RADAR: Robust AI-Text Detection via Adversarial Learning
Not on the map. Why?
Abstract (arXiv)
Recent advances in large language models (LLMs) and the intensifying popularity of ChatGPT-like applications have blurred the boundary of high-quality text generation between humans and machines. However, in addition to the anticipated revolutionary changes to our technology and society, the difficulty of distinguishing LLM-generated texts (AI-text) from human-generated texts poses new challenges of misuse and fairness, such as fake content generation, plagiarism, and false accusations of innocent writers. While existing works show that current AI-text detectors are not robust to LLM-based paraphrasing, this paper aims to bridge this gap by proposing a new framework called RADAR, which jointly trains a robust AI-text detector via adversarial learning. RADAR is based on adversarial training of a paraphraser and a detector. The paraphraser's goal is to generate realistic content to evade AI-text detection. RADAR uses the feedback from the detector to update the paraphraser, and vice versa. Evaluated with 8 different LLMs (Pythia, Dolly 2.0, Palmyra, Camel, GPT-J, Dolly 1.0, LLaMA, and Vicuna) across 4 datasets, experimental results show that RADAR significantly outperforms existing AI-text detection methods, especially when paraphrasing is in place. We also identify the strong transferability of RADAR from instruction-tuned LLMs to other LLMs, and evaluate the improved capability of RADAR via GPT-3.5-Turbo.
Key facts. Cited by 190 papers in the map (data through 14 Oct 2026). Builds on 28 of its 37 references that are in the map. First posted on arXiv 7 Jul 2023.
Builds on
28 of 37 references.
References · 28
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2022Generative Adversarial Networkscited by 5,627
- 2016Categorical Reparameterization with Gumbel-Softmaxcited by 2,739
- 2016The Concrete Distribution: A Continuous Relaxation of Discrete Random Variablescited by 1,148
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
- 2023A Watermark for Large Language Modelscited by 725
- 2019Defending Against Neural Fake Newscited by 559
- 2019Release Strategies and the Social Impacts of Language Modelscited by 513
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 496
16 more
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 429
- 2023Can AI-Generated Text be Reliably Detected?cited by 386
- 2016SeqGAN: Sequence Generative Adversarial Nets with Policy Gradientcited by 376
- 2019Automatic Detection of Generated Text is Easiest when Humans are Fooledcited by 261
- 2023GPT detectors are biased against non-native English writerscited by 178
- 2018Seq2Sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examplescited by 94
- 2023On the Possibilities of AI-Generated Text Detectioncited by 88
- 2018Unsupervised Text Style Transfer using Language Models as Discriminatorscited by 70
- 2018DP-GAN: Diversity-Promoting Generative Adversarial Network for Generating Informative and Diversified Textcited by 40
- 2018Discrete Adversarial Attacks and Submodular Optimization with Applications to Text Classificationcited by 35
- 2019Training language GANs from Scratchcited by 31
- 2021Frustratingly Easy Edit-based Linguistic Steganography with a Masked Language Modelcited by 30
- 2020TextGAIL: Generative Adversarial Imitation Learning for Text Generationcited by 28
- 2021Factorising Meaning and Form for Intent-Preserving Paraphrasingcited by 22
- 2022Hierarchical Sketch Induction for Paraphrase Generationcited by 22
- 2023Adversarial Transformer Language Models for Contextual Commonsense Inferencecited by 2
Built on by
Citing papers per year: 2023: 8; 2024: 46; 2025: 65; 2026: 71.
190 papers.
