Defending Against Neural Fake News
Not on the map. Why?
Cited by 49 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
Recent progress in natural language generation has raised dual-use concerns. While applications like summarization and translation are positive, the underlying technology also might enable adversaries to generate neural fake news: targeted propaganda that closely mimics the style of real news. Modern computer security relies on careful threat modeling: identifying potential threats and vulnerabilities from an adversary's point of view, and exploring potential mitigations to these threats. Likewise, developing robust defenses against neural fake news requires us first to carefully investigate and characterize the risks of these models. We thus present a model for controllable text generation called Grover. Given a headline like `Link Found Between Vaccines and Autism,' Grover can generate the rest of the article; humans find these generations to be more trustworthy than human-written disinformation. Developing robust verification techniques against generators like Grover is critical. We find that best current discriminators can classify neural fake news from real, human-written, news with 73% accuracy, assuming access to a moderate level of training data. Counterintuitively, the best defense against Grover turns out to be Grover itself, with 92% accuracy, demonstrating the importance of public release of strong generators. We investigate these results further, showing that exposure bias -- and sampling strategies that alleviate its effects -- both leave artifacts that similar discriminators can pick up on. We conclude by discussing ethical issues regarding the technology, and plan to release Grover publicly, helping pave the way for better detection of neural fake news.
Key facts. Cited by 559 papers in the map (data through 14 Oct 2026). First posted on arXiv 29 May 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2020: 1; 2021: 85; 2022: 75; 2023: 142; 2024: 118; 2025: 93; 2026: 45.
559 papers.
Sort:
By area:
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2023A Survey of Large Language Modelscited by 2,576
- 2021Ethical and social risks of harm from Language Modelscited by 966
- 2023The Flan Collection: Designing Data and Methods for Effective Instruction Tuningcited by 739
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
- 2023A Watermark for Large Language Modelscited by 725
- 2021Deduplicating Training Data Makes Language Models Bettercited by 714
- 2023In-Context Retrieval-Augmented Language Modelscited by 702
- 2021Retrieval Augmentation Reduces Hallucination in Conversationcited by 692
- 2023A Comprehensive Overview of Large Language Modelscited by 648
- 2022Using DeepSpeed and Megatron to Train Megatron-Turing NLG 530B, A Large-Scale Generative Language Modelcited by 559
38 more
- 2022InCoder: A Generative Model for Code Infilling and Synthesiscited by 498
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 492
- 2021MAUVE: Measuring the Gap Between Neural Text and Human Text using Divergence Frontierscited by 470
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 429
- 2021A Survey on Automated Fact-Checkingcited by 378
- 2024Prismatic VLMs: Investigating the Design Space of Visually-Conditioned Language Modelscited by 339
- 2023Data Selection for Language Models via Importance Resamplingcited by 329
- 2021MERLOT: Multimodal Neural Script Knowledge Modelscited by 311
- 2023Tool Learning with Foundation Modelscited by 302
- 2023Provable Robust Watermarking for AI-Generated Textcited by 299
- 2021All That's 'Human' Is Not Gold: Evaluating Human Evaluation of Generated Textcited by 287
- 2023Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attackscited by 278
- 2024Spotting LLMs With Binoculars: Zero-Shot Detection of Machine-Generated Textcited by 263
- 2024Continual Learning of Large Language Models: A Comprehensive Surveycited by 234
- 2021Mind the Gap: Assessing Temporal Generalization in Neural Language Modelscited by 230
- 2023Undetectable Watermarks for Language Modelscited by 226
- 2022Factuality Enhanced Language Models for Open-Ended Text Generationcited by 202
- 2022SSD-LM: Semi-autoregressive Simplex-based Diffusion Language Model for Text Generation and Modular Controlcited by 194
