Mutation-Based Adversarial Attacks on Neural Text Detectors
Not on the map. Why?
Abstract (arXiv)
Neural text detectors aim to decide the characteristics that distinguish neural (machine-generated) from human texts. To challenge such detectors, adversarial attacks can alter the statistical characteristics of the generated text, making the detection task more and more difficult. Inspired by the advances of mutation analysis in software development and testing, in this paper, we propose character- and word-based mutation operators for generating adversarial samples to attack state-of-the-art natural text detectors. This falls under white-box adversarial attacks. In such attacks, attackers have access to the original text and create mutation instances based on this original text. The ultimate goal is to confuse machine learning models and classifiers and decrease their prediction accuracy.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 32 of its 48 references that are in the map. First posted on arXiv 11 Feb 2023.
Builds on
32 of 48 references.
References · 32
- 2017Attention Is All You Needcited by 59,932
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2022Generative Adversarial Networkscited by 5,603
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,201
- 2019When Does Label Smoothing Help?cited by 985
- 2016Adversarial Machine Learning at Scalecited by 934
- 2014Show and Tell: A Neural Image Caption Generatorcited by 877
20 more
- 2019Release Strategies and the Social Impacts of Language Modelscited by 505
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 490
- 2018Texygen: A Benchmarking Platform for Text Generation Modelscited by 484
- 2017Regularizing Neural Networks by Penalizing Confident Output Distributionscited by 461
- 2019On the Detection of Digital Face Manipulationcited by 259
- 2020Automatic Detection of Machine Generated Text: A Critical Surveycited by 160
- 2019FakeCatcher: Detection of Synthetic Portrait Videos using Biological Signalscited by 143
- 2020A Survey of Knowledge-Enhanced Text Generationcited by 119
- 2017Long Text Generation via Adversarial Training with Leaked Informationcited by 100
- 2018Tensor2Tensor for Neural Machine Translationcited by 85
- 2019Generating Sentiment-Preserving Fake Online Reviews Using Neural Language Models and Their Human- and Machine-based Detectioncited by 50
- 2020Attacking Neural Text Detectorscited by 37
- 2020Improved Trainable Calibration Method for Neural Networks on Medical Imaging Classificationcited by 37
- 2016Generating Chinese Classical Poems with RNN Encoder-Decodercited by 16
- 2020ScriptWriter: Narrative-Guided Script Generationcited by 15
- 2020Defense-PointNet: Protecting PointNet Against Adversarial Attackscited by 13
- 2022Revisiting Near/Remote Sensing with Geospatial Attentioncited by 12
- 2021Detecting Bot-Generated Text by Characterizing Linguistic Accommodation in Human-Bot Interactionscited by 8
- 2021Adversarial Attacks and Defenses for Social Network Text Processing Applications: Techniques, Challenges and Future Research Directionscited by 4
- 2020Attention Beam: An Image Captioning Approachcited by 2
Built on by
Citing papers per year: 2023: 3; 2024: 2; 2025: 4.
9 papers.
- 2024RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectorscited by 157
- 2023A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directionscited by 101
- 2023J-Guard: Journalism Guided Adversarially Robust Detection of AI-generated Newscited by 10
- 2025DivScore: Zero-Shot Detection of LLM-Generated Text in Specialized Domainscited by 9
- 2025GenAI Content Detection Task 3: Cross-Domain Machine-Generated Text Detection Challengecited by 7
- 2025Diversity Boosts AI-Generated Text Detectioncited by 6
- 2025A Training-free Method for LLM Text Attributioncited by 4
- 2023Efficient Black-Box Adversarial Attacks on Neural Text Detectorscited by 3
- 2024Navigating the Shadows: Unveiling Effective Disturbances for Modern AI Content Detectorscited by 2
- 2025Diversity Boosts AI-Generated Text Detection23 Sep 2025
- 2025DivScore: Zero-Shot Detection of LLM-Generated Text in Specialized Domains7 Jun 2025
- 2025GenAI Content Detection Task 3: Cross-Domain Machine-Generated Text Detection Challenge15 Jan 2025
- 2025A Training-free Method for LLM Text Attribution4 Jan 2025
- 2024Navigating the Shadows: Unveiling Effective Disturbances for Modern AI Content Detectors13 Jun 2024
- 2024RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectors13 May 2024
- 2023Efficient Black-Box Adversarial Attacks on Neural Text Detectors3 Nov 2023
- 2023A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directions23 Oct 2023
- 2023J-Guard: Journalism Guided Adversarially Robust Detection of AI-generated News6 Sep 2023