Sort:
By area:
- 2024Spotting LLMs With Binoculars: Zero-Shot Detection of Machine-Generated Textcited by 263
- 2024Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviewscited by 164
- 2024RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectorscited by 163
- 2024Mapping the Increasing Use of LLMs in Scientific Paperscited by 118
- 2023A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directionscited by 105
- 2024Watermark Stealing in Large Language Modelscited by 92
- 2023OUTFOX: LLM-Generated Essay Detection Through In-Context Learning with Adversarially Generated Examplescited by 80
- 2024Detecting Multimedia Generated by Large AI Models: A Surveycited by 76
- 2023A Survey on Detection of LLMs-Generated Contentcited by 71
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Modelscited by 65
- 2025DeepScientist: Advancing Frontier-Pushing Scientific Findings Progressivelycited by 63
- 2024DeTeCtive: Detecting AI-generated Text via Multi-Level Contrastive Learningcited by 53
38 more
- 2024SoK: Watermarking for AI-Generated Contentcited by 51
- 2024M4GT-Bench: Evaluation Benchmark for Black-Box Machine-Generated Text Detectioncited by 43
- 2025People who frequently use ChatGPT for writing tasks are accurate and robust detectors of AI-generated textcited by 40
- 2025Are You Getting What You Pay For? Auditing Model Substitution in LLM APIscited by 38
- 2023Towards Possibilities & Impossibilities of AI-generated Text Detection: A Surveycited by 28
- 2024Between Lines of Code: Unraveling the Distinct Patterns of Machine and Human Programmerscited by 27
- 2024Humanizing Machine-Generated Content: Evading AI-Text Detection through Adversarial Attackcited by 27
- 2024Beemo: Benchmark of Expert-edited Machine-generated Outputscited by 27
- 2023From Text to Source: Results in Detecting Large Language Model-Generated Contentcited by 26
- 2024Stumbling Blocks: Stress Testing the Robustness of Machine-Generated Text Detectors Under Attackscited by 26
- 2023A Ship of Theseus: Curious Cases of Paraphrasing in LLM-Generated Textscited by 23
- 2024Detecting AI-Generated Text: Factors Influencing Detectability with Current Methodscited by 23
- 2024Permute-and-Flip: An optimally stable and watermarkable decoder for LLMscited by 22
- 2025AdaDetectGPT: Adaptive Detection of LLM-Generated Text with Statistical Guaranteescited by 21
- 2025DAMAGE: Detecting Adversarially Modified AI Generated Textcited by 20
- 2025Almost AI, Almost Human: The Challenge of Detecting AI-Polished Writingcited by 19
- 2024The Impact of Large Language Models in Academia: from Writing to Speakingcited by 18
- 2025Rethinking Data Protection in the (Generative) Artificial Intelligence Eracited by 18
- 2025Adversarial Paraphrasing: A Universal Attack for Humanizing AI-Generated Textcited by 17
- 2024Spotting AI's Touch: Identifying LLM-Paraphrased Spans in Textcited by 16
- 2025HACo-Det: A Study Towards Fine-Grained Machine-Generated Text Detection under Human-AI Coauthoringcited by 15
- 2025Machine-generated text detection prevents language model collapsecited by 14
- 2025Which Contributions Deserve Credit? Perceptions of Attribution in Human-AI Co-Creationcited by 14
- 2024EAGLE: A Domain Generalization Framework for AI-generated Text Detectioncited by 13
- 2025GenAI Content Detection Task 1: English and Multilingual Machine-Generated Text Detection: AI vs. Humancited by 13
- 2024Real-time Factuality Assessment from Adversarial Feedbackcited by 12
- 2025DETree: DEtecting Human-AI Collaborative Texts via Tree-Structured Hierarchical Representation Learningcited by 12
- 2024Does DetectGPT Fully Utilize Perturbation? Bridging Selective Perturbation to Fine-tuned Contrastive Learning Detector would be Bettercited by 11
