通过恢复隐藏提示检测大模型生成文本,效果优于现有方法。
Once a Response, Always a Response: Detecting LLM-generated Text via Latent Prompt Restoration

- 不依赖训练,通过恢复通用提示来激活隐藏依赖关系。
- 在多个测试集上达到当前最佳零样本检测性能。
- 适合关注生成内容安全与平台治理的研究者使用。
大语言模型可大规模生成流畅且具有说服力的文本,带来虚假信息传播、教育滥用和平台治理等风险,因此鲁棒的机器生成文本检测愈发重要。现有零样本检测器主要依赖基于概率的统计差异,但未显式考虑大模型的训练过程,导致其生成机制建模不足,限制了检测鲁棒性。为此,我们提出 EchoPrompt,一种无需训练的检测方法,基于潜在提示恢复。核心思路是:机器生成文本通常由上游提示条件生成,可通过添加统一通用前缀部分恢复该隐藏依赖。具体而言,EchoPrompt 恢复通用助手-响应上下文,利用指令微调模型测量诱导似然增益,并与基础模型对比,将差异聚合为量化潜在提示依赖的分数。大量实验表明,EchoPrompt 在零样本检测中达到领先性能,且在多种挑战性评估设置下保持强鲁棒性。
原文摘要 · Abstract (English)
Large language models (LLMs) can generate fluent and convincing text at scale, creating growing risks for misinformation dissemination, educational misuse, and platform governance. These concerns make robust detection of machine-generated text increasingly necessary. Recent zero-shot detectors mainly exploit probability-based statistical discrepancies, but they do not explicitly account for the training process of LLMs, which leaves a distinct generation mechanism insufficiently modeled and limits detection robustness. To address this issue, we propose EchoPrompt, a training-free detector based on latent prompt restoration. Our key intuition is that machine-generated text is typically produced conditioned on an upstream prompt, and this hidden dependency can be partially reactivated by prepending a unified generic prefix. Specifically, EchoPrompt restores a generic assistant-response context, measures the induced likelihood gain with an instruction-tuned model, calibrates it against the corresponding base model, and aggregates the resulting differences into a score that quantifies latent prompt dependency. Extensive experiments show that EchoPrompt achieves state-of-the-art performance among zero-shot detectors while maintaining strong robustness across challenging evaluation settings.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。