Machine Text Detectors are Membership Inference Attacks
On the map: LLM safety and security → Membership inference attacks
Abstract (arXiv)
Although membership inference attacks (MIAs) and machine-generated text detection target different goals, their methods often exploit similar signals based on a language model's probability distribution, and the two tasks have been studied independently. This can result in conclusions that overlook stronger methods and valuable insights from the other task. In this work, we theoretically and empirically demonstrate the transferability, i.e., how well a method originally developed for one task performs on the other, between MIAs and machine text detection. We prove that the metric achieving asymptotically optimal performance is identical for both tasks. We unify existing methods under this optimal metric and hypothesize that the accuracy with which a method approximates this metric is directly correlated with its transferability. Our large-scale empirical experiments demonstrate very strong rank correlation (ρ ≈ 0.7) in cross-task performance. Notably, we also find that a machine text detector achieves the strongest performance among evaluated methods on both tasks, demonstrating the practical impact of transferability. To facilitate cross-task development and fair evaluation, we introduce MINT, a unified evaluation suite for MIAs and machine-generated text detection, implementing 15 recent methods from both tasks.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Membership inference attacks, one of 12 directions in LLM safety and security. Builds on 34 of its 46 references that are in the map. First posted on arXiv 22 Oct 2025.
Builds on
34 of 46 references.
Closest ancestors · 6
Same direction, newest first
- 2025Synthetic Data Can Mislead Evaluations: Membership Inference as Machine Text Detection20 Jan
- 2024ReCaLL: Membership Inference via Relative Conditional Log-Likelihoods23 Jun
- 2024Do Membership Inference Attacks Work on Large Language Models?12 Feb
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparison29 May
- 2023Analyzing Leakage of Personally Identifiable Information in Language Models1 Feb
- 2021Membership Inference Attacks From First Principles7 Dec
Other references · 28
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
- 2024The AI Scientist: Towards Fully Automated Open-Ended Scientific Discoverycited by 1,071
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 726
- 2019Release Strategies and the Social Impacts of Language Modelscited by 513
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2023Fast-DetectGPT: Efficient Zero-Shot Detection of Machine-Generated Text via Conditional Probability Curvaturecited by 287
16 more
- 2024Spotting LLMs With Binoculars: Zero-Shot Detection of Machine-Generated Textcited by 263
- 2019Automatic Detection of Generated Text is Easiest when Humans are Fooledcited by 261
- 2023DetectLLM: Leveraging Log Rank Information for Zero-Shot Detection of Machine-Generated Textcited by 210
- 2023Art or Artifice? Large Language Models and the False Promise of Creativitycited by 172
- 2024RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectorscited by 163
- 2023MAGE: Machine-generated Text Detection in the Wildcited by 132
- 2023Intrinsic Dimension Estimation for Robust Detection of AI-Generated Textscited by 112
- 2023Ghostbuster: Detecting Text Ghostwritten by Large Language Modelscited by 91
- 2022Machine Generated Text: A Comprehensive Survey of Threat Models and Detection Methodscited by 79
- 2023A Survey on Detection of LLMs-Generated Contentcited by 71
- 2025How much do language models memorize?cited by 61
- 2024Pretraining Data Detection for Large Language Models: A Divergence-based Calibration Methodcited by 55
- 2024M4GT-Bench: Evaluation Benchmark for Black-Box Machine-Generated Text Detectioncited by 43
- 2024Evaluating Copyright Takedown Methods for Language Modelscited by 43
- 2024Training-free LLM-generated Text Detection by Mining Token Probability Sequencescited by 35
- 2025Lossless Compression of Large Language Model-Generated Text via Next-Token Predictioncited by 5
Built on by
Citing papers per year: 2025: 1; 2026: 1.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2024Scaling Up Membership Inference: When and How Attacks Succeed on Large Language Models
- 2024MIA-Tuner: Adapting Large Language Models as Pre-training Text Detector
- 2024A Statistical and Multi-Perspective Revisiting of the Membership Inference Attack in Large Language Models
- 2024Sampling-based Pseudo-Likelihood for Membership Inference Attacks
- 2026Detecting Data Contamination in Large Language Models
- 2025Exploring the limits of strong membership inference attacks on large language models
- 2025Membership Inference Attacks on Tokenizers of Large Language Models
- 2023Assessing Privacy Risks in Language Models: A Case Study on Summarization Tasks