- 2024Duwak: Dual Watermarks in Large Language Modelscited by 11
- 2024A Practical Examination of AI-Generated Text Detectors for Large Language Modelscited by 11
- 2025DNA-DetectLLM: Unveiling AI-Generated Text via a DNA-Inspired Mutation-Repair Paradigmcited by 11
- 2026GPTZero: Robust Detection of LLM-Generated Textscited by 11
- 2024Detectors for Safe and Reliable LLMs: Implementations, Uses, and Limitationscited by 10
- 2024On the Generalization and Adaptation Ability of Machine-Generated Text Detectors in Academic Writingcited by 10
- 2025Reliably Bounding False Positives: A Zero-Shot Machine-Generated Text Detection Framework via Multiscaled Conformal Predictioncited by 10
- 2025Your Language Model Can Secretly Write Like Humans: Contrastive Paraphrase Attacks on LLM-Generated Text Detectorscited by 10
- 2026Detecting LLM-Generated Text with Performance Guaranteescited by 10
- 2025Stress-testing Machine Generated Text Detection: Shifting Language Models Writing Style to Fool Detectorscited by 9
50 most cited of 190 All 190 (JSON)
- 2026Attacking Only Half the Data: Two-Sided Evaluation of AI-Text Detector Robustness13 Oct 2026
- 2026Measuring Artifact Reliance in Machine-Generated Text Detectors9 Oct 2026
- 2026Forging LLM Authorship Fingerprints with Targeted Rewriting30 Sep 2026
- 2026Policy-Conditioned AI-Use Detection: An Evidentiary Framework for Academic Publishing29 Sep 2026
- 2026C-HAT-Bench: Benchmarking Chinese AI-Text Detection Beyond Fully Generated Text26 Sep 2026
- 2026Detecting GPT-Assisted Writing Using Interpretable Stylometric Features22 Sep 2026
- 2026Towards Detecting AI-Assisted Responses in Online Surveys15 Sep 2026
- 2026Learning to Follow In-Context Watermark Instructions via Self-Distillation29 Aug 2026
- 2026Beyond Global Scalars: Synergizing Token-Level Statistics and Deep Semantics for Adversarial AIGC Text Detection28 Aug 2026
- 2026Style as a Confound: False Positives in AI Detection of Non-Native Academic Writing27 Aug 2026
- 2026Relational Over-Regularization: Graph-Based AI-Generated Text Detection via Sentence Transition Deviation27 Aug 2026
- 2026VietAIDetector: An Open-Source Zero-Shot Detector for Vietnamese AI-Generated Text26 Aug 2026
38 more
- 2026Linear Probing Provides Robust and Efficient Detection of Machine-Generated Text25 Aug 2026
- 2026EVIL-Detect for NLPCC 2026 Shared Task 6: LLM-Generated Text Detection11 Aug 2026
- 2026MD-ProTector: Positioning Multiple Data-Driven Prototypes for LLM-Generated Text Detection11 Aug 2026
- 2026Build it, Break it, Repeat: Benchmarking and improving LLM-manipulated disinformation detection in social media posts10 Aug 2026
- 2026Once a Response, Always a Response: Detecting LLM-generated Text via Latent Prompt Restoration6 Aug 2026
- 2026DWT-Fusion: A Signal-Based Framework for Training-Free LLM-Generated Text Detection24 Jul 2026
- 2026Detecting LLM-Generated Tokens in Human--LLM Coauthored Text23 Jul 2026
- 2026Latent Trajectory Discrimination for AI-Generated Text Detection16 Jul 2026
- 2026Rethinking AI-Generated Text Detection: A Strong Baseline and the Distribution-Shift Problem That Remains4 Jul 2026
- 2026Triospect: A Three-Dimensional Framework for Robust Statistical AI-Generated Text Detection Against Diverse Attacks30 Jun 2026
- 2026Hitting a Moving Target: Test-Time Adaptation for AI Text Detection under Continual Distribution Shift23 Jun 2026
- 2026WaveDetect: Robust Framework for Machine-Generated Text Detection via Wavelet Transform22 Jun 2026
- 2026SenFlow: Inter-Sentence Flow Modeling for AI-Generated Text Detection in Hybrid Documents17 Jun 2026
- 2026Non-Parametric Machine Text Detection via Multi-View Gaussian Processes12 Jun 2026
- 2026PolyAlign: Conditional Human-Distribution Alignment11 Jun 2026
