HEVS/benchmark_llm_texts_detection),以支持未来持续评估。

原文摘要 · Abstract (English)

With the emergence of widely available powerful LLMs, disinformation generated by large Language Models (LLMs) has become a major concern. Historically, LLM detectors have been touted as a solution, but their effectiveness in the real world is still to be proven. In this paper, we focus on an important setting in information operations -- short news-like posts generated by moderately sophisticated attackers. We demonstrate that existing LLM detectors, whether zero-shot or purpose-trained, are not ready for real-world use in that setting. All tested zero-shot detectors perform inconsistently with prior benchmarks and are highly vulnerable to sampling temperature increase, a trivial attack absent from recent benchmarks. A purpose-trained detector generalizing across LLMs and unseen attacks can be developed, but it fails to generalize to new human-written texts. We argue that the former indicates domain-specific benchmarking is needed, while the latter suggests a trade-off between the adversarial evasion resilience and overfitting to the reference human text, with both needing evaluation in benchmarks and currently absent. We believe this suggests a re-consideration of current LLM detector benchmarking approaches and provides a dynamically extensible benchmark to allow it (https://github.com/Reliable-Information-Lab-HEVS/benchmark_llm_texts_detection).

大模型检测虚假信息评测基准

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。