PreprintCited by 267Authorship Attribution and ProfilingNatural Language Processing TechniquesTopic Modeling

Automatic Detection of Generated Text is Easiest when Humans are Fooled

Open access
Ippolito, Daphne, Duckworth, Daniel, Callison-Burch, Chris, Eck, Douglas·2019·arXiv

Abstract

Recent advancements in neural language modelling make it possible to rapidly generate vast amounts of human-sounding text. The capabilities of humans and automatic discriminators to detect machine-generated text have been a large source of research interest, but humans and machines rely on different cues to make their decisions. Here, we perform careful benchmarking and analysis of three popular sampling-based decoding strategies---top-$k$, nucleus sampling, and untruncated random sampling---and show that improvements in decoding methods have primarily optimized for fooling humans. This comes at the expense of introducing statistical abnormalities that make detection easy for automatic systems. We also show that though both human and automatic detector performance improve with longer excerpt length, even multi-sentence excerpts can fool expert human raters over 30% of the time. Our findings reveal the importance of using both human and automatic detectors to assess the humanness of text generation systems.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

DataCite · 10.48550/arxiv.1911.00650

Cites

29 of 29 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • The rest of the zero-shot detectors also perform poorly after the attack.

    “The rest of the zero-shot detectors (Solaiman et al., 2019; Gehrmann et al., 2019; Ippolito et al., 2019) also perform poorly after our attack.”

    From Can AI-Generated Text be Reliably Detected? (2023) · cites this paper as Ippolito et al., 2019

    The Histogram-of-Likelihood Ranks section describes likelihood-based detection baselines, so the paper is relevant to the detectors being cited. It does not describe them as zero-shot, and its Automatic Detection Results section does not test performance after the citing authors’ attack. That post-attack result is the citing authors’ own finding, not a finding established by this source. (LLM, conf=0.78)

    Experimental — accuracy not yet measured
  • Tools by Solaiman et al. (2019) and Ippolito et al. (2020) showed an encouraging ability in detecting machine created text, but were not tested against the latest generation of LLMs.

    “Solaiman et al. (2019) and Ippolito et al.(2020) also both present tools which showed an encouraging ability in detecting machine created text, although these tools were not tested against the latest generation of LLMs.”

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

2 of the 31 references couldn’t be matched to a known paper.

Research works printed but not linked: 4

  1. Timothy Niven and Hung-Yu Kao. 2019. Probing neu- ral network comprehension of natural language ar- guments. In Proceedings of the 57th Annual Meet- ing of the Association for Computational Linguis- tics, pages 4658-4664, Florence, Italy. Association for Computational Linguistics.
  2. Rico Sennrich, Barry Haddow, and Alexandra Birch. 2016. Neural machine translation of rare words with subword units. In Proceedings of the 54th An- nual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers), pages 1715- 1725.
  3. Alan Turing. 1950. Computing machinery and intelligence-am turing. Mind, 59(236):433.
  4. Rowan Zellers, Ari Holtzman, Hannah Rashkin, Yonatan Bisk, Ali Farhadi, Franziska Roesner, and Yejin Choi. 2019. Defending against neural fake news. CoRR, abs/1905.12616. · arXiv

Cited by

Sorted by citations

Authors
Ippolito, D., Duckworth, D., Callison-Burch, C., & Eck, D.
Affiliations
  • University of Pennsylvania (US)
  • Google (United States) (US)
Venue
arXiv
Publisher
arXiv
Published
2019
Pages
1808-1822
ISSN
0736-587X (ISSN-L)
OpenAlex
W3021153741
Cited by
264
References
31
Citations by year
2026: 39 · 2025: 64 · 2024: 38 · 2023: 63 · 2022: 18 · 2021: 29 · 2020: 13
FWCI
11.75
Type
conference paper
Language
en
Open access
Locations
  • Proceedings of the conference - Association for Computational Linguistics. Meeting (publishedVersion, cc-by)
  • arXiv (Cornell University) (submittedVersion)
  • arXiv (Cornell University)
Funders
Defense Advanced Research Projects Agency (FA8750-19-2-1004, FA8750)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Authorship Attribution and Profiling
  • Physical Sciences › Computer Science › Artificial Intelligence › Natural Language Processing Techniques
  • Physical Sciences › Computer Science › Artificial Intelligence › Topic Modeling
Keywords
AI-generated text detection, decoding strategies, top-k sampling, nucleus sampling, random sampling, human raters, text generation evaluation

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review