ToxiCloakCN: Evaluating Robustness of Offensive Language Detection in Chinese with Cloaking Perturbations
Not on the map. Why?
Abstract (arXiv)
Detecting hate speech and offensive language is essential for maintaining a safe and respectful digital environment. This study examines the limitations of state-of-the-art large language models (LLMs) in identifying offensive content within systematically perturbed data, with a focus on Chinese, a language particularly susceptible to such perturbations. We introduce textsfToxiCloakCN, an enhanced dataset derived from ToxiCN, augmented with homophonic substitutions and emoji transformations, to test the robustness of LLMs against these cloaking perturbations. Our findings reveal that existing models significantly underperform in detecting offensive content when these perturbations are applied. We provide an in-depth analysis of how different types of offensive content are affected by these perturbations and explore the alignment between human and model explanations of offensiveness. Our work highlights the urgent need for more advanced techniques in offensive language detection to combat the evolving tactics used to evade detection mechanisms.
Key facts. Cited by 31 papers in the map (data through 14 Oct 2026). Builds on 10 of its 23 references that are in the map. First posted on arXiv 18 Jun 2024.
Builds on
10 of 23 references.
References · 10
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2017Automated Hate Speech Detection and the Problem of Offensive Languagecited by 736
- 2020BAE: BERT-based Adversarial Examples for Text Classificationcited by 316
- 2019Racial Bias in Hate Speech and Abusive Language Detection Datasetscited by 209
- 2021SWSR: A Chinese Dataset and Lexicon for Online Sexism Detectioncited by 42
- 2021DeepHate: Hate Speech Detection via Multi-Faceted Text Representationscited by 29
- 2018Detecting Offensive Language in Tweets Using Deep Learningcited by 23
- 2023Cross-Cultural Transfer Learning for Chinese Offensive Language Detectioncited by 21
- 2021Offensive Language and Hate Speech Detection with Deep Learning and Transfer Learningcited by 7
- 2024Enhance Robustness of Language Models Against Variation Attack through Graph Integrationcited by 2
Built on by
Citing papers per year: 2025: 15; 2026: 16.
31 papers.
Sort:
By area:
- 2025Exploring Multimodal Challenges in Toxic Chinese Detection: Taxonomy, Benchmark, and Findingscited by 10
- 2025Lost in Pronunciation: Detecting Chinese Offensive Language Disguised by Phonetic Cloaking Replacementcited by 10
- 2025Cross-Modal Transfer from Memes to Videos: Addressing Data Scarcity in Hateful Video Detectioncited by 9
- 2025STATE ToxiCN: A Benchmark for Span-level Target-Aware Toxicity Extraction in Chinese Hate Speech Detectioncited by 9
- 2025Embracing Contradiction: Theoretical Inconsistency Will Not Impede the Road of Building Responsible AI Systemscited by 8
- 2025Are Large Language Models Chronically Online Surfers? A Dataset for Chinese Internet Meme Explanationcited by 6
- 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patternscited by 5
- 2026"Newspaper Eat" Means "Not Tasty": A Taxonomy and Benchmark for Coded Language in Real-World Chinese Online Reviewscited by 3
- 2025Chinese Toxic Language Mitigation via Sentiment Polarity Consistent Rewritescited by 2
- 2025Fine-Grained Chinese Hate Speech Understanding: Span-Level Resources, Coded Term Lexicon, and Enhanced Detection Frameworkscited by 2
- 2025MMBERT: Scaled Mixture-of-Experts Multimodal BERT for Robust Chinese Hate Speech Detection under Cloaking Perturbationscited by 2
- 2025Toxicity Red-Teaming: Benchmarking LLM Safety in Singapore's Low-Resource Languagescited by 2
19 more
- 2026Exploring the Capability Boundaries of LLMs in Mastering of Chinese Chouxiang Languagecited by 2
- 2025Breaking the Cloak! Unveiling Chinese Cloaked Toxicity with Homophone Graph and Toxic Lexiconcited by 1
- 2025JiraiBench: A Bilingual Benchmark for Evaluating Large Language Models' Detection of Human Self-Destructive Behavior Content in Jirai Communitycited by 0
- 2025From Ground Trust to Truth: Disparities in Offensive Language Judgments on Contemporary Korean Political Discoursecited by 0
- 2025Obfuscation Rules for Detecting and Detoxifying Korean Toxicitycited by 0
