mlsanityData to 14 Oct 2026

ToxiCloakCN: Evaluating Robustness of Offensive Language Detection in Chinese with Cloaking Perturbations

arXiv 2406.12223 ↗First posted 18 Jun 2024cs.CL cs.CYcited by 31

Not on the map. Why?

Abstract (arXiv)

Detecting hate speech and offensive language is essential for maintaining a safe and respectful digital environment. This study examines the limitations of state-of-the-art large language models (LLMs) in identifying offensive content within systematically perturbed data, with a focus on Chinese, a language particularly susceptible to such perturbations. We introduce textsfToxiCloakCN, an enhanced dataset derived from ToxiCN, augmented with homophonic substitutions and emoji transformations, to test the robustness of LLMs against these cloaking perturbations. Our findings reveal that existing models significantly underperform in detecting offensive content when these perturbations are applied. We provide an in-depth analysis of how different types of offensive content are affected by these perturbations and explore the alignment between human and model explanations of offensiveness. Our work highlights the urgent need for more advanced techniques in offensive language detection to combat the evolving tactics used to evade detection mechanisms.

Key facts. Cited by 31 papers in the map (data through 14 Oct 2026). Builds on 10 of its 23 references that are in the map. First posted on arXiv 18 Jun 2024.

Builds on

10 of 23 references.

References · 10

  1. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
  2. 2017Automated Hate Speech Detection and the Problem of Offensive Languagecited by 736
  3. 2020BAE: BERT-based Adversarial Examples for Text Classificationcited by 316
  4. 2019Racial Bias in Hate Speech and Abusive Language Detection Datasetscited by 209
  5. 2021SWSR: A Chinese Dataset and Lexicon for Online Sexism Detectioncited by 42
  6. 2021DeepHate: Hate Speech Detection via Multi-Faceted Text Representationscited by 29
  7. 2018Detecting Offensive Language in Tweets Using Deep Learningcited by 23
  8. 2023Cross-Cultural Transfer Learning for Chinese Offensive Language Detectioncited by 21
  9. 2021Offensive Language and Hate Speech Detection with Deep Learning and Transfer Learningcited by 7
  10. 2024Enhance Robustness of Language Models Against Variation Attack through Graph Integrationcited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 15; 2026: 16.

31 papers.

Sort:

By area:

  1. 2025Exploring Multimodal Challenges in Toxic Chinese Detection: Taxonomy, Benchmark, and Findingscited by 10
  2. 2025Lost in Pronunciation: Detecting Chinese Offensive Language Disguised by Phonetic Cloaking Replacementcited by 10
  3. 2025Cross-Modal Transfer from Memes to Videos: Addressing Data Scarcity in Hateful Video Detectioncited by 9
  4. 2025STATE ToxiCN: A Benchmark for Span-level Target-Aware Toxicity Extraction in Chinese Hate Speech Detectioncited by 9
  5. 2025Embracing Contradiction: Theoretical Inconsistency Will Not Impede the Road of Building Responsible AI Systemscited by 8
  6. 2025Are Large Language Models Chronically Online Surfers? A Dataset for Chinese Internet Meme Explanationcited by 6
  7. 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patternscited by 5
  8. 2026"Newspaper Eat" Means "Not Tasty": A Taxonomy and Benchmark for Coded Language in Real-World Chinese Online Reviewscited by 3
  9. 2025Chinese Toxic Language Mitigation via Sentiment Polarity Consistent Rewritescited by 2
  10. 2025Fine-Grained Chinese Hate Speech Understanding: Span-Level Resources, Coded Term Lexicon, and Enhanced Detection Frameworkscited by 2
  11. 2025MMBERT: Scaled Mixture-of-Experts Multimodal BERT for Robust Chinese Hate Speech Detection under Cloaking Perturbationscited by 2
  12. 2025Toxicity Red-Teaming: Benchmarking LLM Safety in Singapore's Low-Resource Languagescited by 2
19 more
  1. 2026Exploring the Capability Boundaries of LLMs in Mastering of Chinese Chouxiang Languagecited by 2
  2. 2025Breaking the Cloak! Unveiling Chinese Cloaked Toxicity with Homophone Graph and Toxic Lexiconcited by 1
  3. 2025JiraiBench: A Bilingual Benchmark for Evaluating Large Language Models' Detection of Human Self-Destructive Behavior Content in Jirai Communitycited by 0
  4. 2025From Ground Trust to Truth: Disparities in Offensive Language Judgments on Contemporary Korean Political Discoursecited by 0
  5. 2025Obfuscation Rules for Detecting and Detoxifying Korean Toxicitycited by 0
  6. 2025EMODIS: A Benchmark for Context-Dependent Emoji Disambiguation in Large Language Modelscited by 0
  7. 2026NLP Privacy Risk Identification in Social Media (NLP-PRISM): A Surveycited by 0
  8. 2026ARGUS: Policy-Adaptive Ad Governance via Evolving Reinforcement with Adversarial Umpiringcited by 0
  9. 2026Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewritingcited by 0
  10. 2026Beyond English and Evasion: A Human-Annotated Multi-Domain Benchmark for High-Stakes LLM Safety Evaluation in Chinesecited by 0
  11. 2026Phun-Bench: Evaluating LLMs on Phonological Understanding in Chinesecited by 0
  12. 2026Cross-Platform Chinese Offensive Comment Detection via Dual-Threshold Hard Example Miningcited by 0
  13. 2026New Terms, New Toxicity: Consensus-based Chinese Neologism Toxicity Detection via Search-Augmented LLMscited by 0
  14. 2026SPAR-Hate: Auditor-Guided Multi-Perspective Role Reasoning for Bilingual Hate Speech Parsingcited by 0
  15. 2026EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasioncited by 0
  16. 2026ReCAST: Restoration-aware Cascaded Stage-wise Training for Obfuscated SMS Risk Classificationcited by 0
  17. 2026SinoGlyphBench: A Diagnostic Benchmark for Chinese Glyph-Level Obfuscation in Language-Model Moderationcited by 0
  18. 2026Benchmarking LLM Compliance with China AI Generated Content Regulationscited by 0
  19. 2026Evaluating Bias in Chinese Large Language Models across Tasks and Registers: Task Operationalization Effects and Irony Classification Riskscited by 0