用风格分析技术识别文本伪装痕迹,揭示匿名攻击的破绽。
Tuning for TraceTarnish: Techniques, Trends, and Testing Tangible Traits
- 通过函数词、实词频率和形素比等特征检测文本改写痕迹。
- 五类核心特征可有效识别对抗性风格伪装,准确率显著提升。
- 适合网络安全与数字取证人员研究伪造文本防御策略。
本研究对攻击工具TraceTarnish进行了更严格的评估,该工具利用对抗性风格分析原理,试图隐匿文本消息的作者身份。为验证其效果,我们采集并处理了Reddit评论数据,将其转化为TraceTarnish训练数据,并进一步通过StyloMetrix生成风格特征。基于信息增益准则筛选出最具预测性的特征,结果表明:函数词及类型(L_FUNC_A & L_FUNC_T)、内容词及类型(L_CONT_A & L_CONT_T),以及形素比(ST_TYPE_TOKEN_RATIO_LEMMAS)具有显著信息增益。这些特征作为可靠的入侵指示物(IoCs),能有效揭示文本是否被刻意修改以隐藏真实作者。同时,它们也可作为数字取证的警报信号,提示存在对抗性风格攻击。尽管在缺乏原文的情况下难以察觉,但通过前后文本对比仍可识别异常。正所谓‘试图抹去痕迹,反而留下更深印记’。基于此,我们围绕这五个关键特征优化了TraceTarnish的实现,增强了攻击的隐蔽性与有效性。
原文摘要 · Abstract (English)
In this study, we more rigorously evaluated our attack script $\textit{TraceTarnish}$, which leverages adversarial stylometry principles to anonymize the authorship of text-based messages. To ensure the efficacy and utility of our attack, we sourced, processed, and analyzed Reddit comments -- comments that were later alchemized into $\textit{TraceTarnish}$ data -- to gain valuable insights. The transformed $\textit{TraceTarnish}$ data was then further augmented by $\textit{StyloMetrix}$ to manufacture stylometric features -- features that were culled using the Information Gain criterion, leaving only the most informative, predictive, and discriminative ones. Our results found that function words and function word types ($L\_FUNC\_A$ $\&$ $L\_FUNC\_T$); content words and content word types ($L\_CONT\_A$ $\&$ $L\_CONT\_T$); and the Type-Token Ratio ($ST\_TYPE\_TOKEN\_RATIO\_LEMMAS$) yielded significant Information-Gain readings. The identified stylometric cues -- function-word frequencies, content-word distributions, and the Type-Token Ratio -- serve as reliable indicators of compromise (IoCs), revealing when a text has been deliberately altered to mask its true author. Similarly, these features could function as forensic beacons, alerting defenders to the presence of an adversarial stylometry attack; granted, in the absence of the original message, this signal may go largely unnoticed, as it appears to depend on a pre- and post-transformation comparison. "In trying to erase a trace, you often imprint a larger one." Armed with this understanding, we framed $\textit{TraceTarnish}$'s operations and outputs around these five isolated features, using them to conceptualize and implement enhancements that further strengthen the attack.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。