Smaller Language Models are Better Black-box Machine-Generated Text Detectors
Not on the map. Why?
Abstract (arXiv)
With the advent of fluent generative language models that can produce convincing utterances very similar to those written by humans, distinguishing whether a piece of text is machine-generated or human-written becomes more challenging and more important, as such models could be used to spread misinformation, fake news, fake reviews and to mimic certain authors and figures. To this end, there have been a slew of methods proposed to detect machine-generated text. Most of these methods need access to the logits of the target model or need the ability to sample from the target. One such black-box detection method relies on the observation that generated text is locally optimal under the likelihood function of the generator, while human-written text is not. We find that overall, smaller and partially-trained models are better universal text detectors: they can more precisely detect text generated from both small and larger models. Interestingly, we find that whether the detector and generator were trained on the same data is not critically important to the detection success. For instance the OPT-125M model has an AUC of 0.81 in detecting ChatGPT generations, whereas a larger model from the GPT family, GPTJ-6B, has AUC of 0.45.
Key facts. Cited by 35 papers in the map (data through 14 Oct 2026). Builds on 26 of its 37 references that are in the map. First posted on arXiv 17 May 2023.
Builds on
26 of 37 references.
References · 26
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,148
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2018Hierarchical Neural Story Generationcited by 1,193
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
- 2023A Watermark for Large Language Modelscited by 725
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
- 2019Release Strategies and the Social Impacts of Language Modelscited by 513
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 496
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 491
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 429
14 more
- 2018Generating Natural Language Adversarial Examplescited by 424
- 2023Can AI-Generated Text be Reliably Detected?cited by 386
- 2019Automatic Detection of Generated Text is Easiest when Humans are Fooledcited by 261
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 175
- 2020Automatic Detection of Machine Generated Text: A Critical Surveycited by 166
- 2020Contextualized Perturbation for Textual Adversarial Attackcited by 136
- 2020Adversarial Watermarking Transformer: Towards Tracing Text Provenance with Data Hidingcited by 130
- 2021TURINGBENCH: A Benchmark Environment for Turing Test in the Age of Neural Text Generationcited by 120
- 2019Real or Fake? Learning to Discriminate Machine from Human Generated Textcited by 99
- 2023MGTBench: Benchmarking Machine-Generated Text Detectioncited by 93
- 2019Neural Linguistic Steganographycited by 78
- 2022Real or Fake Text?: Investigating Human Ability to Detect Boundaries Between Human-Written and Machine-Generated Textcited by 63
- 2017Generating Steganographic Text with LSTMscited by 44
- 2023Bot or Human? Detecting ChatGPT Imposters with A Single Questioncited by 26
Built on by
Citing papers per year: 2023: 11; 2024: 19; 2025: 4; 2026: 1.
35 papers.
Sort:
By area:
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 258
- 2023Can LLM-Generated Misinformation Be Detected?cited by 177
- 2023DNA-GPT: Divergent N-Gram Analysis for Training-Free Detection of GPT-Generated Textcited by 129
- 2023A Survey on Detection of LLMs-Generated Contentcited by 71
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Modelscited by 65
- 2024Raidar: geneRative AI Detection viA Rewritingcited by 52
- 2023Large Language Models can be Guided to Evade AI-Generated Text Detectioncited by 44
- 2024What is the Role of Small Models in the LLM Era: A Surveycited by 41
- 2024GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trickcited by 37
- 2024Technical Report on the Pangram AI-Generated Text Classifiercited by 34
- 2023Towards Possibilities & Impossibilities of AI-generated Text Detection: A Surveycited by 28
- 2024Between Lines of Code: Unraveling the Distinct Patterns of Machine and Human Programmerscited by 27
23 more
