Machine Generated Text: A Comprehensive Survey of Threat Models and Detection Methods
Not on the map. Why?
Abstract (arXiv)
Machine generated text is increasingly difficult to distinguish from human authored text. Powerful open-source models are freely available, and user-friendly tools that democratize access to generative models are proliferating. ChatGPT, which was released shortly after the first edition of this survey, epitomizes these trends. The great potential of state-of-the-art natural language generation (NLG) systems is tempered by the multitude of avenues for abuse. Detection of machine generated text is a key countermeasure for reducing abuse of NLG models, with significant technical challenges and numerous open problems. We provide a survey that includes both 1) an extensive analysis of threat models posed by contemporary NLG systems, and 2) the most complete review of machine generated text detection methods to date. This survey places machine generated text within its cybersecurity and social context, and provides strong guidance for future work addressing the most critical threat models, and ensuring detection systems themselves demonstrate trustworthiness through fairness, robustness, and accountability.
Key facts. Cited by 75 papers in the map (data through 7 Oct 2026). Builds on 81 of its 217 references that are in the map. First posted on arXiv 13 Oct 2022.
Builds on
81 of 217 references.
References · 81
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,874
- 2022Generative Adversarial Networkscited by 5,603
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
38 more
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,346
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019fairseq: A Fast, Extensible Toolkit for Sequence Modelingcited by 1,486
- 2019DialoGPT: Large-Scale Generative Pre-training for Conversational Response Generationcited by 842
- 2022A Generalist Agentcited by 802
- 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 793
- 2019CTRL: A Conditional Transformer Language Model for Controllable Generationcited by 754
- 2022GPT-NeoX-20B: An Open-Source Autoregressive Language Modelcited by 711
- 2019Defending Against Neural Fake Newscited by 553
- 2022GIT: A Generative Image-to-text Transformer for Vision and Languagecited by 536
- 2019Release Strategies and the Social Impacts of Language Modelscited by 505
- 2019Unified Vision-Language Pre-Training for Image Captioning and VQAcited by 494
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 490
- 2015Attention-Based Models for Speech Recognitioncited by 400
- 2020GeDi: Generative Discriminator Guided Sequence Generationcited by 377
- 2016SeqGAN: Sequence Generative Adversarial Nets with Policy Gradientcited by 375
- 2019CamemBERT: a Tasty French Language Modelcited by 368
- 2020AraBERT: Transformer-based Model for Arabic Language Understandingcited by 359
- 2019MASS: Masked Sequence to Sequence Pre-training for Language Generationcited by 345
- 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 341
- 2020The Pushshift Reddit Datasetcited by 289
- 2021All That's 'Human' Is Not Gold: Evaluating Human Evaluation of Generated Textcited by 287
- 2016Deep Reinforcement Learning for Dialogue Generationcited by 286
- 2019Automatic Detection of Generated Text is Easiest when Humans are Fooledcited by 260
- 2018Adversarial Attacks and Defences: A Surveycited by 259
- 2017Survey of the State of the Art in Natural Language Generation: Core tasks, applications and evaluationcited by 206
- 2017Regularizing and Optimizing LSTM Language Modelscited by 205
- 2022BlenderBot 3: a deployed conversational agent that continually learns to responsibly engagecited by 197
- 2020Deep Learning for Text Style Transfer: A Surveycited by 161
- 2020Automatic Detection of Machine Generated Text: A Critical Surveycited by 160
- 2020Better Fine-Tuning by Reducing Representational Collapsecited by 156
- 2021Unsupervised Speech Recognitioncited by 147
- 2021PanGu-α: Large-scale Autoregressive Pretrained Chinese Language Models with Auto-parallel Computationcited by 134
- 2021TURINGBENCH: A Benchmark Environment for Turing Test in the Age of Neural Text Generationcited by 118
- 2020TweepFake: about Detecting Deepfake Tweetscited by 117
- 2020You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completioncited by 112
- 2022Locally Typical Samplingcited by 108
50 most cited of 81 All 81 (JSON)
Built on by
Citing papers per year: 2023: 20; 2024: 28; 2025: 20; 2026: 7.
75 papers.