- 2025EMODIS: A Benchmark for Context-Dependent Emoji Disambiguation in Large Language Modelscited by 0
- 2026NLP Privacy Risk Identification in Social Media (NLP-PRISM): A Surveycited by 0
- 2026ARGUS: Policy-Adaptive Ad Governance via Evolving Reinforcement with Adversarial Umpiringcited by 0
- 2026Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewritingcited by 0
- 2026Beyond English and Evasion: A Human-Annotated Multi-Domain Benchmark for High-Stakes LLM Safety Evaluation in Chinesecited by 0
- 2026Phun-Bench: Evaluating LLMs on Phonological Understanding in Chinesecited by 0
- 2026Cross-Platform Chinese Offensive Comment Detection via Dual-Threshold Hard Example Miningcited by 0
- 2026New Terms, New Toxicity: Consensus-based Chinese Neologism Toxicity Detection via Search-Augmented LLMscited by 0
- 2026SPAR-Hate: Auditor-Guided Multi-Perspective Role Reasoning for Bilingual Hate Speech Parsingcited by 0
- 2026EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasioncited by 0
- 2026ReCAST: Restoration-aware Cascaded Stage-wise Training for Obfuscated SMS Risk Classificationcited by 0
- 2026SinoGlyphBench: A Diagnostic Benchmark for Chinese Glyph-Level Obfuscation in Language-Model Moderationcited by 0
- 2026Benchmarking LLM Compliance with China AI Generated Content Regulationscited by 0
- 2026Evaluating Bias in Chinese Large Language Models across Tasks and Registers: Task Operationalization Effects and Irony Classification Riskscited by 0
- 2026Evaluating Bias in Chinese Large Language Models across Tasks and Registers: Task Operationalization Effects and Irony Classification Risks10 Oct 2026
- 2026Benchmarking LLM Compliance with China AI Generated Content Regulations17 Sep 2026
- 2026SinoGlyphBench: A Diagnostic Benchmark for Chinese Glyph-Level Obfuscation in Language-Model Moderation5 Sep 2026
- 2026ReCAST: Restoration-aware Cascaded Stage-wise Training for Obfuscated SMS Risk Classification4 Sep 2026
- 2026EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasion28 Aug 2026
- 2026SPAR-Hate: Auditor-Guided Multi-Perspective Role Reasoning for Bilingual Hate Speech Parsing22 Aug 2026
- 2026New Terms, New Toxicity: Consensus-based Chinese Neologism Toxicity Detection via Search-Augmented LLMs5 Jul 2026
- 2026Cross-Platform Chinese Offensive Comment Detection via Dual-Threshold Hard Example Mining26 Jun 2026
- 2026Phun-Bench: Evaluating LLMs on Phonological Understanding in Chinese5 Jun 2026
- 2026Beyond English and Evasion: A Human-Annotated Multi-Domain Benchmark for High-Stakes LLM Safety Evaluation in Chinese28 May 2026
- 2026Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewriting21 May 2026
- 2026ARGUS: Policy-Adaptive Ad Governance via Evolving Reinforcement with Adversarial Umpiring4 May 2026
19 more
- 2026Exploring the Capability Boundaries of LLMs in Mastering of Chinese Chouxiang Language17 Apr 2026
- 2026NLP Privacy Risk Identification in Social Media (NLP-PRISM): A Survey26 Jan 2026
- 2026"Newspaper Eat" Means "Not Tasty": A Taxonomy and Benchmark for Coded Language in Real-World Chinese Online Reviews12 Jan 2026
- 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patterns2 Jan 2026
- 2025EMODIS: A Benchmark for Context-Dependent Emoji Disambiguation in Large Language Models10 Nov 2025
- 2025Obfuscation Rules for Detecting and Detoxifying Korean Toxicity13 Oct 2025
- 2025Are Large Language Models Chronically Online Surfers? A Dataset for Chinese Internet Meme Explanation1 Oct 2025
- 2025Toxicity Red-Teaming: Benchmarking LLM Safety in Singapore's Low-Resource Languages18 Sep 2025
- 2025From Ground Trust to Truth: Disparities in Offensive Language Judgments on Contemporary Korean Political Discourse18 Sep 2025
- 2025MMBERT: Scaled Mixture-of-Experts Multimodal BERT for Robust Chinese Hate Speech Detection under Cloaking Perturbations1 Aug 2025
- 2025Fine-Grained Chinese Hate Speech Understanding: Span-Level Resources, Coded Term Lexicon, and Enhanced Detection Frameworks15 Jul 2025
- 2025Lost in Pronunciation: Detecting Chinese Offensive Language Disguised by Phonetic Cloaking Replacement10 Jul 2025
- 2025Exploring Multimodal Challenges in Toxic Chinese Detection: Taxonomy, Benchmark, and Findings30 May 2025
- 2025Breaking the Cloak! Unveiling Chinese Cloaked Toxicity with Homophone Graph and Toxic Lexicon28 May 2025
