mlsanityData to 7 Oct 2026

Are You Human? An Adversarial Benchmark to Expose LLMs

arXiv 2410.09569 ↗First posted 12 Oct 2024cs.CL cs.AIcited by 5

Not on the map. Why?

Abstract (arXiv)

Large Language Models (LLMs) have demonstrated an alarming ability to impersonate humans in conversation, raising concerns about their potential misuse in scams and deception. Humans have a right to know if they are conversing to an LLM. We evaluate text-based prompts designed as challenges to expose LLM imposters in real-time. To this end we compile and release an open-source benchmark dataset that includes 'implicit challenges' that exploit an LLM's instruction-following mechanism to cause role deviation, and 'exlicit challenges' that test an LLM's ability to perform simple tasks typically easy for humans but difficult for LLMs. Our evaluation of 9 leading models from the LMSYS leaderboard revealed that explicit challenges successfully detected LLMs in 78.4% of cases, while implicit challenges were effective in 22.9% of instances. User studies validate the real-world applicability of our methods, with humans outperforming LLMs on explicit challenges (78% vs 22% success rate). Our framework unexpectedly revealed that many study participants were using LLMs to complete tasks, demonstrating its effectiveness in detecting both AI impostors and human misuse of AI tools. This work addresses the critical need for reliable, real-time LLM detection methods in high-stakes conversations.

Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 32 of its 40 references that are in the map. First posted on arXiv 12 Oct 2024.

Builds on

32 of 40 references.

References · 32

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2024The Llama 3 Herd of Modelscited by 14,192
  3. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
  4. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
  5. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
  6. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
  7. 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,151
  8. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
  9. 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
  10. 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
  11. 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 328
  12. 2023Low-Resource Languages Jailbreak GPT-4cited by 290
20 more
  1. 2023Fast-DetectGPT: Efficient Zero-Shot Detection of Machine-Generated Text via Conditional Probability Curvaturecited by 278
  2. 2023Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attackscited by 268
  3. 2024Jailbreak Attacks and Defenses Against Large Language Models: A Surveycited by 215
  4. 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attackscited by 189
  5. 2023MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbotscited by 172
  6. 2023Tensor Trust: Interpretable Prompt Injection Attacks from an Online Gamecited by 135
  7. 2024CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Modelscited by 84
  8. 2024Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Modelscited by 77
  9. 2024Alice in Wonderland: Simple Tasks Showing Complete Reasoning Breakdown in State-Of-the-Art Large Language Modelscited by 67
  10. 2024Query-Based Adversarial Prompt Generationcited by 55
  11. 2023GPT-who: An Information Density-based Machine-Generated Text Detectorcited by 38
  12. 2023Does GPT-4 pass the Turing test?cited by 37
  13. 2023Bot or Human? Detecting ChatGPT Imposters with A Single Questioncited by 25
  14. 2024Malla: Demystifying Real-world Large Language Model Integrated Malicious Servicescited by 24
  15. 2024When Can Transformers Count to n?cited by 22
  16. 2023Efficient Detection of LLM-generated Texts with a Bayesian Surrogate Modelcited by 18
  17. 2023Human or Not? A Gamified Approach to the Turing Testcited by 16
  18. 2024See What LLMs Cannot Answer: A Self-Challenge Framework for Uncovering LLM Weaknessescited by 15
  19. 2023Deepfake CAPTCHA: A Method for Preventing Fake Callscited by 7
  20. 2022GOTCHA: Real-Time Video Deepfake Detection via Challenge-Responsecited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 1; 2025: 3; 2026: 1.

5 papers.