ARB: A Matched Authorship-Rewriting Benchmark Dataset for AI-Text Detector Evaluation
Not on the map. Why?
Abstract (arXiv)
Standard AI-text detection benchmarks compare human-written text against text generated directly by large language models (LLMs). While prior work has shown that rewriting and paraphrasing can degrade detector performance, it remains unclear whether performance measured on this conventional benchmark predicts detector behavior when human-authored content is rewritten by an LLM. To address this gap, we introduce Authorship-Rewriting Benchmark (ARB), built from 1,800 human source texts (600 each from XSum, WritingPrompts, and OpenWebText) and four open-weight generators (Llama-3.2-3B, Qwen2.5-7B, Mistral-7B, Gemma-2-9B). Each source item yields four matched variants: human-written (HUMAN), direct LLM generation (Free-LLM), LLM-rewritten human text (H2L), and same-generator LLM-rewritten LLM text (LLM2L). We evaluated five detectors (FastDetectGPT, Binoculars-falcon-7b, RADAR, BERT-Defense, RoBERTa-Defense) at a strict 1%-false-positive operating point (TPR@1%FPR). FastDetectGPT and Binoculars-falcon-7b detected 91.2% and 93.5% of direct LLM text, but only 30.8% and 15.1% of human text an LLM had rewritten, a drop of 60-78 percentage points. The same detectors retained 78.3% and 83.0% recall when LLM text was rewritten by the same model, a much smaller decline of 10-13 points. RADAR followed the same pattern (66.8% to 12.2%), while BERT-Defense and RoBERTa-Defense stayed below 3% recall across all regimes. These results show that detector performance measured on the conventional human-vs-LLM benchmark does not transfer to human-authored text revised by an LLM, even though the same detectors remain largely robust to LLM-only rewriting.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 38 of its 53 references that are in the map. First posted on arXiv 31 Jul 2026.
Builds on
38 of 53 references.
References · 38
- 2018Hierarchical Neural Story Generationcited by 1,182
- 2022Large Language Models Are Human-Level Prompt Engineerscited by 1,020
- 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
- 2019GLTR: Statistical Detection and Visualization of Generated Textcited by 490
- 2024A Systematic Survey of Prompt Engineering in Large Language Models: Techniques and Applicationscited by 428
- 2023Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyondcited by 409
- 2023Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defensecited by 401
- 2023Fast-DetectGPT: Efficient Zero-Shot Detection of Machine-Generated Text via Conditional Probability Curvaturecited by 278
- 2019Automatic Detection of Generated Text is Easiest when Humans are Fooledcited by 260
- 2024Spotting LLMs With Binoculars: Zero-Shot Detection of Machine-Generated Textcited by 255
- 2023GPT detectors are biased against non-native English writerscited by 175
- 2024RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectorscited by 157
26 more
- 2023MAGE: Machine-generated Text Detection in the Wildcited by 130
- 2023Increasing Diversity While Maintaining Accuracy: Text Data Generation with Large Language Models and Human Interventionscited by 121
- 2023M4: Multi-generator, Multi-domain, and Multi-lingual Black-Box Machine-Generated Text Detectioncited by 118
- 2023Testing of Detection Tools for AI-Generated Textcited by 86
- 2023Red Teaming Language Model Detectors with Language Modelscited by 55
- 2024Raidar: geneRative AI Detection viA Rewritingcited by 51
- 2024M4GT-Bench: Evaluation Benchmark for Black-Box Machine-Generated Text Detectioncited by 43
- 2022Deepfake Text Detection: Limitations and Opportunitiescited by 37
- 2024DetectRL: Benchmarking LLM-Generated Text Detection in Real-World Scenarioscited by 37
- 2024Who Wrote This? The Key to Zero-Shot LLM-Generated Text Detection Is GECScorecited by 27
- 2025DAMAGE: Detecting Adversarially Modified AI Generated Textcited by 20
- 2024Balancing Diversity and Risk in LLM Sampling: How to Select Your Method and Parameter for Open-Ended Text Generationcited by 18
- 2024Learning to Rewrite: Generalized LLM-Generated Text Detectioncited by 13
- 2025DivScore: Zero-Shot Detection of LLM-Generated Text in Specialized Domainscited by 9
- 2024Humanizing the Machine: Proxy Attacks to Mislead LLM Detectorscited by 6
- 2024Understanding the Effects of Human-written Paraphrases in LLM-generated Text Detectioncited by 6
- 2026StealthRL: Reinforcement Learning Paraphrase Attacks for Multi-Detector Evasion of AI-Text Detectorscited by 4
- 2025Beyond Easy Wins: A Text Hardness-Aware Benchmark for LLM-generated Text Detectioncited by 3
- 2025PADBen: A Comprehensive Benchmark for Evaluating AI Text Detectors Against Paraphrase Attackscited by 3
- 2026'Your AI Text is not Mine': Redefining and Evaluating AI-generated Text Detection under Realistic Assumptionscited by 3
- 2025GradEscape: A Gradient-Based Evader Against AI-Generated Text Detectorscited by 2
- 2026Detecting the Machine: A Comprehensive Benchmark of AI-Generated Text Detectors Across Architectures, Domains, and Adversarial Conditionscited by 2
- 2026Spotlights and Blindspots: Evaluating Machine-Generated Text Detectioncited by 2
- 2026Feature-Augmented Transformers for Robust AI-Text Detection Across Domains and Generatorscited by 2
- 2024DUPE: Detection Undermining via Prompt Engineering for Deepfake Textcited by 1
- 2024Benchmarking of LLM Detection: Comparing Two Competing Approachescited by 1
Built on by
Citing papers per year: 2026: 1.
1 paper.
- 2026Forging LLM Authorship Fingerprints with Targeted Rewriting30 Sep 2026