Sort:
By area:
- 2023A Watermark for Large Language Modelscited by 667
- 2024LLM Evaluators Recognize and Favor Their Own Generationscited by 651
- 2024Spotting LLMs With Binoculars: Zero-Shot Detection of Machine-Generated Textcited by 255
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 179
- 2023GPT detectors are biased against non-native English writerscited by 175
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2023On the Reliability of Watermarks for Large Language Modelscited by 170
- 2024Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviewscited by 160
- 2024Mapping the Increasing Use of LLMs in Scientific Paperscited by 112
- 2023A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directionscited by 101
- 2023OUTFOX: LLM-Generated Essay Detection Through In-Context Learning with Adversarially Generated Examplescited by 80
- 2023Three Bricks to Consolidate Watermarks for Large Language Modelscited by 80
38 more
- 2024Detecting Multimedia Generated by Large AI Models: A Surveycited by 73
- 2024On the Societal Impact of Open Foundation Modelscited by 64
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 63
- 2023On the Creativity of Large Language Modelscited by 57
- 2023Prompt Engineering for Healthcare: Methodologies and Applicationscited by 52
- 2024Watermarking Makes Language Models Radioactivecited by 52
- 2024SoK: Watermarking for AI-Generated Contentcited by 43
- 2023GPT-who: An Information Density-based Machine-Generated Text Detectorcited by 38
- 2023Anatomy of an AI-powered malicious social botnetcited by 35
- 2024Training-free LLM-generated Text Detection by Mining Token Probability Sequencescited by 33
- 2023Assessing Language Model Deployment with Risk Cardscited by 30
- 2024Detecting AI-Generated Text: Factors Influencing Detectability with Current Methodscited by 23
- 2023Model Leeching: An Extraction Attack Targeting LLMscited by 22
- 2023AI vs. Human -- Differentiation Analysis of Scientific Content Generationcited by 21
- 2023The Age of Synthetic Realities: Challenges and Opportunitiescited by 15
- 2024Rag and Roll: An End-to-End Evaluation of Indirect Prompt Manipulations in LLM-based Application Frameworkscited by 14
- 2023Detecting ChatGPT: A Survey of the State of Detecting ChatGPT-Generated Textcited by 10
- 2024Exploring Vulnerabilities and Protections in Large Language Models: A Surveycited by 10
- 2024Prompt Obfuscation for Large Language Modelscited by 10
- 2024ThreatModeling-LLM: Automating Threat Modeling using Large Language Models for Banking Systemcited by 10
- 2023Towards an Understanding and Explanation for Mixed-Initiative Artificial Scientific Text Detectioncited by 8
- 2026Detecting LLM-Generated Text with Performance Guaranteescited by 8
- 2026Learn-to-Distance: Distance Learning for Detecting LLM-Generated Textcited by 8
- 2023AuthentiGPT: Detecting Machine-Generated Text via Black-Box Language Models Denoisingcited by 5
- 2024Deciphering Textual Authenticity: A Generalized Strategy through the Lens of Large Language Semantics for Detecting Human vs. Machine-Generated Textcited by 5
- 2024SoK: Prompt Hacking of Large Language Modelscited by 5
- 2024TransitGPT: A Generative AI-based framework for interacting with GTFS data using Large Language Modelscited by 5
- 2025Aero-LLM: A Distributed Framework for Secure UAV Communication and Intelligent Decision-Makingcited by 5
- 2024Using Machine Learning to Distinguish Human-written from Machine-generated Creative Fictioncited by 4
- 2025Robustness Assessment and Enhancement of Text Watermarking for Google's SynthIDcited by 4
- 2023Detection of Fake Generated Scientific Abstractscited by 3
- 2025BiMarker: Enhancing Text Watermark Detection for Large Language Models with Bipolar Watermarkscited by 3
- 2025Automating Prompt Leakage Attacks on Large Language Models Using Agentic Approachcited by 3
- 2025Watermarking Degrades Alignment in Language Models: Analysis and Mitigationcited by 3
- 2025Detecting Post-generation Edits to Watermarked LLM Outputs via Combinatorial Watermarkingcited by 3
- 2025On the Detectability of LLM-Generated Text: What Exactly Is LLM-Generated Text?cited by 3
- 2026Overview of PAN 2026: Voight-Kampff Generative AI Detection, Text Watermarking, Multi-Author Writing Style Analysis, Generative Plagiarism Detection, and Reasoning Trajectory Detectioncited by 3
- 2023An Information-Theoretic Approach for Detecting Edits in AI-Generated Textcited by 2
50 most cited of 75 All 75 (JSON)
- 2026TTMark: Pairwise Distortion-Free Watermarking Beyond Single-Token Entropy28 Sep 2026