- 2024Humanizing Machine-Generated Content: Evading AI-Text Detection through Adversarial Attackcited by 27
- 2023From Text to Source: Results in Detecting Large Language Model-Generated Contentcited by 26
- 2024Stumbling Blocks: Stress Testing the Robustness of Machine-Generated Text Detectors Under Attackscited by 26
- 2023Zero-Shot Detection of Machine-Generated Codescited by 24
- 2024Glimpse: Enabling White-Box Methods to Use Proprietary Models for Zero-Shot LLM-Generated Text Detectioncited by 14
- 2024EAGLE: A Domain Generalization Framework for AI-generated Text Detectioncited by 13
- 2024DALD: Improving Logits-based Detector without Logits from Black-box LLMscited by 13
- 2023On the Zero-Shot Generalization of Machine-Generated Text Detectorscited by 11
- 2024Does DetectGPT Fully Utilize Perturbation? Bridging Selective Perturbation to Fine-tuned Contrastive Learning Detector would be Bettercited by 11
- 2024Duwak: Dual Watermarks in Large Language Modelscited by 11
- 2024Hidding the Ghostwriters: An Adversarial Evaluation of AI-Generated Student Essay Detectioncited by 10
- 2025A Comprehensive Analysis of Large Language Model Outputs: Similarity, Diversity, and Biascited by 10
- 2023Assaying on the Robustness of Zero-Shot Machine-Generated Text Detectorscited by 8
- 2025Human Texts Are Outliers: Detecting LLM-generated Texts via Out-of-distribution Detectioncited by 8
- 2024The Impact of Prompts on Zero-Shot Detection of AI-Generated Textcited by 6
- 2024Survey on Plagiarism Detection in Large Language Models: The Impact of ChatGPT and Gemini on Academic Integritycited by 5
- 2024LSHBloom: Memory-efficient, Extreme-scale Document Deduplicationcited by 5
- 2025Synthetic Data Can Mislead Evaluations: Membership Inference as Machine Text Detectioncited by 3
- 2024Navigating the Shadows: Unveiling Effective Disturbances for Modern AI Content Detectorscited by 2
- 2024An Evaluation of Explanation Methods for Black-Box Detectors of Machine-Generated Textcited by 2
- 2024Investigating the Influence of Prompt-Specific Shortcuts in AI Generated Text Detectioncited by 1
- 2025DEER: Disentangled Mixture of Experts with Instance-Adaptive Routing for Generalizable Machine-Generated Text Detectioncited by 0
- 2026Hidden Human-Like Nature of Machine-Generated Texts: Theory and Detection Enhancementcited by 0
- 2026Hidden Human-Like Nature of Machine-Generated Texts: Theory and Detection Enhancement22 May 2026
- 2025DEER: Disentangled Mixture of Experts with Instance-Adaptive Routing for Generalizable Machine-Generated Text Detection3 Nov 2025
- 2025Human Texts Are Outliers: Detecting LLM-generated Texts via Out-of-distribution Detection7 Oct 2025
- 2025A Comprehensive Analysis of Large Language Model Outputs: Similarity, Diversity, and Bias14 May 2025
- 2025Synthetic Data Can Mislead Evaluations: Membership Inference as Machine Text Detection20 Jan 2025
- 2024Glimpse: Enabling White-Box Methods to Use Proprietary Models for Zero-Shot LLM-Generated Text Detection16 Dec 2024
- 2024LSHBloom: Memory-efficient, Extreme-scale Document Deduplication6 Nov 2024
- 2024What is the Role of Small Models in the LLM Era: A Survey10 Sep 2024
- 2024An Evaluation of Explanation Methods for Black-Box Detectors of Machine-Generated Text26 Aug 2024
- 2024Investigating the Influence of Prompt-Specific Shortcuts in AI Generated Text Detection24 Jun 2024
- 2024Navigating the Shadows: Unveiling Effective Disturbances for Modern AI Content Detectors13 Jun 2024
- 2024DALD: Improving Logits-based Detector without Logits from Black-box LLMs7 Jun 2024
23 more
- 2024Survey on Plagiarism Detection in Large Language Models: The Impact of ChatGPT and Gemini on Academic Integrity4 Jun 2024
- 2024Humanizing Machine-Generated Content: Evading AI-Text Detection through Adversarial Attack2 Apr 2024
- 2024The Impact of Prompts on Zero-Shot Detection of AI-Generated Text29 Mar 2024
- 2024EAGLE: A Domain Generalization Framework for AI-generated Text Detection23 Mar 2024
- 2024Duwak: Dual Watermarks in Large Language Models12 Mar 2024
- 2024Technical Report on the Pangram AI-Generated Text Classifier21 Feb 2024
- 2024GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trick20 Feb 2024
- 2024Stumbling Blocks: Stress Testing the Robustness of Machine-Generated Text Detectors Under Attacks18 Feb 2024
