用隐形字符干扰文本风格,让作者身份难以被识别。
StegoStylo: Squelching Stylometric Scrutiny through Steganographic Stitching
- 用零宽字符篡改文本,隐藏作者风格特征。
- 修改33%以上文字可有效混淆作者识别系统。
- 为隐私保护提供对抗性工具,适合关注数据安全者。
风格分析(stylometry)能通过文本风格识别作者,广泛用于版权调查、有害内容检测、疾病早期筛查、文学研究及虚假信息识别。但当被用于作者身份验证时,也可能被滥用于去匿名化、追踪、画像甚至审查等侵犯隐私行为。本文提出改进的对抗性攻击方法TraceTarnish,强化其扰乱风格分析的能力。进一步研究发现,通过微调隐写嵌入技术,在文本中使用零宽Unicode字符修改部分词汇,可有效遮蔽作者的风格指纹。实验表明,当修改比例达到33%及以上时,作者身份识别准确率显著下降,实现有效隐私保护。论文呼吁重视风格分析带来的隐私风险,并倡导发展如TraceTarnish类防御工具。
原文摘要 · Abstract (English)
Stylometry -- the identification of an author through analysis of a text's style (i.e., authorship attribution) -- serves many constructive purposes: it supports copyright and plagiarism investigations, aids detection of harmful content, offers exploratory cues for certain medical conditions (e.g., early signs of dementia or depression), provides historical context for literary works, and helps uncover misinformation and disinformation. In contrast, when stylometry is employed as a tool for authorship verification -- confirming whether a text truly originates from a claimed author -- it can also be weaponized for malicious purposes. Techniques such as de-anonymization, re-identification, tracking, profiling, and downstream effects like censorship illustrate the privacy threats that stylometric analysis can enable. Building on these concerns, this paper further explores how adversarial stylometry combined with steganography can counteract stylometric analysis. We first present enhancements to our adversarial attack, $\textit{TraceTarnish}$, providing stronger evidence of its capacity to confound stylometric systems and reduce their attribution and verification accuracy. Next, we examine how steganographic embedding can be fine-tuned to mask an author's stylistic fingerprint, quantifying the level of authorship obfuscation achievable as a function of the proportion of words altered with zero-width Unicode characters. Based on our findings, steganographic coverage of 33% or higher seemingly ensures authorship obfuscation. Finally, we reflect on the ways stylometry can be used to undermine privacy and argue for the necessity of defensive tools like $\textit{TraceTarnish}$.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。