- 2026Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Text9 Jun 2026
- 2026Unsupervised Style Representation Learning for AI-Text Detection via Paraphrase Inversion8 Jun 2026
- 2026SV-Detect: AI-generated Text Detection with Steering Vectors5 Jun 2026
- 2026Operation-Guided Progressive Human-to-AI Text Transformation Benchmark for Multi-Granularity AI-Text Detection4 Jun 2026
- 2026DetectZoo: A Unified Toolkit for AI-Generated Content Detection Across Text, Audio, and Image Modalities2 Jun 2026
- 2026On the Salience of Low-Probability Tokens for AI-Generated Text Detection: A Multiscale Uncertainty Perspective1 Jun 2026
- 2026A Distribution-Free Framework for Rewrite-Based Human-text Detection via Knockoff Filtering29 May 2026
- 2026Detector-Evasive LLM Paraphrasing via Constrained Policy Optimization29 May 2026
- 2026TSM-Bench: Detecting LLM-Generated Text in Real-World Wikipedia Editing Practices29 May 2026
- 2026Show, Don't TELL: Explainable AI-Generated Text Detection27 May 2026
- 2026Hidden Human-Like Nature of Machine-Generated Texts: Theory and Detection Enhancement22 May 2026
- 2026Sem-Detect: Semantic Level Detection of AI Generated Peer-Reviews20 May 2026
- 2026Amplifying, Not Learning: The Price of Out-of-Distribution Generalization in AI-Text Detection20 May 2026
- 2026From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI15 May 2026
- 2026Multi-Level Contextual Token Relation Modeling for Machine-Generated Text Detection15 May 2026
- 2026Paraphrasing Attack Resilience of Various AI-Generated Text Detection Methods14 May 2026
- 2026T5-CSBoost: Adversarial Perturbation Resistant LLM Fingerprinting8 May 2026
- 2026MELD: Multi-Task Equilibrated Learning Detector for AI-Generated Text7 May 2026
- 2026Lightweight Stylistic Consistency Profiling: Robust Detection of LLM-Generated Textual Content for Multimedia Moderation7 May 2026
- 2026Segmenting Human-LLM Co-authored Text via Change Point Detection5 May 2026
- 2026Fight Poison with Poison: Enhancing Robustness in Few-shot Machine-Generated Text Detection with Adversarial Training4 May 2026
- 2026LLM Output Detectability and Task Performance Can be Jointly Optimized2 May 2026
- 2026DeGenTWeb: A First Look at LLM-dominant Websites30 Apr 2026
50 newest of 190 All 190 (JSON)
- 2024Watermark Stealing in Large Language Modelscited by 92
- 2023An Unforgeable Publicly Verifiable Watermark for Large Language Modelscited by 65
- 2024SoK: Watermarking for AI-Generated Contentcited by 51
- 2023From Text to Source: Results in Detecting Large Language Model-Generated Contentcited by 26
- 2024Permute-and-Flip: An optimally stable and watermarkable decoder for LLMscited by 22
- 2024Duwak: Dual Watermarks in Large Language Modelscited by 11
- 2025SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoderscited by 7
- 2024Efficient and Universal Watermarking for LLM-Generated Code Detectioncited by 6
- 2025We Need Improved Data Curation and Attribution in AI for Scientific Discoverycited by 1
- 2025Computational Safety for Generative AI: A Hypothesis Testing Perspectivecited by 0
- 2025Improving Detection of Watermarked Language Modelscited by 0
- 2026LLM Output Detectability and Task Performance Can be Jointly Optimizedcited by 0
12 most cited of 14 All 14 (JSON)
- 2026Learning to Follow In-Context Watermark Instructions via Self-Distillation29 Aug 2026
- 2026Stability-Aware Feature Design for Robust Watermark Detection in Machine-Generated Text9 Jun 2026
- 2026LLM Output Detectability and Task Performance Can be Jointly Optimized2 May 2026
- 2025Improving Detection of Watermarked Language Models18 Aug 2025
- 2025SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders11 Aug 2025
- 2025We Need Improved Data Curation and Attribution in AI for Scientific Discovery3 Apr 2025