- 2022Branch-Train-Merge: Embarrassingly Parallel Training of Expert Language Modelscited by 191
- 2023RADAR: Robust AI-Text Detection via Adversarial Learningcited by 190
- 2022MERLOT Reserve: Neural Script Knowledge through Vision and Language and Soundcited by 184
- 2023Can LLM-Generated Misinformation Be Detected?cited by 177
- 2021Towards Continual Knowledge Learning of Language Modelscited by 174
- 2021The Values Encoded in Machine Learning Researchcited by 172
- 2021Hurdles to Progress in Long-form Question Answeringcited by 167
- 2024Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviewscited by 164
- 2021Counterfactual Memorization in Neural Language Modelscited by 156
- 2022Repairing the Cracked Foundation: A Survey of Obstacles in Evaluation Practices for Generated Textcited by 155
- 2023Co-Writing with Opinionated Language Models Affects Users' Viewscited by 148
- 2023Should ChatGPT be Biased? Challenges and Risks of Bias in Large Language Modelscited by 148
- 2023Who Wrote this Code? Watermarking for Code Generationcited by 141
- 2021A Token-level Reference-free Hallucination Detection Benchmark for Free-form Text Generationcited by 138
- 2021DEMix Layers: Disentangling Domains for Modular Language Modelingcited by 132
- 2022Language Models as Agent Modelscited by 132
- 2023MAGE: Machine-generated Text Detection in the Wildcited by 132
- 2021AMMUS : A Survey of Transformer-based Pretrained Models in Natural Language Processingcited by 131
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 130
- 2023DNA-GPT: Divergent N-Gram Analysis for Training-Free Detection of GPT-Generated Textcited by 129
50 most cited of 559 All 559 (JSON)
- 2026Rethinking Multimodal Fake News Detection in the Generative AI Era29 Sep 2026
- 2026VEX-Bench: Benchmarking Verification Complexity of LLM-Generated Misinformation28 Sep 2026
- 2026Can Multimodal Large Language Models Generate and Detect Multimodal Social Media Fake News?20 Sep 2026
- 2026A Survey on Fake Review Detection: From Pre-trained Language Models to Large Language Models12 Sep 2026
- 2026A Mechanistic Study of AI-Text Detection Neurons in Frozen BERT: Sparse Probing and Activation Patching on RAID8 Sep 2026
- 2026WeaveMark: Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading2 Sep 2026
- 2026Propaganda Forensics: Recovering the Generation Pipeline of an AI-Driven Influence Campaign16 Aug 2026
- 2026What Does 99% Accuracy Measure? A Reproducible Audit of Shortcut Learning in a Widely Used Fake News Corpus26 Jul 2026
- 2026DeLIVeR: Decomposed Learning for Information-grounded Veracity Recognition via Reinforced Knowledge Graph Exploration20 Jul 2026
- 2026Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability11 Jul 2026
- 2026An Exploratory Study on LLM-Generated Code and Comments in Code Repositories2 Jul 2026
- 2026TH-GNN: Heterogeneous Temporal Graph Neural Networks for LLM-Agent Shilling Attack Detection24 Jun 2026
38 more
- 2026Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Text9 Jun 2026
- 2026DetectZoo: A Unified Toolkit for AI-Generated Content Detection Across Text, Audio, and Image Modalities2 Jun 2026
- 2026A Systematic Analysis of Linguistic Features in AI-Generated Text Detection Across Domains and Models2 Jun 2026
- 2026The Deliberative Illusion: Diagnosing Factual Attrition and Stance Homogenization in Multi-Agent LLM Deliberation2 Jun 2026
- 2026Detector-Evasive LLM Paraphrasing via Constrained Policy Optimization29 May 2026
- 2026Evaluating the Realism of LLM-powered Social Agents: A Case Study of Reactions to Spanish Online News27 May 2026
- 2026ReLoRA: Knowledge-Reusing Adaptation for Fast Rollout of Evolving LLM Services23 May 2026
- 2026Hidden Human-Like Nature of Machine-Generated Texts: Theory and Detection Enhancement22 May 2026
- 2026Sem-Detect: Semantic Level Detection of AI Generated Peer-Reviews20 May 2026
- 2026Findings of the Counter Turing Test: AI-Generated Text Detection20 May 2026
- 2026The Algorithmic Caricature: Auditing LLM-Generated Political Discourse Across Crisis Events12 May 2026
- 2026Role-Aware Artificial Intelligence Across Augmentation and Automation in Human-Machine Symbiosis1 May 2026
- 2026Explainable Disentangled Representation Learning for Generalizable Authorship Attribution in the Era of Generative AI23 Apr 2026
