ToBlend: Token-Level Blending With an Ensemble of LLMs to Attack AI-Generated Text Detection
Not on the map. Why?
Abstract (arXiv)
The robustness of AI-content detection models against sophisticated adversarial strategies, such as paraphrasing or word switching, is a rising concern in natural language generation (NLG) applications. This study proposes ToBlend, a novel token-level ensemble text generation method to challenge the robustness of current AI-content detection approaches by utilizing multiple sets of candidate generative large language models (LLMs). By randomly sampling token(s) from candidate LLMs sets, we find ToBlend significantly drops the performance of most mainstream AI-content detection methods. We evaluate the text quality produced under different ToBlend settings based on annotations from experienced human experts. We proposed a fine-tuned Llama3.1 model to distinguish the ToBlend generated text more accurately. Our findings underscore our proposed text generation approach's great potential in deceiving and improving detection models. Our datasets, codes, and annotations are open-sourced.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 28 of its 39 references that are in the map. First posted on arXiv 17 Feb 2024.
Builds on
28 of 39 references.
References · 28
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,115
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2018Don't Give Me the Details, Just the Summary! Topic-Aware Convolutional Neural Networks for Extreme Summarizationcited by 1,308
- 2018Hierarchical Neural Story Generationcited by 1,182
- 2023A Multitask, Multilingual, Multimodal Evaluation of ChatGPT on Reasoning, Hallucination, and Interactivitycited by 888
- 2023ChatGPT Outperforms Crowd-Workers for Text-Annotation Taskscited by 849
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
- 2019Release Strategies and the Social Impacts of Language Modelscited by 505
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 490
- 2023Is ChatGPT a General-Purpose Natural Language Processing Task Solver?cited by 486
16 more
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 401
- 2023Can AI-Generated Text be Reliably Detected?cited by 372
- 2023Fast-DetectGPT: Efficient Zero-Shot Detection of Machine-Generated Text via Conditional Probability Curvaturecited by 278
- 2019Automatic Detection of Generated Text is Easiest when Humans are Fooledcited by 260
- 2023DetectLLM: Leveraging Log Rank Information for Zero-Shot Detection of Machine-Generated Textcited by 207
- 2023RADAR: Robust AI-Text Detection via Adversarial Learningcited by 187
- 2020TweepFake: about Detecting Deepfake Tweetscited by 117
- 2023ChatGPT or Human? Detect and Explain. Explaining Decisions of Machine Learning Model for Detecting Short ChatGPT-generated Textcited by 84
- 2023OUTFOX: LLM-Generated Essay Detection Through In-Context Learning with Adversarially Generated Examplescited by 80
- 2024Raidar: geneRative AI Detection viA Rewritingcited by 51
- 2018Sentence-Level Fluency Evaluation: References Help, But Can Be Spared!cited by 43
- 2020Attacking Neural Text Detectorscited by 37
- 2022CoCo: Coherence-Enhanced Machine-Generated Text Detection Under Data Limitation With Contrastive Learningcited by 32
- 2018Fluency Over Adequacy: A Pilot Study in Measuring User Trust in Imperfect MTcited by 21
- 2021Towards Quantifiable Dialogue Coherence Evaluationcited by 21
- 2018Coherence Models for Dialoguecited by 9
Built on by
Citing papers per year: 2024: 2; 2025: 4.
6 papers.
- 2024ChatGPT Rates Natural Language Explanation Quality Like Humans: But on Which Scales?cited by 17
- 2025TH-Bench: Evaluating Evading Attacks via Humanizing AI Text on Machine-Generated Text Detectorscited by 8
- 2025Adversarial Attacks on AI-Generated Text Detection Models: A Token Probability-Based Approach Using Embeddingscited by 5
- 2024LLM Detectors Still Fall Short of Real World: Case of LLM-Generated Short News-Like Postscited by 4
- 2025AI-Generated Song Detection via Lyrics Transcriptscited by 2
- 2025Complete Evasion, Zero Modification: PDF Attacks on AI Text Detectioncited by 1
- 2025Complete Evasion, Zero Modification: PDF Attacks on AI Text Detection3 Aug 2025
- 2025AI-Generated Song Detection via Lyrics Transcripts23 Jun 2025
- 2025TH-Bench: Evaluating Evading Attacks via Humanizing AI Text on Machine-Generated Text Detectors10 Mar 2025
- 2025Adversarial Attacks on AI-Generated Text Detection Models: A Token Probability-Based Approach Using Embeddings31 Jan 2025
- 2024LLM Detectors Still Fall Short of Real World: Case of LLM-Generated Short News-Like Posts5 Sep 2024
- 2024ChatGPT Rates Natural Language Explanation Quality Like Humans: But on Which Scales?26 Mar 2024