arXiv:2508.00619cs.CLcs.LG2025-08被引 3

构建首个聚焦少样本生成的对抗性文本数据集,揭示现有检测器漏洞。

DACTYL: Diverse Adversarial Corpus of Texts Yielded from Large Language Models

  • 提出DACTYL数据集,专注少样本和持续预训练模型生成文本
  • 多数检测器在新数据集上性能下降超30%,暴露泛化短板
  • 采用X风险优化的分类器在域外文本上表现更优,适合真实场景

现有AI生成文本检测器在内部测试中表现良好,但在真实场景中却失效,表明其鲁棒性不足。我们深入分析了检测器的机器学习构建流程,发现当前数据集多聚焦零样本生成,而对少样本或单样本生成(即LLM以人类文本为示例)研究极少。为此,我们构建了多样对抗性文本语料库DACTYL,专注于单样本/少样本生成,还包含全参数微调的领域特定持续预训练(CPT)语言模型生成文本,采用内存高效优化方法完成训练。大量现有检测器在该数据集上表现显著下降,表明其对少样本及CPT生成文本存在潜在脆弱性。我们分别用标准二元交叉熵(BCE)和新兴的深度X风险优化(DXO)训练分类器。尽管BCE分类器在DACTYL测试集上略胜一筹,但DXO分类器在分布外(OOD)文本上表现更佳。在模拟学生作文检测任务中,最佳DXO分类器在最低误报率下比最佳BCE分类器高出50.56点宏平均F1分数。结果表明,DXO分类器泛化能力更强且不易过拟合。实验揭示了提升检测器鲁棒性的多个关键方向。

原文摘要 · Abstract (English)

Existing AIG (AI-generated) text detectors struggle in real-world settings despite succeeding in internal testing, suggesting that they may not be robust enough. We rigorously examine the machine-learning procedure to build these detectors to address this. Most current AIG text detection datasets focus on zero-shot generations, but little work has been done on few-shot or one-shot generations, where LLMs are given human texts as an example. In response, we introduce the Diverse Adversarial Corpus of Texts Yielded from Language models (DACTYL), a challenging AIG text detection dataset focusing on one-shot/few-shot generations. We also include texts from domain-specific continued-pre-trained (CPT) language models, where we fully train all parameters using a memory-efficient optimization approach. Many existing AIG text detectors struggle significantly on our dataset, indicating a potential vulnerability to one-shot/few-shot and CPT-generated texts. We also train our own classifiers using two approaches: standard binary cross-entropy (BCE) optimization and a more recent approach, deep X-risk optimization (DXO). While BCE-trained classifiers marginally outperform DXO classifiers on the DACTYL test set, the latter excels on out-of-distribution (OOD) texts. In our mock deployment scenario in student essay detection with an OOD student essay dataset, the best DXO classifier outscored the best BCE-trained classifier by 50.56 macro-F1 score points at the lowest false positive rates for both. Our results indicate that DXO classifiers generalize better without overfitting to the test set. Our experiments highlight several areas of improvement for AIG text detectors.

文本检测少样本生成对抗样本泛化能力

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。