Hidding the Ghostwriters: An Adversarial Evaluation of AI-Generated Student Essay Detection
Not on the map. Why?
Abstract (arXiv)
Large language models (LLMs) have exhibited remarkable capabilities in text generation tasks. However, the utilization of these models carries inherent risks, including but not limited to plagiarism, the dissemination of fake news, and issues in educational exercises. Although several detectors have been proposed to address these concerns, their effectiveness against adversarial perturbations, specifically in the context of student essay writing, remains largely unexplored. This paper aims to bridge this gap by constructing AIG-ASAP, an AI-generated student essay dataset, employing a range of text perturbation methods that are expected to generate high-quality essays while evading detection. Through empirical experiments, we assess the performance of current AIGC detectors on the AIG-ASAP dataset. The results reveal that the existing detectors can be easily circumvented using straightforward automatic adversarial attacks. Specifically, we explore word substitution and sentence substitution perturbation methods that effectively evade detection while maintaining the quality of the generated essays. This highlights the urgent need for more accurate and robust methods to detect AI-generated student essays in the education domain.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Builds on 28 of its 38 references that are in the map. First posted on arXiv 1 Feb 2024.
Builds on
28 of 38 references.
References · 28
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
- 2023A Watermark for Large Language Modelscited by 725
- 2019Defending Against Neural Fake Newscited by 559
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 496
- 2023How Close is ChatGPT to Human Experts? Comparison Corpus, Evaluation, and Detectioncited by 481
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 429
- 2023Can AI-Generated Text be Reliably Detected?cited by 386
- 2023AudioGPT: Understanding and Generating Speech, Music, Sound, and Talking Headcited by 265
- 2023GPT detectors are biased against non-native English writerscited by 178
- 2020Automatic Detection of Machine Generated Text: A Critical Surveycited by 166
16 more
- 2022ChatGPT: The End of Online Exam Integrity?cited by 88
- 2023On the Possibilities of AI-Generated Text Detectioncited by 88
- 2023AI-Generated Content (AIGC): A Surveycited by 59
- 2022On the Use of BERT for Automated Essay Scoring: Joint Learning of Multi-Scale Essay Representationcited by 46
- 2023Large Language Models can be Guided to Evade AI-Generated Text Detectioncited by 44
- 2023ArguGPT: evaluating, understanding and identifying argumentative essays generated by GPT modelscited by 42
- 2023A Pathway Towards Responsible AI Generated Contentcited by 38
- 2023Prompting Large Language Models for Counterfactual Generation: An Empirical Studycited by 37
- 2023Smaller Language Models are Better Black-box Machine-Generated Text Detectorscited by 35
- 2023Bot or Human? Detecting ChatGPT Imposters with A Single Questioncited by 26
- 2021Unsupervised and Distributional Detection of Machine-Generated Textcited by 23
- 2023Towards a Robust Detection of Language Model Generated Text: Is ChatGPT that Easy to Detect?cited by 23
- 2023G3Detector: General GPT-Generated Text Detectorcited by 17
- 2023Implementing BERT and fine-tuned RobertA to detect AI generated news by ChatGPTcited by 13
- 2023Paraphrase Detection: Human vs. Machine Contentcited by 12
- 2023Towards the Exploitation of LLM-based Chatbot for Providing Legal Support to Palestinian Cooperativescited by 2
Built on by
Citing papers per year: 2024: 5; 2025: 4; 2026: 1.
10 papers.
- 2024Are AI-Generated Text Detectors Robust to Adversarial Perturbations?cited by 16
- 2024SilverSpeak: Evading AI-Generated Text Detectors using Homoglyphscited by 13
- 2025A Comprehensive Analysis of Large Language Model Outputs: Similarity, Diversity, and Biascited by 10
- 2025DivScore: Zero-Shot Detection of LLM-Generated Text in Specialized Domainscited by 9
- 2024Survey on Plagiarism Detection in Large Language Models: The Impact of ChatGPT and Gemini on Academic Integritycited by 5
- 2024Towards Reliable Detection of LLM-Generated Texts: A Comprehensive Evaluation Framework with CUDRTcited by 3
- 2025DACTYL: Diverse Adversarial Corpus of Texts Yielded from Large Language Modelscited by 3
- 2024Which LLMs are Difficult to Detect? A Detailed Analysis of Potential Factors Contributing to Difficulties in LLM Text Detectioncited by 2
- 2025Complete Evasion, Zero Modification: PDF Attacks on AI Text Detectioncited by 1
- 2026AEyeDE: An Attention-Based Attribution Framework for AI-Generated Text Detectioncited by 0
- 2026AEyeDE: An Attention-Based Attribution Framework for AI-Generated Text Detection13 Apr 2026
- 2025Complete Evasion, Zero Modification: PDF Attacks on AI Text Detection3 Aug 2025
- 2025DACTYL: Diverse Adversarial Corpus of Texts Yielded from Large Language Models1 Aug 2025
- 2025DivScore: Zero-Shot Detection of LLM-Generated Text in Specialized Domains7 Jun 2025
- 2025A Comprehensive Analysis of Large Language Model Outputs: Similarity, Diversity, and Bias14 May 2025
- 2024Which LLMs are Difficult to Detect? A Detailed Analysis of Potential Factors Contributing to Difficulties in LLM Text Detection18 Oct 2024
- 2024SilverSpeak: Evading AI-Generated Text Detectors using Homoglyphs17 Jun 2024
- 2024Towards Reliable Detection of LLM-Generated Texts: A Comprehensive Evaluation Framework with CUDRT13 Jun 2024
- 2024Survey on Plagiarism Detection in Large Language Models: The Impact of ChatGPT and Gemini on Academic Integrity4 Jun 2024
- 2024Are AI-Generated Text Detectors Robust to Adversarial Perturbations?3 Jun 2024