- 2025Embracing Contradiction: Theoretical Inconsistency Will Not Impede the Road of Building Responsible AI Systems23 May 2025
- 2025Chinese Toxic Language Mitigation via Sentiment Polarity Consistent Rewrites21 May 2025
- 2025JiraiBench: A Bilingual Benchmark for Evaluating Large Language Models' Detection of Human Self-Destructive Behavior Content in Jirai Community27 Mar 2025
- 2025STATE ToxiCN: A Benchmark for Span-level Target-Aware Toxicity Extraction in Chinese Hate Speech Detection26 Jan 2025
- 2025Cross-Modal Transfer from Memes to Videos: Addressing Data Scarcity in Hateful Video Detection26 Jan 2025
- 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patternscited by 5
- 2025Toxicity Red-Teaming: Benchmarking LLM Safety in Singapore's Low-Resource Languagescited by 2
- 2026Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewritingcited by 0
- 2026Beyond English and Evasion: A Human-Annotated Multi-Domain Benchmark for High-Stakes LLM Safety Evaluation in Chinesecited by 0
- 2026EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasioncited by 0
- 2026EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasion28 Aug 2026
- 2026Beyond English and Evasion: A Human-Annotated Multi-Domain Benchmark for High-Stakes LLM Safety Evaluation in Chinese28 May 2026
- 2026Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewriting21 May 2026
- 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patterns2 Jan 2026
- 2025Toxicity Red-Teaming: Benchmarking LLM Safety in Singapore's Low-Resource Languages18 Sep 2025
- 2025Exploring Multimodal Challenges in Toxic Chinese Detection: Taxonomy, Benchmark, and Findingscited by 10
- 2025Lost in Pronunciation: Detecting Chinese Offensive Language Disguised by Phonetic Cloaking Replacementcited by 10
- 2025Cross-Modal Transfer from Memes to Videos: Addressing Data Scarcity in Hateful Video Detectioncited by 9
- 2025STATE ToxiCN: A Benchmark for Span-level Target-Aware Toxicity Extraction in Chinese Hate Speech Detectioncited by 9
- 2025Embracing Contradiction: Theoretical Inconsistency Will Not Impede the Road of Building Responsible AI Systemscited by 8
- 2025Are Large Language Models Chronically Online Surfers? A Dataset for Chinese Internet Meme Explanationcited by 6
- 2026"Newspaper Eat" Means "Not Tasty": A Taxonomy and Benchmark for Coded Language in Real-World Chinese Online Reviewscited by 3
- 2025Chinese Toxic Language Mitigation via Sentiment Polarity Consistent Rewritescited by 2
- 2025Fine-Grained Chinese Hate Speech Understanding: Span-Level Resources, Coded Term Lexicon, and Enhanced Detection Frameworkscited by 2
- 2026Exploring the Capability Boundaries of LLMs in Mastering of Chinese Chouxiang Languagecited by 2
- 2025Breaking the Cloak! Unveiling Chinese Cloaked Toxicity with Homophone Graph and Toxic Lexiconcited by 1
- 2025JiraiBench: A Bilingual Benchmark for Evaluating Large Language Models' Detection of Human Self-Destructive Behavior Content in Jirai Communitycited by 0
12 most cited of 25 All 25 (JSON)
- 2026Evaluating Bias in Chinese Large Language Models across Tasks and Registers: Task Operationalization Effects and Irony Classification Risks10 Oct 2026
- 2026Benchmarking LLM Compliance with China AI Generated Content Regulations17 Sep 2026
- 2026SinoGlyphBench: A Diagnostic Benchmark for Chinese Glyph-Level Obfuscation in Language-Model Moderation5 Sep 2026
- 2026ReCAST: Restoration-aware Cascaded Stage-wise Training for Obfuscated SMS Risk Classification4 Sep 2026
- 2026SPAR-Hate: Auditor-Guided Multi-Perspective Role Reasoning for Bilingual Hate Speech Parsing22 Aug 2026
- 2026New Terms, New Toxicity: Consensus-based Chinese Neologism Toxicity Detection via Search-Augmented LLMs5 Jul 2026
- 2026Cross-Platform Chinese Offensive Comment Detection via Dual-Threshold Hard Example Mining26 Jun 2026
- 2026Phun-Bench: Evaluating LLMs on Phonological Understanding in Chinese5 Jun 2026
- 2026ARGUS: Policy-Adaptive Ad Governance via Evolving Reinforcement with Adversarial Umpiring4 May 2026
- 2026Exploring the Capability Boundaries of LLMs in Mastering of Chinese Chouxiang Language17 Apr 2026
- 2026NLP Privacy Risk Identification in Social Media (NLP-PRISM): A Survey26 Jan 2026
- 2026"Newspaper Eat" Means "Not Tasty": A Taxonomy and Benchmark for Coded Language in Real-World Chinese Online Reviews12 Jan 2026
12 newest of 25 All 25 (JSON)