- 2026The Algorithmic Caricature: Auditing LLM-Generated Political Discourse Across Crisis Events12 May 2026
- 2026Ignore All Previous Instructions: Jailbreaking as a de-escalatory peace building practise to resist LLM social media bots2 Mar 2026
- 2026The Statistical Signature of LLMs20 Feb 2026
- 2026Overview of PAN 2026: Voight-Kampff Generative AI Detection, Text Watermarking, Multi-Author Writing Style Analysis, Generative Plagiarism Detection, and Reasoning Trajectory Detection9 Feb 2026
- 2026Learn-to-Distance: Distance Learning for Detecting LLM-Generated Text29 Jan 2026
- 2026Detecting LLM-Generated Text with Performance Guarantees10 Jan 2026
- 2025How Good is Post-Hoc Watermarking With Language Model Rephrasing?18 Dec 2025
- 2025Simplex-Optimized Hybrid Ensemble for Large Language Model Text Detection Under Generative Distribution Drif27 Nov 2025
- 2025On the Detectability of LLM-Generated Text: What Exactly Is LLM-Generated Text?23 Oct 2025
- 2025Machine Text Detectors are Membership Inference Attacks22 Oct 2025
- 2025Detecting Post-generation Edits to Watermarked LLM Outputs via Combinatorial Watermarking2 Oct 2025
38 more
- 2025Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID27 Aug 2025
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques18 Jul 2025
- 2025StylOch at PAN: Gradient-Boosted Trees with Frequency-Based Stylometric Features16 Jul 2025
- 2025False Alarms, Real Damage: Adversarial Attacks Using LLM-based Models on Text-based Cyber Threat Intelligence Systems5 Jul 2025
- 2025Stylometry recognizes human and LLM-generated texts in short samples1 Jul 2025
- 2025Temperature Matters: Enhancing Watermark Robustness Against Paraphrasing Attacks27 Jun 2025
- 2025Cat and Mouse -- Can Fake Text Generation Outpace Detector Systems?26 Jun 2025
- 2025Large Language Models as 'Hidden Persuaders': Fake Product Reviews are Indistinguishable to Humans and Machines16 Jun 2025
- 2025Watermarking Degrades Alignment in Language Models: Analysis and Mitigation4 Jun 2025
- 2025A Large Language Model-Supported Threat Modeling Framework for Transportation Cyber-Physical Systems1 Jun 2025
- 2025A Practical Synthesis of Detecting AI-Generated Textual, Visual, and Audio Content2 Apr 2025
- 2025Beyond speculation: Measuring the growing presence of LLM-generated texts in multilingual disinformation29 Mar 2025
- 2025Automating Prompt Leakage Attacks on Large Language Models Using Agentic Approach18 Feb 2025
- 2025Aero-LLM: A Distributed Framework for Secure UAV Communication and Intelligent Decision-Making5 Feb 2025
- 2025BiMarker: Enhancing Text Watermark Detection for Large Language Models with Bipolar Watermarks21 Jan 2025
- 2024Discourse Features Enhance Detection of Document-Level Machine-Generated Content17 Dec 2024
- 2024Using Machine Learning to Distinguish Human-written from Machine-generated Creative Fiction15 Dec 2024
- 2024TransitGPT: A Generative AI-based framework for interacting with GTFS data using Large Language Models7 Dec 2024
- 2024SoK: Watermarking for AI-Generated Content27 Nov 2024
- 2024ThreatModeling-LLM: Automating Threat Modeling using Large Language Models for Banking System26 Nov 2024
- 2024AI-generated Essays: Characteristics and Implications on Automated Scoring and Academic Integrity22 Oct 2024
- 2024SoK: Prompt Hacking of Large Language Models16 Oct 2024
- 2024Training-free LLM-generated Text Detection by Mining Token Probability Sequences8 Oct 2024
- 2024iGAiVA: Integrated Generative AI and Visual Analytics in a Machine Learning Workflow for Text Classification24 Sep 2024
- 2024Prompt Obfuscation for Large Language Models17 Sep 2024
- 2024Rag and Roll: An End-to-End Evaluation of Indirect Prompt Manipulations in LLM-based Application Frameworks9 Aug 2024
- 2024Is the Digital Forensics and Incident Response Pipeline Ready for Text-Based Threats in LLM Era?25 Jul 2024
- 2024Detecting AI-Generated Text: Factors Influencing Detectability with Current Methods21 Jun 2024
- 2024Knowledge Return Oriented Prompting (KROP)11 Jun 2024
- 2024Exploring Vulnerabilities and Protections in Large Language Models: A Survey1 Jun 2024
- 2024Who Writes the Review, Human or AI?30 May 2024
- 2024Exploring the Potential of Conversational AI Support for Agent-Based Social Simulation Model Design12 May 2024
- 2024LLM Evaluators Recognize and Favor Their Own Generations15 Apr 2024
- 2024Mapping the Increasing Use of LLMs in Scientific Papers1 Apr 2024
- 2024Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviews11 Mar 2024
