Are You Human? An Adversarial Benchmark to Expose LLMs
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) have demonstrated an alarming ability to impersonate humans in conversation, raising concerns about their potential misuse in scams and deception. Humans have a right to know if they are conversing to an LLM. We evaluate text-based prompts designed as challenges to expose LLM imposters in real-time. To this end we compile and release an open-source benchmark dataset that includes 'implicit challenges' that exploit an LLM's instruction-following mechanism to cause role deviation, and 'exlicit challenges' that test an LLM's ability to perform simple tasks typically easy for humans but difficult for LLMs. Our evaluation of 9 leading models from the LMSYS leaderboard revealed that explicit challenges successfully detected LLMs in 78.4% of cases, while implicit challenges were effective in 22.9% of instances. User studies validate the real-world applicability of our methods, with humans outperforming LLMs on explicit challenges (78% vs 22% success rate). Our framework unexpectedly revealed that many study participants were using LLMs to complete tasks, demonstrating its effectiveness in detecting both AI impostors and human misuse of AI tools. This work addresses the critical need for reliable, real-time LLM detection methods in high-stakes conversations.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 32 of its 40 references that are in the map. First posted on arXiv 12 Oct 2024.
Builds on
32 of 40 references.
References · 32
- 2023GPT-4 Technical Reportcited by 18,132
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
- 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,151
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
- 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 328
- 2023Low-Resource Languages Jailbreak GPT-4cited by 290
20 more
- 2023Fast-DetectGPT: Efficient Zero-Shot Detection of Machine-Generated Text via Conditional Probability Curvaturecited by 278
- 2023Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attackscited by 268
- 2024Jailbreak Attacks and Defenses Against Large Language Models: A Surveycited by 215
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attackscited by 189
- 2023MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbotscited by 172
- 2023Tensor Trust: Interpretable Prompt Injection Attacks from an Online Gamecited by 135
- 2024CyberSecEval 2: A Wide-Ranging Cybersecurity Evaluation Suite for Large Language Modelscited by 84
- 2024Don't Listen To Me: Understanding and Exploring Jailbreak Prompts of Large Language Modelscited by 77
- 2024Alice in Wonderland: Simple Tasks Showing Complete Reasoning Breakdown in State-Of-the-Art Large Language Modelscited by 67
- 2024Query-Based Adversarial Prompt Generationcited by 55
- 2023GPT-who: An Information Density-based Machine-Generated Text Detectorcited by 38
- 2023Does GPT-4 pass the Turing test?cited by 37
- 2023Bot or Human? Detecting ChatGPT Imposters with A Single Questioncited by 25
- 2024Malla: Demystifying Real-world Large Language Model Integrated Malicious Servicescited by 24
- 2024When Can Transformers Count to n?cited by 22
- 2023Efficient Detection of LLM-generated Texts with a Bayesian Surrogate Modelcited by 18
- 2023Human or Not? A Gamified Approach to the Turing Testcited by 16
- 2024See What LLMs Cannot Answer: A Self-Challenge Framework for Uncovering LLM Weaknessescited by 15
- 2023Deepfake CAPTCHA: A Method for Preventing Fake Callscited by 7
- 2022GOTCHA: Real-Time Video Deepfake Detection via Challenge-Responsecited by 5
Built on by
Citing papers per year: 2024: 1; 2025: 3; 2026: 1.
5 papers.
- 2025From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystemcited by 11
- 2025Exploring Jailbreak Attacks on LLMs through Intent Concealment and Diversioncited by 9
- 2025Love, Lies, and Language Models: Investigating AI's Role in Romance-Baiting Scamscited by 3
- 2024Divide and Conquer: A Hybrid Strategy Defeats Multimodal Large Language Modelscited by 1
- 2026Distinguishing Artificial from Authentic: Evaluating LLMs for Detecting LLM-Generated Contentcited by 1
- 2026Distinguishing Artificial from Authentic: Evaluating LLMs for Detecting LLM-Generated Content13 May 2026
- 2025Love, Lies, and Language Models: Investigating AI's Role in Romance-Baiting Scams18 Dec 2025
- 2025From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem18 Jun 2025
- 2025Exploring Jailbreak Attacks on LLMs through Intent Concealment and Diversion20 May 2025
- 2024Divide and Conquer: A Hybrid Strategy Defeats Multimodal Large Language Models21 Dec 2024