- 2025Computational Safety for Generative AI: A Hypothesis Testing Perspective18 Feb 2025
- 2024SoK: Watermarking for AI-Generated Content27 Nov 2024
- 2024Duwak: Dual Watermarks in Large Language Models12 Mar 2024
- 2024Watermark Stealing in Large Language Models29 Feb 2024
- 2024Efficient and Universal Watermarking for LLM-Generated Code Detection12 Feb 2024
- 2024Permute-and-Flip: An optimally stable and watermarkable decoder for LLMs8 Feb 2024
12 newest of 14 All 14 (JSON)
- 2025The Erosion of LLM Signatures: Can We Still Distinguish Human and LLM-Generated Scientific Ideas After Iterative Paraphrasing?cited by 1
- 2025Modeling Human Responses to Multimodal AI Contentcited by 0
- 2026From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AIcited by 0
- 2026Towards Detecting AI-Assisted Responses in Online Surveyscited by 0
- 2026Towards Detecting AI-Assisted Responses in Online Surveys15 Sep 2026
- 2026From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI15 May 2026
- 2025The Erosion of LLM Signatures: Can We Still Distinguish Human and LLM-Generated Scientific Ideas After Iterative Paraphrasing?4 Dec 2025
- 2025Modeling Human Responses to Multimodal AI Content14 Aug 2025
- 2024Detecting Multimedia Generated by Large AI Models: A Surveycited by 76
- 2024Detecting Multimedia Generated by Large AI Models: A Survey22 Jan 2024
- 2024Spotting LLMs With Binoculars: Zero-Shot Detection of Machine-Generated Textcited by 263
- 2024Monitoring AI-Modified Content at Scale: A Case Study on the Impact of ChatGPT on AI Conference Peer Reviewscited by 164
- 2024RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectorscited by 163
- 2024Mapping the Increasing Use of LLMs in Scientific Paperscited by 118
- 2023A Survey on LLM-Generated Text Detection: Necessity, Methods, and Future Directionscited by 105
- 2023OUTFOX: LLM-Generated Essay Detection Through In-Context Learning with Adversarially Generated Examplescited by 80
- 2023A Survey on Detection of LLMs-Generated Contentcited by 71
- 2025DeepScientist: Advancing Frontier-Pushing Scientific Findings Progressivelycited by 63
- 2024DeTeCtive: Detecting AI-generated Text via Multi-Level Contrastive Learningcited by 53
- 2024M4GT-Bench: Evaluation Benchmark for Black-Box Machine-Generated Text Detectioncited by 43
- 2025People who frequently use ChatGPT for writing tasks are accurate and robust detectors of AI-generated textcited by 40
- 2025Are You Getting What You Pay For? Auditing Model Substitution in LLM APIscited by 38
12 most cited of 163 All 163 (JSON)
- 2026Attacking Only Half the Data: Two-Sided Evaluation of AI-Text Detector Robustness13 Oct 2026
- 2026Measuring Artifact Reliance in Machine-Generated Text Detectors9 Oct 2026
- 2026Forging LLM Authorship Fingerprints with Targeted Rewriting30 Sep 2026
- 2026Policy-Conditioned AI-Use Detection: An Evidentiary Framework for Academic Publishing29 Sep 2026
- 2026C-HAT-Bench: Benchmarking Chinese AI-Text Detection Beyond Fully Generated Text26 Sep 2026
- 2026Detecting GPT-Assisted Writing Using Interpretable Stylometric Features22 Sep 2026
- 2026Beyond Global Scalars: Synergizing Token-Level Statistics and Deep Semantics for Adversarial AIGC Text Detection28 Aug 2026
- 2026Style as a Confound: False Positives in AI Detection of Non-Native Academic Writing27 Aug 2026
- 2026Relational Over-Regularization: Graph-Based AI-Generated Text Detection via Sentence Transition Deviation27 Aug 2026
- 2026VietAIDetector: An Open-Source Zero-Shot Detector for Vietnamese AI-Generated Text26 Aug 2026
- 2026EVIL-Detect for NLPCC 2026 Shared Task 6: LLM-Generated Text Detection11 Aug 2026
- 2026MD-ProTector: Positioning Multiple Data-Driven Prototypes for LLM-Generated Text Detection11 Aug 2026
12 newest of 163 All 163 (JSON)