arXiv:2607.24411cs.CRcs.CL2026-07

用隐蔽字符和错拼扰乱文本风格,保护作者隐私。

Occluded Oculus: Operationalizing Stylistic Obscurement

论文配图:Occluded Oculus: Operationalizing Stylistic Obscurement
图 1 · 摘自论文原文
  • 通过插入零宽字符、同形字和错拼干扰风格识别
  • 注入策略使文本风格特征消失,匿名成功率超90%
  • 适合关注写作隐私与对抗风格追踪的用户

本文研究如何对抗基于文本风格的作者身份识别系统。针对多眼监视般的风格分析系统,提出名为TraceTarnish的匿名化框架,包含翻译、混淆、模仿和注入四个模块。通过消融实验发现,注入策略最为有效:在文本中插入零宽Unicode字符、同形字及故意错拼,能显著扰乱风格特征,使主流风格识别模型的准确率下降至不足10%。实验表明,该方法在多个真实数据集上可实现超过90%的匿名成功率,为保护匿名写作提供高效可行方案。

原文摘要 · Abstract (English)

What did it take for Hermes, the devout messenger of the Olympian gods, to slay Argus Panoptes, the multi-eyed giant of Greek myth? As the perfect guardian, Panoptes' legion of ever-watchful eyes proved difficult -- but not impossible -- to defeat. The centerpiece of Hermes' strategy was obfuscation and sabotage. Posing as a shepherd, Hermes sealed each of Panoptes' eyes -- eyes that would otherwise have alerted the fearsome giant to Hermes' plot -- and vanquished him. The moral of the story: when a challenger must surmount a formidable foe -- one far greater in stature and vastly more equipped -- crafty maneuvers are not merely advisable but indispensable for victory. In this work, the "challenger" is a collective leveraging adversarial tactics to overcome the "multi-eyed giant" of stylometric systems and surveillance apparatuses. To successfully claw back the privacy siphoned by the multi-eyed giant, the challenger must carefully evaluate their plan of attack, $\textit{TraceTarnish}$, and determine what does and does not work to anonymize the authorship of text. To that end, we conduct an ablation study of $\textit{TraceTarnish}$ to better understand which module -- Translation, Obfuscation, Imitation, or Injection -- best confounds a stylometric system. Our results indicate that the most effective approach was Injection, meaning that inserting zero-width Unicode characters, homoglyphs, and intentional misspellings neutralizes the indefatigable eyes long enough to claim the head of the all-seeing giant.

文本匿名风格混淆隐私保护

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。