TAROT: Task-Oriented Authorship Obfuscation Using Policy Optimization Methods
Not on the map. Why?
Abstract (arXiv)
Authorship obfuscation aims to disguise the identity of an author within a text by altering the writing style, vocabulary, syntax, and other linguistic features associated with the text author. This alteration needs to balance privacy and utility. While strong obfuscation techniques can effectively hide the author's identity, they often degrade the quality and usefulness of the text for its intended purpose. Conversely, maintaining high utility tends to provide insufficient privacy, making it easier for an adversary to de-anonymize the author. Thus, achieving an optimal trade-off between these two conflicting objectives is crucial. In this paper, we propose TAROT: Task-Oriented Authorship Obfuscation Using Policy Optimization, a new unsupervised authorship obfuscation method whose goal is to optimize the privacy-utility trade-off by regenerating the entire text considering its downstream utility. Our approach leverages policy optimization as a fine-tuning paradigm over small language models in order to rewrite texts by preserving author identity and downstream task utility. We show that our approach largely reduces the accuracy of attackers while preserving utility. We make our code and models publicly available.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 15 of its 43 references that are in the map. First posted on arXiv 31 Jul 2024.
Builds on
15 of 43 references.
References · 15
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,293
- 2020DeBERTa: Decoding-enhanced BERT with Disentangled Attentioncited by 2,157
- 2023Towards General Text Embeddings with Multi-stage Contrastive Learningcited by 705
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 401
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2022The Limits of Word Level Differential Privacycited by 63
- 2023Locally Differentially Private Document Generation Using Zero Shot Promptingcited by 63
- 2019Leveraging Hierarchical Representations for Preserving Privacy and Utility in Textcited by 49
- 2021Keep it Simple: Unsupervised Simplification of Multi-Paragraph Textcited by 45
Built on by
Citing papers per year: 2024: 1; 2025: 3; 2026: 1.
5 papers.
- 2025Mitigating Self-Preference by Authorship Obfuscationcited by 6
- 2025A Survey on Current Trends and Recent Advances in Text Anonymizationcited by 5
- 2025Tau-Eval: A Unified Evaluation Framework for Useful and Private Text Anonymizationcited by 4
- 2024Recipient Profiling: Predicting Characteristics from Messagescited by 0
- 2026Introducing the Privacy-HSD Trade-off: Hate Speech Detection, but not at the Cost of Privacycited by 0
- 2026Introducing the Privacy-HSD Trade-off: Hate Speech Detection, but not at the Cost of Privacy19 Aug 2026
- 2025Mitigating Self-Preference by Authorship Obfuscation5 Dec 2025
- 2025A Survey on Current Trends and Recent Advances in Text Anonymization29 Aug 2025
- 2025Tau-Eval: A Unified Evaluation Framework for Useful and Private Text Anonymization6 Jun 2025
- 2024Recipient Profiling: Predicting Characteristics from Messages17 Dec 2024