- 2026Zero-Shot Detection of LLM-Generated Text via Implicit Reward Model23 Apr 2026
- 2026An Empirical Study of Multi-Generation Sampling for Jailbreak Detection in Large Language Models20 Apr 2026
- 2026Many Ways to Be Fake: Benchmarking Fake News Detection Under Strategy-Driven AI Generation10 Apr 2026
- 2026DIA-HARM: Dialectal Disparities in Harmful Content Detection Across 50 English Dialects7 Apr 2026
- 2026Can Humans Tell? A Dual-Axis Study of Human Perception of LLM-Generated News4 Apr 2026
- 2026Automatic detection of Gen-AI texts: A comparative framework of neural models19 Mar 2026
- 2026Detecting the Machine: A Comprehensive Benchmark of AI-Generated Text Detectors Across Architectures, Domains, and Adversarial Conditions18 Mar 2026
- 2026Interpretable Predictability-Based AI Text Detection: A Replication Study16 Mar 2026
- 2026JailNewsBench: Multi-Lingual and Regional Benchmark for Fake News Generation under Jailbreak Attacks1 Mar 2026
- 2026IndicJR: A Judge-Free Benchmark of Jailbreak Robustness in South Asian Languages18 Feb 2026
- 2026Online LLM watermark detection via e-processes15 Feb 2026
- 2026The Verification Crisis: Expert Perceptions of GenAI Disinformation and the Case for Reproducible Provenance2 Feb 2026
- 2026Eroding the Truth-Default: A Causal Analysis of Human Susceptibility to Foundation Model Hallucinations and Disinformation in the Wild30 Jan 2026
- 2026On the Effectiveness of LLM-Specific Fine-Tuning for Detecting AI-Generated Text27 Jan 2026
- 2026LLM-Based Adversarial Persuasion Attacks on Fact-Checking Systems23 Jan 2026
- 2026LLM Performance Predictors: Learning When to Escalate in Hybrid Human-AI Moderation Systems11 Jan 2026
- 2026MAGA-Bench: Machine-Augment-Generated Text via Alignment Detection Benchmark8 Jan 2026
- 2026Beyond the "Truth": Investigating Election Rumors on Truth Social During the 2024 Election8 Jan 2026
- 2026All That Glisters Is Not Gold: A Benchmark for Reference-Free Counterfactual Financial Misinformation Detection7 Jan 2026
- 2026RADAR: Retrieval-Augmented Detector with Adversarial Refinement for Adaptive LLM-Generated Fake News Detection7 Jan 2026
- 2025BAID: A Benchmark for Bias Assessment of AI Detectors12 Dec 2025
- 2025Enhancing Next-Generation Language Models with Knowledge Graphs: Extending Claude, Mistral IA, and GPT-4 via KG-BERT11 Dec 2025
- 2025Watermarks for Language Models via Probabilistic Automata11 Dec 2025
- 2025MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking3 Dec 2025
- 2025TradeTrap: Are LLM-based Trading Agents Truly Reliable and Faithful?1 Dec 2025
50 newest of 559 All 559 (JSON)
- 2023A Watermark for Large Language Modelscited by 725
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 429
- 2023Provable Robust Watermarking for AI-Generated Textcited by 299
- 2023Undetectable Watermarks for Language Modelscited by 226
- 2023Who Wrote this Code? Watermarking for Code Generationcited by 141
- 2023Unbiased Watermark for Large Language Modelscited by 111
- 2023Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Modelscited by 87
- 2023Three Bricks to Consolidate Watermarks for Large Language Modelscited by 84
- 2023A Robust Semantics-based Watermark for Large Language Model against Paraphrasingcited by 82
- 2023On the Learnability of Watermarks for Language Modelscited by 81
- 2023Publicly-Detectable Watermarking for Language Modelscited by 76
- 2021Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasurescited by 73
12 most cited of 47 All 47 (JSON)
- 2026WeaveMark: Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading2 Sep 2026
- 2026Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Text9 Jun 2026
- 2026An Empirical Study of Multi-Generation Sampling for Jailbreak Detection in Large Language Models20 Apr 2026
- 2026DIA-HARM: Dialectal Disparities in Harmful Content Detection Across 50 English Dialects7 Apr 2026
- 2026JailNewsBench: Multi-Lingual and Regional Benchmark for Fake News Generation under Jailbreak Attacks1 Mar 2026
- 2026Online LLM watermark detection via e-processes15 Feb 2026
- 2025Watermarks for Language Models via Probabilistic Automata11 Dec 2025
- 2025MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking3 Dec 2025
- 2025Align to Misalign: Automatic LLM Jailbreak with Meta-Optimized LLM Judges3 Nov 2025