- 2024Hidding the Ghostwriters: An Adversarial Evaluation of AI-Generated Student Essay Detection1 Feb 2024
- 2024Does DetectGPT Fully Utilize Perturbation? Bridging Selective Perturbation to Fine-tuned Contrastive Learning Detector would be Better1 Feb 2024
- 2024Raidar: geneRative AI Detection viA Rewriting23 Jan 2024
- 2024Between Lines of Code: Unraveling the Distinct Patterns of Machine and Human Programmers12 Jan 2024
- 2023Assaying on the Robustness of Zero-Shot Machine-Generated Text Detectors20 Dec 2023
- 2023A Survey on Detection of LLMs-Generated Content24 Oct 2023
- 2023Towards Possibilities & Impossibilities of AI-generated Text Detection: A Survey23 Oct 2023
- 2023On the Zero-Shot Generalization of Machine-Generated Text Detectors8 Oct 2023
- 2023Zero-Shot Detection of Machine-Generated Codes8 Oct 2023
- 2023Can LLM-Generated Misinformation Be Detected?25 Sep 2023
- 2023From Text to Source: Results in Detecting Large Language Model-Generated Content23 Sep 2023
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Models30 Jul 2023
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparison29 May 2023
- 2023DNA-GPT: Divergent N-Gram Analysis for Training-Free Detection of GPT-Generated Text27 May 2023
- 2023Large Language Models can be Guided to Evade AI-Generated Text Detection18 May 2023
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 258
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Modelscited by 65
- 2024GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trickcited by 37
- 2023From Text to Source: Results in Detecting Large Language Model-Generated Contentcited by 26
- 2024Duwak: Dual Watermarks in Large Language Modelscited by 11
- 2024Duwak: Dual Watermarks in Large Language Models12 Mar 2024
- 2024GumbelSoft: Diversified Language Model Watermarking via the GumbelMax-trick20 Feb 2024
- 2023From Text to Source: Results in Detecting Large Language Model-Generated Content23 Sep 2023
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Models30 Jul 2023
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparison29 May 2023
- 2023Can LLM-Generated Misinformation Be Detected?cited by 177
- 2023DNA-GPT: Divergent N-Gram Analysis for Training-Free Detection of GPT-Generated Textcited by 129
- 2023A Survey on Detection of LLMs-Generated Contentcited by 71
- 2024Raidar: geneRative AI Detection viA Rewritingcited by 52
- 2023Large Language Models can be Guided to Evade AI-Generated Text Detectioncited by 44
- 2024What is the Role of Small Models in the LLM Era: A Surveycited by 41
- 2024Technical Report on the Pangram AI-Generated Text Classifiercited by 34
- 2023Towards Possibilities & Impossibilities of AI-generated Text Detection: A Surveycited by 28
- 2024Between Lines of Code: Unraveling the Distinct Patterns of Machine and Human Programmerscited by 27
- 2024Humanizing Machine-Generated Content: Evading AI-Text Detection through Adversarial Attackcited by 27
- 2024Stumbling Blocks: Stress Testing the Robustness of Machine-Generated Text Detectors Under Attackscited by 26
- 2023Zero-Shot Detection of Machine-Generated Codescited by 24
12 most cited of 28 All 28 (JSON)
- 2026Hidden Human-Like Nature of Machine-Generated Texts: Theory and Detection Enhancement22 May 2026
- 2025Human Texts Are Outliers: Detecting LLM-generated Texts via Out-of-distribution Detection7 Oct 2025
- 2025A Comprehensive Analysis of Large Language Model Outputs: Similarity, Diversity, and Bias14 May 2025
- 2024Glimpse: Enabling White-Box Methods to Use Proprietary Models for Zero-Shot LLM-Generated Text Detection16 Dec 2024
- 2024LSHBloom: Memory-efficient, Extreme-scale Document Deduplication6 Nov 2024
- 2024What is the Role of Small Models in the LLM Era: A Survey10 Sep 2024
- 2024An Evaluation of Explanation Methods for Black-Box Detectors of Machine-Generated Text26 Aug 2024
- 2024Investigating the Influence of Prompt-Specific Shortcuts in AI Generated Text Detection24 Jun 2024
- 2024Navigating the Shadows: Unveiling Effective Disturbances for Modern AI Content Detectors13 Jun 2024
- 2024DALD: Improving Logits-based Detector without Logits from Black-box LLMs7 Jun 2024
- 2024Survey on Plagiarism Detection in Large Language Models: The Impact of ChatGPT and Gemini on Academic Integrity4 Jun 2024
- 2024Humanizing Machine-Generated Content: Evading AI-Text Detection through Adversarial Attack2 Apr 2024
12 newest of 28 All 28 (JSON)