- 2024On the Societal Impact of Open Foundation Models27 Feb 2024
- 2024Watermarking Makes Language Models Radioactive22 Feb 2024
- 2024Whispers in the Machine: Confidentiality in Agentic Systems10 Feb 2024
50 newest of 75 All 75 (JSON)
- 2023A Watermark for Large Language Modelscited by 667
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 179
- 2023On the Reliability of Watermarks for Large Language Modelscited by 170
- 2023Three Bricks to Consolidate Watermarks for Large Language Modelscited by 80
- 2024Watermarking Makes Language Models Radioactivecited by 52
- 2024SoK: Watermarking for AI-Generated Contentcited by 43
- 2024Exploring Vulnerabilities and Protections in Large Language Models: A Surveycited by 10
- 2025Robustness Assessment and Enhancement of Text Watermarking for Google's SynthIDcited by 4
- 2025BiMarker: Enhancing Text Watermark Detection for Large Language Models with Bipolar Watermarkscited by 3
- 2025Detecting Post-generation Edits to Watermarked LLM Outputs via Combinatorial Watermarkingcited by 3
- 2025Machine Text Detectors are Membership Inference Attackscited by 2
- 2025How Good is Post-Hoc Watermarking With Language Model Rephrasing?cited by 2
12 most cited of 15 All 15 (JSON)
- 2026TTMark: Pairwise Distortion-Free Watermarking Beyond Single-Token Entropy28 Sep 2026
- 2026Ignore All Previous Instructions: Jailbreaking as a de-escalatory peace building practise to resist LLM social media bots2 Mar 2026
- 2025How Good is Post-Hoc Watermarking With Language Model Rephrasing?18 Dec 2025
- 2025Machine Text Detectors are Membership Inference Attacks22 Oct 2025
- 2025Detecting Post-generation Edits to Watermarked LLM Outputs via Combinatorial Watermarking2 Oct 2025
- 2025Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID27 Aug 2025
- 2025BiMarker: Enhancing Text Watermark Detection for Large Language Models with Bipolar Watermarks21 Jan 2025
- 2024SoK: Watermarking for AI-Generated Content27 Nov 2024
- 2024Knowledge Return Oriented Prompting (KROP)11 Jun 2024
- 2024Exploring Vulnerabilities and Protections in Large Language Models: A Survey1 Jun 2024
- 2024Watermarking Makes Language Models Radioactive22 Feb 2024
- 2024Security and Privacy Challenges of Large Language Models: A Survey30 Jan 2024
12 newest of 15 All 15 (JSON)
- 2024Detecting Multimedia Generated by Large AI Models: A Surveycited by 73
- 2024Detecting Multimedia Generated by Large AI Models: A Survey22 Jan 2024
- 2024Spotting LLMs With Binoculars: Zero-Shot Detection of Machine-Generated Textcited by 255
- 2023GPT detectors are biased against non-native English writerscited by 175
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2024Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviewscited by 160
- 2024Mapping the Increasing Use of LLMs in Scientific Paperscited by 112
- 2023A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directionscited by 101
- 2023OUTFOX: LLM-Generated Essay Detection Through In-Context Learning with Adversarially Generated Examplescited by 80
- 2024On the Societal Impact of Open Foundation Modelscited by 64
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 63
- 2023On the Creativity of Large Language Modelscited by 57
- 2023Prompt Engineering for Healthcare: Methodologies and Applicationscited by 52
- 2023GPT-who: An Information Density-based Machine-Generated Text Detectorcited by 38
12 most cited of 53 All 53 (JSON)
- 2026The Algorithmic Caricature: Auditing LLM-Generated Political Discourse Across Crisis Events12 May 2026
- 2026The Statistical Signature of LLMs20 Feb 2026
- 2026Learn-to-Distance: Distance Learning for Detecting LLM-Generated Text29 Jan 2026
- 2026Detecting LLM-Generated Text with Performance Guarantees10 Jan 2026
- 2025Simplex-Optimized Hybrid Ensemble for Large Language Model Text Detection Under Generative Distribution Drif27 Nov 2025
- 2025On the Detectability of LLM-Generated Text: What Exactly Is LLM-Generated Text?23 Oct 2025
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques18 Jul 2025
- 2025StylOch at PAN: Gradient-Boosted Trees with Frequency-Based Stylometric Features16 Jul 2025
- 2025False Alarms, Real Damage: Adversarial Attacks Using LLM-based Models on Text-based Cyber Threat Intelligence Systems5 Jul 2025
- 2025Stylometry recognizes human and LLM-generated texts in short samples1 Jul 2025
- 2025Temperature Matters: Enhancing Watermark Robustness Against Paraphrasing Attacks27 Jun 2025
- 2025Cat and Mouse -- Can Fake Text Generation Outpace Detector Systems?26 Jun 2025
12 newest of 53 All 53 (JSON)