- 2025Tailored untruths: How personalisation challenges LLM safeguards14 Oct 2025
- 2025Improving Detection of Watermarked Language Models18 Aug 2025
- 2025SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders11 Aug 2025
12 newest of 47 All 47 (JSON)
- 2023Tool Learning with Foundation Modelscited by 302
- 2022Language Models as Agent Modelscited by 132
- 2024Richelieu: Self-Evolving LLM-Based Agents for AI Diplomacycited by 36
- 2024NetSafe: Exploring the Topological Safety of Multi-agent Networkscited by 29
- 2025TradeTrap: Are LLM-based Trading Agents Truly Reliable and Faithful?cited by 2
- 2025Toward a Safer Web: Multilingual Multi-Agent LLMs for Mitigating Adversarial Misinformation Attackscited by 1
- 2026Evaluating the Realism of LLM-powered Social Agents: A Case Study of Reactions to Spanish Online Newscited by 1
- 2026The Deliberative Illusion: Diagnosing Factual Attrition and Stance Homogenization in Multi-Agent LLM Deliberationcited by 1
- 2026TH-GNN: Heterogeneous Temporal Graph Neural Networks for LLM-Agent Shilling Attack Detectioncited by 0
- 2026TH-GNN: Heterogeneous Temporal Graph Neural Networks for LLM-Agent Shilling Attack Detection24 Jun 2026
- 2026The Deliberative Illusion: Diagnosing Factual Attrition and Stance Homogenization in Multi-Agent LLM Deliberation2 Jun 2026
- 2026Evaluating the Realism of LLM-powered Social Agents: A Case Study of Reactions to Spanish Online News27 May 2026
- 2025TradeTrap: Are LLM-based Trading Agents Truly Reliable and Faithful?1 Dec 2025
- 2025Toward a Safer Web: Multilingual Multi-Agent LLMs for Mitigating Adversarial Misinformation Attacks7 Oct 2025
- 2024NetSafe: Exploring the Topological Safety of Multi-agent Networks21 Oct 2024
- 2024Richelieu: Self-Evolving LLM-Based Agents for AI Diplomacy9 Jul 2024
- 2023Tool Learning with Foundation Models17 Apr 2023
- 2022Language Models as Agent Models3 Dec 2022
- 2024ReMoDetect: Reward Models Recognize Aligned LLM's Generationscited by 11
- 2025Normative Conflicts and Shallow AI Alignmentcited by 5
- 2026IndicJR: A Judge-Free Benchmark of Jailbreak Robustness in South Asian Languagescited by 5
- 2024Northeastern Uni at Multilingual Counterspeech Generation: Enhancing Counter Speech Generation with LLM Alignment through Direct Preference Optimizationcited by 4
- 2026Zero-Shot Detection of LLM-Generated Text via Implicit Reward Modelcited by 4
- 2026Zero-Shot Detection of LLM-Generated Text via Implicit Reward Model23 Apr 2026
- 2026IndicJR: A Judge-Free Benchmark of Jailbreak Robustness in South Asian Languages18 Feb 2026
- 2025Normative Conflicts and Shallow AI Alignment5 Jun 2025
- 2024Northeastern Uni at Multilingual Counterspeech Generation: Enhancing Counter Speech Generation with LLM Alignment through Direct Preference Optimization19 Dec 2024
- 2024ReMoDetect: Reward Models Recognize Aligned LLM's Generations27 May 2024
- 2022SSD-LM: Semi-autoregressive Simplex-based Diffusion Language Model for Text Generation and Modular Controlcited by 194
- 2024Detecting Multimedia Generated by Large AI Models: A Surveycited by 76
- 2024Fake Artificial Intelligence Generated Contents (FAIGC): A Survey of Theories, Detection Methods, and Opportunitiescited by 8
- 2022The Infinite Index: Information Retrieval on Generative Text-To-Image Modelscited by 6
- 2024Shallow Diffuse: Robust and Invisible Watermarking through Low-Dimensional Subspaces in Diffusion Modelscited by 1
- 2024Shallow Diffuse: Robust and Invisible Watermarking through Low-Dimensional Subspaces in Diffusion Models28 Oct 2024
- 2024Fake Artificial Intelligence Generated Contents (FAIGC): A Survey of Theories, Detection Methods, and Opportunities25 Apr 2024
- 2024Detecting Multimedia Generated by Large AI Models: A Survey22 Jan 2024
- 2022The Infinite Index: Information Retrieval on Generative Text-To-Image Models14 Dec 2022
- 2022SSD-LM: Semi-autoregressive Simplex-based Diffusion Language Model for Text Generation and Modular Control31 Oct 2022
- 2023How susceptible are LLMs to Logical Fallacies?cited by 23
- 2023Counter Turing Test CT^2: AI-Generated Text Detection is Not as Easy as You May Think -- Introducing AI Detectability Indexcited by 14
- 2024Heterogeneous Graph Reasoning for Fact Checking over Texts and Tablescited by 5
- 2025Tracing Thought: Using Chain-of-Thought Reasoning to Identify the LLM Behind AI-Generated Textcited by 3
- 2025Tracing Thought: Using Chain-of-Thought Reasoning to Identify the LLM Behind AI-Generated Text23 Apr 2025
- 2024Heterogeneous Graph Reasoning for Fact Checking over Texts and Tables20 Feb 2024
- 2023Counter Turing Test CT^2: AI-Generated Text Detection is Not as Easy as You May Think -- Introducing AI Detectability Index8 Oct 2023
- 2023How susceptible are LLMs to Logical Fallacies?18 Aug 2023
- 2025Forensics-Bench: A Comprehensive Forgery Detection Benchmark Suite for Large Vision Language Modelscited by 13
- 2023Socratis: Are large multimodal models emotionally aware?cited by 5
- 2025Toward Reliable VLM: A Fine-Grained Benchmark and Framework for Exposure, Bias, and Inference in Korean Street Viewscited by 1
- 2026Can Multimodal Large Language Models Generate and Detect Multimodal Social Media Fake News?cited by 0
- 2026Can Multimodal Large Language Models Generate and Detect Multimodal Social Media Fake News?20 Sep 2026
- 2025Toward Reliable VLM: A Fine-Grained Benchmark and Framework for Exposure, Bias, and Inference in Korean Street Views3 Jun 2025
- 2025Forensics-Bench: A Comprehensive Forgery Detection Benchmark Suite for Large Vision Language Models19 Mar 2025
- 2023Socratis: Are large multimodal models emotionally aware?31 Aug 2023
- 2023In-Context Retrieval-Augmented Language Modelscited by 702
- 2024Evaluating Robustness of Generative Search Engine on Adversarial Factual Questionscited by 9
- 2023Surface-Based Retrieval Reduces Perplexity of Retrieval-Augmented Language Modelscited by 7
- 2026RADAR: Retrieval-Augmented Detector with Adversarial Refinement for Adaptive LLM-Generated Fake News Detectioncited by 0
- 2026RADAR: Retrieval-Augmented Detector with Adversarial Refinement for Adaptive LLM-Generated Fake News Detection7 Jan 2026
- 2024Evaluating Robustness of Generative Search Engine on Adversarial Factual Questions25 Feb 2024
- 2023Surface-Based Retrieval Reduces Perplexity of Retrieval-Augmented Language Models25 May 2023
- 2023In-Context Retrieval-Augmented Language Models31 Jan 2023
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2023A Survey of Large Language Modelscited by 2,576
- 2021Ethical and social risks of harm from Language Modelscited by 966
- 2023The Flan Collection: Designing Data and Methods for Effective Instruction Tuningcited by 739
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
- 2021Deduplicating Training Data Makes Language Models Bettercited by 714
- 2021Retrieval Augmentation Reduces Hallucination in Conversationcited by 692
- 2023A Comprehensive Overview of Large Language Modelscited by 648
- 2022Using DeepSpeed and Megatron to Train Megatron-Turing NLG 530B, A Large-Scale Generative Language Modelcited by 559
- 2022InCoder: A Generative Model for Code Infilling and Synthesiscited by 498
- 2021Documenting Large Webtext Corpora: A Case Study on the Colossal Clean Crawled Corpuscited by 492
12 most cited of 473 All 473 (JSON)
- 2026Rethinking Multimodal Fake News Detection in the Generative AI Era29 Sep 2026
- 2026VEX-Bench: Benchmarking Verification Complexity of LLM-Generated Misinformation28 Sep 2026
- 2026A Survey on Fake Review Detection: From Pre-trained Language Models to Large Language Models12 Sep 2026
- 2026Propaganda Forensics: Recovering the Generation Pipeline of an AI-Driven Influence Campaign16 Aug 2026
- 2026What Does 99% Accuracy Measure? A Reproducible Audit of Shortcut Learning in a Widely Used Fake News Corpus26 Jul 2026
- 2026DeLIVeR: Decomposed Learning for Information-grounded Veracity Recognition via Reinforced Knowledge Graph Exploration20 Jul 2026
- 2026Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability11 Jul 2026
- 2026An Exploratory Study on LLM-Generated Code and Comments in Code Repositories2 Jul 2026
- 2026DetectZoo: A Unified Toolkit for AI-Generated Content Detection Across Text, Audio, and Image Modalities2 Jun 2026
- 2026A Systematic Analysis of Linguistic Features in AI-Generated Text Detection Across Domains and Models2 Jun 2026
- 2026Detector-Evasive LLM Paraphrasing via Constrained Policy Optimization29 May 2026
- 2026ReLoRA: Knowledge-Reusing Adaptation for Fast Rollout of Evolving LLM Services23 May 2026
12 newest of 473 All 473 (JSON)